News · 24 October 2026
QCT Studio now has five practices
Post-quantum, AI and privacy, AI agent security, cybersecurity and technology, each led by a named senior lead.
QCT Studio team
Insights
Ideas for a more secure tomorrow.
What we are seeing in post-quantum security, cybersecurity and AI, from the people doing the work. Plus firm news, coverage and the latest headlines from across the industry.
News
News · 13 October 2026
The two-week readiness sprint, explained
Fixed fee, two weeks, and three things you can take to the board: an exposure heatmap, a Mosca analysis and ten priorities.
QCT Studio team
Live from the industry
Latest in cybersecurity
Headlines from independent security publications and agencies, refreshed every 30 minutes. Each one opens the original article.
Dark Reading
UK Wades Into Tech Sovereignty Amid AI Policy Changes (Dark Reading, opens in a new tab)
The UK is betting on domestic AI and cyber investment to reduce reliance on US tech — but security leaders question whether the funding is too fragmented and too late.
The Record
Medical services company settles with 4 states over 2023 hack of sensitive patient records (The Record, opens in a new tab)
The case, brought by AGs in Connecticut, New Jersey, New York and Michigan, targeted the medical transcription, coding and imaging subsidiaries of the Nevada-based Perry Johnson Companies.
The Record
Certificate authority DigiCert reports data breach involving business customer info (The Record, opens in a new tab)
DigiCert explained that over the summer, an internal business system was "externally accessible when that was not intended," and someone had created an unauthorized account.
SecurityWeek
Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks (SecurityWeek, opens in a new tab)
The emergency package comes after dozens of companies and government agencies were hit by unauthorized access to their systems and leaks of client data, prompting uneasiness across Japan. The post Japan Announces Emergency Cybersecurity…
Dark Reading
AI Gave Your Incident Archive a Second Job (Dark Reading, opens in a new tab)
Security records are increasingly being used by vendors to train their models, creating new risks for enterprises.
The Record
FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers (The Record, opens in a new tab)
Patrick Steven Yaroch, 37, is facing up to 20 years in prison on wire fraud and money laundering charges after admitting to using his position on an FBI investigative squad to steal more than $2.4 million in cryptocurrency to cover his…
The Hacker News
Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time (The Hacker News, opens in a new tab)
Some WordPress sites can still be attacked while they install the fix for an actively exploited flaw, according to Umut Bayram, the Picus Security researcher who found it. The update that installs the fix still unpacks its files using the…
The Hacker News
Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot (The Hacker News, opens in a new tab)
Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian. The vulnerability, tracked as CVE-2026-123158 (CVSS score:…
The Hacker News
OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits (The Hacker News, opens in a new tab)
OpenAI on Thursday unveiled GPT‑6 Cyber, which it described as a major step forward in security research that brings together stronger cybersecurity capabilities with a step-change improvement in model alignment. The new model is "more…
SecurityWeek
In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days (SecurityWeek, opens in a new tab)
Noteworthy stories that might have slipped under the radar: Synology warns about NAS ransomware attacks, Flowise ‘hello’ attacks, Chainalysis breach impact expands. The post In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP…
The Record
CEO-spoofing scammers used AI to help steal more than $100 million, feds say (The Record, opens in a new tab)
The U.S. is working on extraditing three suspects from Europe in a case involving more than $100 million in fraud from CEO impersonations.
SecurityWeek
DigiCert Data Breach Impacts Business Customer Information (SecurityWeek, opens in a new tab)
Hackers created an account on an internal system and accessed names, email addresses, phone numbers, and business addresses. The post DigiCert Data Breach Impacts Business Customer Information appeared first on SecurityWeek .
Dark Reading
Why Europe's Freezer Hacks Spread So Far, So Fast (Dark Reading, opens in a new tab)
Europe's supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale.
SecurityWeek
OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line (SecurityWeek, opens in a new tab)
Rated Critical for cybersecurity, OpenAI’s new model beats GPT-5.6 Cyber at exploitation while staying in scope more reliably. The post OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line appeared first on SecurityWeek .
SecurityWeek
US Agencies Urge Organizations to Harden Refrigeration Controllers (SecurityWeek, opens in a new tab)
The recommendations come amid attacks targeting fridges and freezers in supermarkets and blood banks in Europe. The post US Agencies Urge Organizations to Harden Refrigeration Controllers appeared first on SecurityWeek .
Infosecurity Magazine
ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns, Censys Finds (Infosecurity Magazine, opens in a new tab)
A new Censys report showed that the use of ARTEX, an AI pentesting tool popular with threat actor, could be spreading far beyond initially reported campaigns
Help Net Security
OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158) (Help Net Security, opens in a new tab)
An OpenSSH flaw that lets remote attackers log into passwordless accounts on Alpine Linux and other musl-based systems is being exploited, threat intelligence firm Previdian has warned. The flaw (CVE-2026-123158), nicknamed sshole by…
SecurityWeek
Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack (SecurityWeek, opens in a new tab)
The October incident will cut fourth-quarter sales by up to €250 million and has led Ahold Delhaize to lower its 2026 outlook. The post Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack appeared first on…
SecurityWeek
Researchers Find Residential Proxies on White House Network (SecurityWeek, opens in a new tab)
In a month, 28 residential proxy services used 6 addresses, mainly between 5 p.m. and midnight, Eastern Time. The post Researchers Find Residential Proxies on White House Network appeared first on SecurityWeek .
