• New infosec products of the week: October 23, 2026
• EU Regulators to Investigate Booking.com Over Scam Risks
• LiteLLM hit by second supply chain attack this year, users urged to rotate credentials
• Iranian Hacking Group Found Hosting C2 Infrastructure in the US
• OpenAI’s coding agents talked themselves out of being monitored
• New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619
• Claude Security can now spot vulnerabilities that reappear in code
• Microsoft: Chinese State Actor Used AI to Compromise ConnectWise Tenants
• PHP2Shell Exploitation Attempt Detected by Amazon Four Days Before Vulnerability Disclosure
• Cloud Security Maturity Lags Despite Widespread Adoption, SANS Warns
• New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity
• Symantec Uncovers AI Agent Hijacking Models for Autonomous Cyber-Attacks
• Ransomware Attacks Rise as Rival Gangs Vie For Market Supremacy
• SafePay Has Compromised 600 Critical Infrastructure Victims Worldwide, CISA Warns
• Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patches
• Children’s Data Stolen After Ransomware Attack Compromises ‘Password1’ Account
• Head of AI Security Roles Surge in Large Organizations
• Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk
• AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace, Splunk Finds
• Siemens Customers Targeted by ClickFix Attackers Exploiting DLL Side-Loading Flaw

Here’s a look at the most interesting products from the past week, featuring releases from AppGate, IDENTOS, Sweet Security, and ThreatModeler. Sweet Security adds one-click protection for vulnerable cloud workloads Sweet Security has announced the release of Virtual Patching, a new capability that protects running cloud and AI applications from specific vulnerabilities the moment they are identified. Security teams can enforce protection in one click while engineering develops, tests, and deploys a permanent fix. ThreatModeler …