Heartbeat 26.09

What’s New From Us

1. Securitybeat Advisors Joins NBCC
2. Launch of Penetration Testing Services,
3. Launch of Securitybeat Certified
4. Free Security Awareness Newsletter Service for Clients and Partners to be published every 2 weeks. 
5. Past newsletters archived to Securitybeat Advisors Blog.

Newsworthy Posts

1. Critical Netscaler Vulnerability
2. Code Has More Than Rust
3. Medusa Turning Data to Stone
4.  Local Vulnerability in Maritime Navigation
5. AI Strides to Beat Test
6. Supply Chain Threat in Chains?
7. Nightmare Eclipse Creating Nightmare for Kaspersky
8. Artfactory – Toad or Princess?
9. Positioning CTEM Over VM.
10. Can IDs Ever Prove Identity?
11. Nightmare for Crowdstrike
12. ShinyHunters Hits McKesson
13. Pace Slow in Boston Scientific Breach Recovery
14. Catch 22 to Government AI Testing

Partner Perspective

1. Coyote Brown / Cyber Buyer
   1. Top security news for the past 2 weeks:
      • Data Breaches
        • 153 Million Driver License Images Offered on Dark Web
        • US launches Project Watershed 250 to tackle water system cybersecurity vulnerabilities with AI, red-team exercises
        • New Microsoft Defender ‘ShieldCrash’ zero-day grants SYSTEM access
        • Anthropic Says Russian Hackers Used Claude AI to Automate Malware Evasion
      • Ransomware
        • Qilin hackers leak ATF data, exposing criminal investigations and phone records
        • AI agents carried out every step of this ransomware attack
        • ShinyHunters threatens Florida DMV data leak by Sept. 11
        • Windows 11 just dropped the tool ransomware abused, Microsoft says don’t restore WMIC
      • AI Security
        • Nearly 700 rogue AI agents coordinated in the Hugging Face attack
        • OpenAI is building ‘automated shutdown’ capabilities for AI tools, letter to lawmakers says 
        • NSA warns China is stealing U.S. AI models at industrial scale
        • Senators from both parties question OpenAI on breach of AI startup Hugging Face
      • Governance – GRC
        • CMMC Compliance Third-Party Assessment Is Paused. The Risk Isn’t.
        • White House looks to revamp cyber supply chain security data calls
        • Florida AG proposes criminal penalties for AI companies over chatbot crimes
        • Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days
   2. New vendors :
      1. QIZ – Post-Quantum Cryptography (PQC) Readiness
      2. Stealth Mode – Endpoint and AI Security
      3. Stealth Mode – AI Security
      4. Elezar – Autonomous Threat Operations
2. The Privacy Professor
   • Tips of the Month – May 2026, June 2026, July 2026, August 2026