Candiru spyware infects Al Jazeera, Senators AI request, Microsoft crashes phishers

CenterPoint Energy reveals data breach numbers

https://www.securitymagazine.com/articles/102658-1m-impacted-by-centerpoint-energy-data-breach

Zero-Click Candiru spyware infections at Al Jazeera tracked to targeted online ads

https://thehackernews.com/2026/10/citizen-lab-traces-zero-click-candiru.html

UK Legal Aid Agency Hack Scope Widens After Forensic Review

https://www.securityweek.com/uk-legal-aid-agency-hack-scope-widens-after-forensic-review/

Bank of America needed 1,000 contractors to patch bugs found by Mythos

https://www.theregister.com/security/2026/10/15/bank-of-america-had-to-bring-in-1000-contractors-to-patch-all-the-bugs-mythos-identified/5303275

Microsoft takes down 3 major China-based phishing platforms

https://therecord.media/microsoft-takes-down-3-major-chinese-phishing-platforms

Windows Server 2022 reaches end of mainstream support

https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-server-2022-reached-end-of-mainstream-support/

Senators press for AI safety and security

https://cyberscoop.com/congress-presses-trump-administration-ai-safety-cybersecurity/

French supermarket refrigeration attack widens

https://www.securityweek.com/supermarket-refrigeration-attack-widens-to-copeland-dixell-controllers/

Get the show notes here: https://cisoseries.com/cybersecurity-news-october-16-2026/

Huge thanks to our episode sponsor, Guardsquare

Attackers are treating your mobile app like an open book. Sixty-three percent of security leaders recently detected app tampering, cloning, or unauthorized modifications. When your code runs in an untrusted environment, you need runtime self-protection and code hardening to keep attackers out. Address tampering before it starts. Learn more at Guardsquare.com.