16-Oct-2026 Google, BeyondTrust and CenterPoint Face Zero-Days, Spyware and Breaches

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Built for CISOs, security leaders, and decision-makers, it delivers concise insight into threats affecting business and security. 1. ARMORY CASTLE and BeyondTrust: Google Threat Intelligence and Mandiant say a suspected PRC-linked actor exploited a previously unknown BeyondTrust flaw to compromise appliances, steal credentials, and move through customer networks. Organizations should patch, isolate affected systems, and rotate credentials before wider exploitation begins. 2. Zero-click spyware in online ads: Citizen Lab reports the first publicly confirmed zero-click spyware campaign delivered through targeted advertising, affecting phones linked to Al Jazeera. The alleged abuse of ad-tech systems turns trusted infrastructure into a surveillance channel, creating major privacy and supply-chain concerns. 3. CenterPoint Energy breach: A breach exposed information connected to about one million Texans. The incident highlights identity-theft risks and the broader consequences of weak data protection at critical infrastructure providers. 4. Aoki targets AI developers: A new infostealer is being distributed through fake AI coding tools and deceptive installers to steal browser credentials and system data. The campaign exploits AI enthusiasm and puts corporate accounts and development environments at risk. 5. FortiOS campaign deploys PEERSTITCH: A suspected advanced threat actor exploited a FortiManager flaw, stole data from more than 500 managed FortiGate firewalls, and deployed a stealthy memory-resident implant. The operation shows how centralized network management can enable persistent access across enterprise and telecom environments while evading detection.