19-Oct-2026 KVM PwnEscape, SiteGuard Exploits and Krybit Ransomware Lead Cybersecurity News

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Each episode delivers concise, decision-relevant intelligence for CISOs, security leaders, and executives. Today’s briefing covers five important developments: 1. **PwnEscape Linux KVM flaw:** A critical vulnerability rated 9.3 could allow a virtual machine guest to escape into its host through malformed network traffic, enabling code execution, disruption, or sensitive-memory exposure. Because KVM supports major cloud environments, exploitation could put multiple workloads and customers at risk. 2. **SiteGuard WAF attacks:** Attackers are exploiting a critical command-injection flaw in SiteGuard Server Edition to gain root or SYSTEM-level access, with abuse confirmed in the wild. Organizations should preserve evidence before patching, as remediation may destroy indicators of compromise. 3. **Krybit ransomware:** A new ransomware strain is targeting businesses with encryption, operational disruption, and extortion demands. The campaign reinforces the business value of resilient backups, strong access controls, timely patching, and tested response plans. 4. **Cybersecurity jobs shift toward AI:** U.S. cybersecurity postings fell 26.4% to 235,786 listings through September 2026, yet AI Security Engineer roles rose 268.3% and Cyber Data Scientist roles 203.5%. The trend signals a tighter market and growing demand for AI expertise across security, research, offense, and governance. 5. **CikaBika Bot:** A Rust-based remote access trojan uses a fake business-themed disk image and disguised shortcut to compromise Windows systems, then leverages Discord and Ngrok for control and data theft. The campaign highlights how trusted services can conceal phishing infrastructure and complicate detection. Hacked dAily translates the day’s cyber news into clear implications for risk, resilience, and business decision-making.