Cyber Security News for October 12 2026 - Daily DefSec Brief

Daily DefSec Brief · Oct 12, 2026 · 5m · transcript

1. GlobalProtect bypass still feeds ransomware — CVE-2026-0257 — Fixed: 12.1.7, 11.2.12, 11.1.15, 10.2.18-h6, or the matching hotfix — Do: Patch GlobalProtect and review VPN sessions — https://security.paloaltonetworks.com/CVE-2026-0257

2. Fake "security audit" workflow steals CI secrets — Do: Search your repos for unexpected workflow files — https://socket.dev/blog/ghostaction-cloud-credentials

3. Public root exploit for AnyDesk on Linux — Fixed: 8.0.3 — Do: Update AnyDesk on Linux hosts — https://github.com/v12-security/pocs/tree/main/anydesk

4. One prompt exposed every AgentCore agent —…