Poetry-powered botnet, Flock hits a roadblock, Outlook blocks risky installers

Botnet takes orders from a poem https://cyberscoop.com/poellm-malware-botnet-poem-lumen-black-lotus-labs/

Flock's warrantless tracking hits a roadblock https://therecord.media/oklahoma-flock-ruing-supreme-court-chatrie-decision

npm packages come with unwanted extras https://thehackernews.com/2026/10/eight-malicious-npm-packages-downloaded.html

AWS gives AI agents a sandbox with house rules https://www.theregister.com/ai-and-ml/2026/10/07/aws-launches-open-source-ai-agent-sandbox-to-prevent-yolo-mode-disasters/5301687

Outlook closes the door on risky installers https://www.bleepingcomputer.com/news/microsoft/microsoft-outlook-to-block-msix-attachments-used-in-attacks/

Arizona court breach reaches back 30 years https://therecord.media/arizona-courts-say-hackers-stole-info-on-over-1-million

Utility customers' accounts exposed https://www.securityweek.com/georgia-power-alabama-power-data-breach-hits-400000-accounts/

FortiBleed changes the locks on VPN admins https://www.bleepingcomputer.com/news/security/fbi-ongoing-fortibleed-attacks-lock-out-fortigate-vpn-admins/

Get the show notes here: https://cisoseries.com/cybersecurity-news-october-8-2026/

Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.