Naval hack, Muse exposes secrets, Army researching offensive AI hacking

Russian-linked attacks hit naval shipbuilder
https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html

Muse exposes secrets when sharing chats
https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-when-they-share-conversations/

Army Cyber Command looking to offload attacks to AI
https://web.archive.org/web/20261020134149/https://theintercept.com/2026/10/19/army-autonomous-ai-agents-arcyber/

DeepSeek booted from federal agencies
https://www.wsj.com/tech/ai/dhs-orders-deepseek-technology-removed-from-federal-civilian-it-systems-060b6d3d?st=m6DV2n

DHS asked CISA to hack voting machine
https://www.propublica.org/article/cisa-election-security-donald-trump
EU doesn't require patching hacked freezers
https://therecord.media/eu-cyber-law-wont-force-fixes-for-fridges-in-french-attack

Cairn platform abused by threat actors
Security Week: https://www.securityweek.com/ai-platform-cairn-abused-to-hack-over-100-organizations/
Reuters: https://www.reuters.com/legal/government/how-one-hacker-used-ai-agents-few-thousand-dollars-break-into-scores-sites-2026-10-19/

Palo Alto still seeing active PAN-OS exploits
https://thehackernews.com/2026/10/qilin-and-inc-ransomware-groups-exploit.html

LLMs getting better at COBOL
https://openai.com/index/low-resource-programming-languages/
Get the show notes here: https://cisoseries.com/naval-hack-muse-exposes-secrets-army-researching-offensive-ai-hacking/
Huge thanks to our episode sponsor, ThreatLocker

Attackers do not always bring their own tools. AI can help them find ways to misuse software already trusted by the organization. Today's tip: approval should not mean unlimited access. Define what trusted applications can reach and what they can do. Learn how ThreatLocker applies this principle at threatlocker.com/ciso today.