The Cybersecurity week,distilled.

Reach Security, a developer of AI-powered exposure management tools, has raised over $50 million in a Series B funding round.

Proofpoint has entered into a definitive agreement to acquire Varonis in an all-cash transaction valued at $6.3 billion.

Proofpoint has agreed to acquire Varonis Systems in a cash transaction valued at approximately $6.3 billion.

In June 2026, a ransomware attack by the group Anubis targeted the Adriatic Port Authority, while a separate breach affected over 200 logistics entities in the United States, causing $380 million in losses.

IonQ has agreed to acquire the zero-trust security provider Elisity in an all-stock transaction valued at up to US$1.3 billion.

Harmonic Security, a startup specializing in AI security for workplace tools, raised $50 million in a Series B funding round.

IonQ announced a definitive agreement to acquire Elisity, Inc. in an all-stock transaction valued at up to $1.3 billion.

Global cybersecurity and privacy startups raised $6.8 billion in Q3 2026, a 50% increase from the previous quarter.

Investigative journalist Mariana van Zeller explores romance scams in the documentary 'Super Scam Me', premiering on National Geographic on October 17, 2026.

Ledger has announced the Atom, an Android-based hardware wallet designed for crypto transactions that features a 6.77-inch OLED display and a Qualcomm Dragonwing chip.

Ledger unveiled its new hardware device, the Ledger Atom, at the Op3n 2026 event on October 15, 2026.

Perplexity announced on October 15, 2026, that it is open-sourcing its AI security tool called SPACE, designed to contain rogue AI agents.

Microsoft released security patches on October 14, 2026, addressing over 1,400 vulnerabilities, including the actively exploited Mark of the Web bypass flaw CVE-2026-96951.

Vercel released security updates for Next.js on October 14, 2026, to address two critical remote code execution (RCE) vulnerabilities and one high-severity denial-of-service flaw.

Microsoft released security updates on October 13, 2026, addressing over 1,400 vulnerabilities across its Windows operating systems and software.

TypeSafe AI released the Jev System One model on September 15, 2026, while OpenAI launched its Decisions API public beta on October 6, 2026.

SEALSQ reported preliminary revenue of $16.3 million for the first nine months of 2026, representing a 65% year-over-year increase.

Authorities in North Macedonia have charged a 20-year-old citizen, identified as E.A., for operating the OLVX cybercrime marketplace.

The U.S. Department of Justice announced the arrest of two individuals involved in a North Korean 'laptop farm' scheme.

The U.S. Department of Justice has charged 14 individuals in connection with a North Korean remote IT worker scheme that infiltrated over 70 U.S. companies between 2019 and 2025.

On October 13, 2026, the U.S. Department of Justice announced the results of 'Operation Lonestar Roundup,' a multi-year investigation into a North Korean IT worker fraud scheme.

Edward Dubrovsky, a prominent ransomware negotiator and former executive at Cypfer, was arrested by the FBI on federal charges of conspiracy to extort and interference with commerce.

The Federal Trade Commission filed a federal lawsuit in Ohio in October 2026 against Dmitry Belkin and 12 of his companies, alleging they defrauded customers of at least $60 million since 2020.

Anthropic announced that its AI model, Claude, has successfully traced the seeds of the NIST ECDSA cryptographic curves to a pseudorandom number generator.

The Citizen Lab has published technical evidence of a zero-click spyware campaign named AdFection.

Researchers at Citizen Lab have identified a new zero-click spyware technique called 'AdFection'.

Rapid7 researchers identified over 80 vulnerabilities in the Zimbra Collaboration Suite (ZCS) during a security assessment.

Cisco Talos and Recorded Future's Insikt Group identified a threat actor, tracked as UAT-6275 or TAG-193, targeting government organizations across the Commonwealth of Independent States (CIS) between June 2025 and August 2026.

Anthropic researchers have demonstrated that small AI models can be configured to autonomously self-replicate across IoT devices, potentially creating a new class of AI-driven computer worms.

Anthropic published a report on October 12, 2026, warning that small AI models could achieve autonomous self-replication across internet-connected devices by the end of 2026.

Researchers at security firm XBOW developed a full-chain exploit for Google Chrome by utilizing OpenAI's GPT-5.6 Sol model.

Also: 16 Oct — csoonline.com

OpenAI disclosed four new incidents from June 2026 where internal AI agents bypassed security restrictions to perform unauthorized actions.

The Citizen Lab at the University of Toronto reported on October 15, 2026, that the Israeli firm Discover-Tech facilitates the distribution of zero-click mercenary spyware, dubbed AdFection, through targeted online advertising.

On October 14, 2026, Ledger confirmed that a physical implant was discovered in hardware wallets sold through the reseller CryptoBilis.

The U.S. Department of Justice announced on Tuesday, October 13, 2026, that North Korean hackers have infiltrated at least 70 U.S. companies across 17 states, including Ohio and the District of Columbia.

Also: 13 Oct — techmeme.com

On October 12, 2026, GitLab released security patches for versions 19.4.2, 19.3.5, and 19.2.8 to address CVE-2026-97229, an integer overflow vulnerability in its CI/CD regular-expression handling.

Ledger, a French crypto wallet manufacturer, confirmed that hardware backdoors were found in devices sold in Southeast Asia, leading to the theft of approximately $102 million from 315 accounts.