15-Oct-2026 Microsoft Disrupts Phishing Kits as AI Fuels Zero-Day Threats

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily for CISOs, security leaders, and business decision-makers. Today’s briefing: 1. Microsoft disrupted three phishing kits—CoGUI, Haozi, and Iron Man System—in a court-authorized operation with industry partners. The kits allegedly supported more than 1 billion phishing messages targeting 75,000 organizations worldwide, highlighting the scale and commercial impact of the cybercrime ecosystem. 2. U.S. authorities arrested two nationals accused of helping North Korean IT workers obtain remote roles at more than 70 companies through laptop farms and location masking. The scheme allegedly generated over $3 million and exposed organizations in sensitive sectors to insider access, sanctions, and espionage risks. 3. Microsoft disclosed a record 1,413 vulnerabilities in its latest Patch Tuesday release, including an actively exploited Windows Shell zero-day. The volume reinforces the need to prioritize remediation by exploitability and business risk rather than vulnerability counts alone. 4. Researchers used OpenAI’s GPT-5.6 Sol to chain three Chrome zero-days into a Windows sandbox escape, potentially affecting around one billion users. Google has patched the flaws, but the case demonstrates how AI is accelerating advanced exploit development and shortening defenders’ response windows. 5. Researchers identified Hirudo, an Android banking trojan that replaces legitimate banking apps with modified copies designed to bypass security checks. Its targeting of Indonesian banking apps shows why financial institutions must strengthen server-side risk controls and assume local app integrity can be compromised. Hacked dAily delivers the developments that matter, with clear insight into their security, operational, and business implications.