12 October 2026 · 4 min read
QuickBooks phishing is still live in the islands, and your legacy systems are on CISA's list
GCSC is tracking QuickBooks themed phishing targeting finance teams. CISA added multiple older-but-exploited CVEs to KEV. JCSC published guidance on AI-enabled security risks. This week: tighten finance controls, check legacy exposure, and get your AI governance position on paper.
The Monday Morning Cyber Brief
Every Monday, Baltimore reviews the previous week's most significant cybersecurity events and translates them into plain English. No fear tactics. No jargon. Just what happened, why it matters to regulated businesses in the Channel Islands, and what questions you should be asking your team.
Previous Briefs
NetScaler is under active exploitation, one more KEV item lands, and AI governance is still the conversation you need to have
CISA has flagged critical zero-day vulnerabilities being actively exploited in Citrix NetScaler ADC and Gateway. One more exploited CVE added to the KEV catalogue. AI governance remains a live topic across the Channel Islands.
Kiteworks is telling customers to shut down their servers, and CISA just added two more to the pile
Kiteworks urged emergency server shutdowns over a potential zero-day. CISA added two more exploited vulnerabilities to the KEV catalogue. WordPress is under active exploitation. This week: emergency response speed is the differentiator.
Want to discuss anything from this week's brief?
Join the conversation on LinkedIn