IT Security Awareness News Roundup for October 2026

Added at 10/01/2026, last update at 10/11/2026

What matters most this month in IT security and awareness, and what should guide the attention of CIOs, CISOs, and CEOs? (regularly updated)

IT Security Awareness Failures

Phishing success: Arizona Courts Cyberattack Exposes Sensitive Data of 1.3 Million

A cyberattack on Arizona's court system exposed personal information linked to approximately 1.3 million people, nearly 30,000 protection orders, and 150,000 foster-care reports. Investigators believe the attack began after a court employee clicked a malicious link in a phishing email, while IT staff detected and stopped the incident. Officials report no evidence that the stolen data has been misused or shared, and court proceedings have not been disrupted. (10/11/2026)

Security Awareness takeaway: Let employees learn Timeless core principles & security fundamentals → This campaign shows the importance of permanent basic training. Control your human firewall potential using your own LMS.

Academy: Security Awareness Source link

Phishing Toolkit Uses Social Media Ads to Steal Credentials and Payment Data

The Milk Dragon (Nailong) phishing kit uses fake discounts promoted through Facebook and TikTok marketplaces to redirect victims to convincing counterfeit online stores. Using Adversary-in-the-Middle (AiTM) techniques, attackers can capture passwords, MFA codes and session cookies in real time, while the fake checkout pages also harvest payment-card details and one-time verification codes. (10/05/2026)

Awareness Training Takeaway: Give your employees the time they need to master the fundamentals of security awareness - Security Awareness Training for Employees.

Source link