Naval hack, Muse exposes secrets, Army researching offensive AI hacking
Show notes
Russian-linked attacks hit naval shipbuilder https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html
Muse exposes secrets when sharing chats https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-when-they-share-conversations/
Army Cyber Command looking to offload attacks to AI https://web.archive.org/web/20261020134149/https://theintercept.com/2026/10/19/army-autonomous-ai-agents-arcyber/
DeepSeek booted from federal agencies https://www.wsj.com/tech/ai/dhs-orders-deepseek-technology-removed-from-federal-civilian-it-systems-060b6d3d?st=m6DV2n
DHS asked CISA to hack voting machine https://www.propublica.org/article/cisa-election-security-donald-trump
EU doesn't require patching hacked freezers https://therecord.media/eu-cyber-law-wont-force-fixes-for-fridges-in-french-attack
Cairn platform abused by threat actors Security Week: https://www.securityweek.com/ai-platform-cairn-abused-to-hack-over-100-organizations/ Reuters: https://www.reuters.com/legal/government/how-one-hacker-used-ai-agents-few-thousand-dollars-break-into-scores-sites-2026-10-19/
Palo Alto still seeing active PAN-OS exploits https://thehackernews.com/2026/10/qilin-and-inc-ransomware-groups-exploit.html
LLMs getting better at COBOL https://openai.com/index/low-resource-programming-languages/
Get the show notes here: https://cisoseries.com/naval-hack-muse-exposes-secrets-army-researching-offensive-ai-hacking/
Huge thanks to our episode sponsor, ThreatLocker
Attackers do not always bring their own tools. AI can help them find ways to misuse software already trusted by the organization. Today's tip: approval should not mean unlimited access. Define what trusted applications can reach and what they can do. Learn how ThreatLocker applies this principle at threatlocker.com/ciso today.