• OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken
• UK proposes 14-year jail terms for subsea cable saboteurs
• Microsoft 365 accounts compromised at 79 organizations, no passwords needed
• Gaming Giant Capcom Confirms Data Breach Exposed Users’ Personal Information
• Widespread Token-Spraying Attacks Target Microsoft 365 Accounts For Email Compromise
• Attacks on Tech Firms Behind Most Third-Party Data Breach Victims
• Capcom data breach exposes 11.7 million account records
• Hackers hijack exposed AI models to launch cyberattacks at victims’ expense
• Google opens its cloud to rival OpenAI, promises business data won’t train models
• Drone program compliance: What a CTO says most agencies get wrong
• New infosec products of the week: October 23, 2026
• EU Regulators to Investigate Booking.com Over Scam Risks
• Iranian Hacking Group Found Hosting C2 Infrastructure in the US
• Microsoft: Chinese State Actor Used AI to Compromise ConnectWise Tenants
• PHP2Shell Exploitation Attempt Detected by Amazon Four Days Before Vulnerability Disclosure
• Cloud Security Maturity Lags Despite Widespread Adoption, SANS Warns
• New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity
• Symantec Uncovers AI Agent Hijacking Models for Autonomous Cyber-Attacks
• Ransomware Attacks Rise as Rival Gangs Vie For Market Supremacy
• SafePay Has Compromised 600 Critical Infrastructure Victims Worldwide, CISA Warns
• Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patches
• Children’s Data Stolen After Ransomware Attack Compromises ‘Password1’ Account
• Head of AI Security Roles Surge in Large Organizations

The OpenSSL project released version 4.1.0, adding support for DTLS 1.3 and listing four known bugs in the DTLS code that ships with it. DTLS is the variant of TLS built for datagram transports such as UDP, and version 1.3 is defined in RFC 9147. The bugs fall on developers who adopt DTLS 1.3 or the DTLS support newly added to OpenSSL’s SSL listener API. Two of them can make an application misread a connection’s …