SecurityWeek
OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass (SecurityWeek, opens in a new tab)
On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters. The post OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass appeared first on SecurityWeek .
The Hacker News
Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It (The Hacker News, opens in a new tab)
A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates. The fixed build, 11.2609.401.0, was the newest Paint…
The Hacker News
Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers (The Hacker News, opens in a new tab)
A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person's computer, researchers at Forever Security, an endpoint security company, showed in a test. The attack needs Dispatch, a Claude feature…
Infosecurity Magazine
CISA, FBI Urge Action to Protect Industrial Refrigeration Networks (Infosecurity Magazine, opens in a new tab)
The CISA advisory follows a swathe of attacks in which hackers have tampered with the temperatures of internet-exposed supermarket refrigeration systems
The Hacker News
The Flood is Coming And The Pipes Were Already Full (The Hacker News, opens in a new tab)
An update on Athena, and some unsolicited predictions on what's coming next On Saturday, Dario Amodei published We Must Pace the Frontier. I agree with him. Go read it if you haven't. I've spent the summer looking at what these models…
Help Net Security
Residential proxy traffic caught leaving the White House network (Help Net Security, opens in a new tab)
The White House network has been working as an exit point for residential proxy services, a setup that may open a path into one of the most closely guarded networks in the world, Layer3 Intel found. In a blog post, the threat intelligence…
Help Net Security
OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed (Help Net Security, opens in a new tab)
OpenAI has introduced GPT-6 Cyber, a version of GPT-6 Astra trained to find software vulnerabilities, test how attackers could exploit them, and help develop fixes. The model is designed for authorized security testing of websites and…
Help Net Security
Sarajevo Cyber Security Summit 2026 puts the Western Balkans’ cyber resilience in focus (Help Net Security, opens in a new tab)
Cyber Security Summit 2026 in Sarajevo will examine the practical security questions organizations face when a supplier, network device or critical digital service fails: what breaks, who decides, and how quickly can operations recover? A…
The Quantum InsiderPost-quantum
Toshiba Secures UK Contract to Develop Quantum Networking Technologies (The Quantum Insider, opens in a new tab)
Insider Brief PRESS RELEASE — Toshiba Europe has been awarded a contract by Innovate UK, part of UK Research and Innovation (UKRI), to develop technologies that can help unlock the commercial potential of quantum networks. The project will…
Infosecurity Magazine
Half of Security Leaders Report Sensitive Data Exposure Through AI Tools (Infosecurity Magazine, opens in a new tab)
BlackFog found a lack of visibility into data being shared with AI tools, even those approved for use in the enterprise
Help Net Security
US agencies warn attackers are targeting refrigeration systems that protect food and medicine (Help Net Security, opens in a new tab)
Threat actors are going after the controllers that keep grocery store freezers and cold storage rooms at safe temperatures, and they may push those units into continuous heating and defrost cycles, five US federal agencies warned in a…
Dark Reading
UK Warns Its Critical Infrastructure Faces Grave Risk (Dark Reading, opens in a new tab)
Britain's new Labour-led government is making a concerted push to get ahead of the AI risks to its national networks and the industrial complex.
The Quantum InsiderPost-quantum
QNu Labs Launches Corporate Training Programme on Quantum-Safe Security (The Quantum Insider, opens in a new tab)
Insider Brief PRESS RELEASE — QNu Labs (www.qnulabs.com), a global leader in end-to-end hybrid quantum cybersecurity solutions, has introduced a specialised corporate training programme in quantum cryptography and security under QNu…
The Hacker News
Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services (The Hacker News, opens in a new tab)
Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for all users. "While we investigated, we…
Help Net Security
November 2026 Patch Tuesday forecast: Old software continues to bite (Help Net Security, opens in a new tab)
How did you enjoy October 2026 Patch Tuesday? Were there enough CVEs reported to keep you busy for the rest of the year or are you finished and ready for another round next week? They released the regularly scheduled update nearly two and…
Help Net Security
Security certification is a snapshot, and buyers read too much into it (Help Net Security, opens in a new tab)
In this Help Net Security video, Mariia Bakhtina, a research specialist at Masaryk University, explains what a Common Criteria or FIPS-140 certificate does and does not promise. In her team’s analysis, about 6 in 10 vulnerabilities matched…
Help Net Security
87% say their AI controls need to work better (Help Net Security, opens in a new tab)
The AI running inside large companies has stopped waiting for permission. Across five categories of AI, from chatbots to process automation, more than half of 3,600 business decision-makers say the systems their teams use can act within…