Hello, stay ahead with CISO Brief 🚀

🛡️ CrowdStrike announced plans to acquire Dreadnode and Fiddler AI to extend its Falcon platform into automated AI security testing and agent observability. The deals, revealed at Fal.Con Europe 2026, aim to add pre-deployment testing for models and apps, plus runtime monitoring and explainability for AI agents, with integrations due in Q4 fiscal 2027. CrowdStrike said the acquisitions will map findings to standards such as OWASP, MITRE ATLAS and NIST.

🔒 CrowdStrike’s Fal.Con emphasized the shift from traditional software to agentic AI that can act unpredictably, creating both defensive opportunities and novel internal attack surfaces. The company has integrated agent orchestration, shared memory, and continuous red-teaming into its Falcon platform to speed triage and automate tasks while introducing governance challenges. New tools like Falcon Guardian and the planned Falcon Observe (via the Fiddler AI acquisition) aim to monitor and control agent behavior, but experts warn SOCs must balance speed with oversight, verification, and independent testing.

🔎 Russian authorities arrested three suspected members of the threat group VasyGrek (aka Fluffy Wolf) and dismantled its infrastructure after attributing phishing-based thefts and malware campaigns to them. The Ministry of Internal Affairs said the suspects embezzled funds and created and distributed malicious software, using phishing domains, foreign servers, and dark web tools. Law enforcement seized computers and devices during searches of homes and office premises tied to the operation.

🛡️ Google released its November Android security bulletin addressing a Critical flaw, CVE-2026-58868, which can enable remote code execution without user interaction on Android 14–17 when protections are bypassed. The patch is delivered with security patch level 2026-11-01 or later; a broader set of fixes requires 2026-11-05. The bulletin lists 216 vulnerabilities, 23 rated Critical, and notes no confirmed exploitation as of early November.

🛡️ The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity WordPress Core vulnerability (CVE-2026-119977) to its Known Exploited Vulnerabilities catalog after observing active exploitation. The flaw is a TOCTOU race condition that can enable unauthenticated arbitrary code execution during full-package core upgrades. Patches were released late last month and Federal Civilian Executive Branch agencies must apply fixes by November 6, 2026. Vendors and administrators are urged to update immediately to mitigate ongoing attacks.

🛡️ Barracuda disclosed two severe vulnerabilities—CVE-2026-116606 (auth bypass, CVSS 9.3) and CVE-2026-111560 (command injection, CVSS 8.6)—that can be chained to gain root access if an attacker can reach a device's admin interface. Both affect the Email Security Gateway (ESG); the command injection also impacts WSG, WAF, WCC, ADC, and BMA. Barracuda has released patches and urges customers to apply updates, restrict admin interfaces to trusted networks, and verify installations.

🔒 IBM patched critical vulnerabilities in Langflow, an open-source framework for building AI agents and LLM-powered workflows. The flaws could allow attackers to bypass authentication, leak API credentials, and execute arbitrary code, and have been exploited previously. Two issues are rated critical (9.8 CVSS); fixes are in Langflow 1.13.0 available on PyPI and Docker. IBM also published upgrade guidance and Hono patches.

📧 Amazon Connect Customer now lets agents pause and resume email interactions while awaiting information or approvals, enabling them to take higher-priority work in the meantime. Paused duration is tracked separately from active handling time, giving supervisors clearer metrics. Agents can manage pause/resume from the Agent Workspace or Contact Control Panel, and supervisors can monitor paused emails and configure flows to auto-resume or transfer after thresholds.

🛡️ The NCSC warns AI-enabled malware is “highly likely” to be used in ransomware attacks against UK critical infrastructure within two years. Dr. Richard Horne cautioned that underinvestment and technical debt leave organisations exposed, while AI will amplify attackers’ speed and scale rather than invent wholly new techniques. The report highlights state-linked groups, ongoing router and OT targeting, and four primary attack vectors driving most incidents.

🔔 Customers of the mSecure password manager received an email on November 3 from developer mSeven Software warning of "suspicious activity" linked to the app and urging users to consider changing passwords, resetting 2FA and removing passkeys. The notice offered few specifics: it did not disclose what systems were affected, whether vaults or encryption keys were accessed, how many users were notified, or whether the activity is ongoing. mSeven said it has launched an investigation, limited the issue, and engaged external cybersecurity experts. The company asserts vault data is encrypted on-device prior to sync, though a 2025 BSI study found that an older Android build (mSecure 6.1.5) could, in theory, allow developer access to stored data.

🔒 Nammu21 and Google Cloud developed a proof-of-concept that converts bespoke syndicated loan agreements into executable, on‑ledger contracts using the Google Cloud Universal Ledger (GCUL). The platform renders legal terms as Digital Credit Instruments (DCIs) and instantiates them as gculpy contracts to automate onboarding, transfers, payments, and consent-driven workflows. This approach aims to reduce settlement times, improve transparency, and maintain strict permissioning and privacy for regulated institutions.

🖥️ Amazon WorkSpaces for AI agents now supports Linux and Windows 11 cloud desktops in addition to Windows Server, allowing agents to run on the OS their workflows require. Linux desktops provide full root access for developer-oriented agent tasks like builds and tests, while Windows 11 lets agents interact with enterprise applications used by staff. Both OS options maintain the same security and governance controls as Windows Server, including network isolation and IAM-based access.

🔍 Microsoft Threat Intelligence describes a fake-download campaign that uses trojanized Inno Setup-style installers to deliver multiple monetization payloads during a single installation session. The installers track per-offer callbacks and execution outcomes, enabling delivery of proxyware, distributed-compute, and adware-style utilities without informed user consent. The post details execution chains, indicators, MITRE mappings, Defender coverage, and mitigation guidance for defenders.

🤖 This article from Google Cloud Consulting outlines five practical lessons for enterprises adopting agentic AI systems. It emphasizes redesigning workflows from relay-like handoffs to parallelized, agent-driven processes and shifting humans from step-level validators to outcome owners. The piece highlights trust-building through delegation practices, clear responsibilities, and low-risk experiments, while recommending hub-and-spoke governance and cross-team collaboration to accelerate safe, scalable adoption.

🛠️ Today Google AI & Infrastructure and Mercor introduce the Physical Engineers' Last Exam (PLE), a new benchmark and open competition to test agents on mechanical, electrical, civil, and structural engineering tasks. PLE provides 29 public tasks, grading tools, and a leaderboard at ple-bench.com, and includes long-horizon, real-world project folders with diverse file types. The benchmark evaluates code compliance, safety, and cost efficiency, revealing a wide gap between frontier models and professional engineering requirements.

🛡️ Microsoft was named a Leader in the inaugural 2026 Gartner Magic Quadrant for AI Agent Management Platforms, reflecting momentum behind Agent 365. The platform applies identity-first controls with Microsoft Entra Agent ID, integrates with existing Microsoft security and management tools, and supports a broad ecosystem of agents from vendors and open-source frameworks. Microsoft is expanding discovery, policy coverage, and automated governance features such as the new Agent 365 Action Center.

📧 Amazon Connect Customer now auto-fills the customer’s email address from the linked customer profile when agents create a new email thread from a case. This reduces manual entry and the risk of errors, saving agents time. The Cases feature is available in multiple AWS regions, including US, Canada, Europe, Asia Pacific, and Africa.

🔔 AWS Config now supports 10 additional AWS resource types across services including Amazon ElastiCache and Amazon QuickSight. The update enables better discovery, assessment, auditing, and remediation across a broader set of resources. If recording for all resource types is enabled, AWS Config will automatically begin tracking these new types. The new resource types are also available for use in Config rules and Config aggregators.