Patching up the pieces.

Patch Tuesday brings a record-breaking haul of fixes. Ivanti warns of an exploited VPN zero-day. An international crackdown targets West African scam compounds. A cyberattack stops work on a major European tunnel. Perceived Starshield speed limits disrupt Ukrainian drone operations. Canonical battles a sustained DDoS attack. Anthropic warns of self-replicating AI worms. The FTC accuses cybersecurity firms of exploiting sextortion victims. Microsoft and partners disrupt a major cybercrime marketplace. Rob T. Lee, from SANS, and Lynn Dohm, from WiCyS, are sharing a preview of the SANS 2026 Difference Maker Awards. Taking a Patch Tuesday snow day.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Rob T. Lee, Chief of Research and Chief AI Officer at SANS, and Lynn Dohm, Executive Director at WiCyS, sharing a preview of the SANS 2026 Difference Maker Awards.

Selected Reading

Patch Tuesday

Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days (Bleeping Computer)

Adobe Patches 140 Vulnerabilities Across 10 Products (SecurityWeek)

SAP warns of maximum severity OAuth2 SSRF security flaw (Bleeping Computer)

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN (SecurityWeek)

West African scam compounds raided, more than 100 suspected trafficking victims ‘rescued’ (The Record)

Cyberattack halts Denmark-Germany tunnel construction (UA NEWS)

Starlink restrictions affecting Ukraine's front line operations, Kyiv says (BBC