CyberHoot’s Cybersecurity Newsletter: October 2026

29th October 2026 | Newsletters CyberHoot’s Cybersecurity Newsletter: October 2026

Editor: Craig Taylor

Welcome to CyberHoot’s October Newsletter!

October is Cybersecurity Awareness Month, making it the perfect time to highlight the everyday habits and tools that help keep people and organizations secure. We’re also excited to share some big news this month: CyberHoot’s positive reinforcement phishing training, HootPhish, has officially been patented!

Read on to learn more about this exciting milestone and what else has been happening at CyberHoot this October.

Laugh. Learn. Hoot Up!

Craig CEO,
Co-Founder, CyberHoot


Download our FREE 31 Days of Cybersecurity Infographics for 2026 below!

Want to make them your own? You can also request customized versions featuring your company’s branding!


Exciting Announcement:
The Patented Phishing Test that Introduces Itself

Phishing training that says Hello first.

Fake Crypto Wallet Extensions Hit Firefox. Here Is How to Keep Your Browser Clean.


CyberHoot has officially achieved a long-standing goal of being featured on the legendary “Security Now!” podcast with Leo Laporte and Steve Gibson. To be 100% clear, this is a paid sponsorship of the podcast.

In addition to that, Leo Laporte personally endorsed CyberHoot:

“When we got phished [before CyberHoot] it became pretty clear we needed to do more to protect our company. The same old training just wasn’t working. CyberHoot came to the rescue. It’s fun, our team loves it, and best of all, it’s helping to keep us safe. Hoot on!” — Leo Laporte

Please watch this quick 3-minute feature as Leo Laporte shares his experience with HootPhish and explains why CyberHoot’s positive reinforcement approach to phishing education caught his attention.


Liking CyberHoot? We need your help. Please leave us your review at G2.com!

G2 –

For more information on how to leave a CyberHoot review, please watch the brief video overview below.  Note: to avoid fraudulent reviews, each review website will require to you to create and validate your identity through an email account registration process.



We’re excited to share several new additions to our Partner Integrations page, making it easier for partners to connect CyberHoot with the tools they already use every day. These new integrations help streamline client and user syncing, simplify training management, and make it easier to keep documentation up to date across your systems.

“Our partners asked us to meet them inside the tools they already use every day, so that’s what we did. Partners sync clients and users into CyberHoot in minutes, and view training progress inside their existing tools. This means less manual work, automated billing, better retention, lower costs, and safer clients!” said Craig Taylor, CISSP, CEO and Co-Founder of CyberHoot.

New integrations are now available for HaloPSA, Autotask PSA, ConnectWise PSA, Hudu, and IT Glue. Whether you’re looking to sync companies and users into CyberHoot for training or publish tenant training status directly into your documentation platform, these integrations are designed to reduce manual work and help you manage your clients more efficiently.


Please note: CyberHoot is upgrading all Power Users to Autopilot for free. Contact support@cyberhoot.com to schedule your free upgrade. Power platform will be retired later this year Sept. 2026.

View more Release Notes on CyberHoot!

Autopilot Platform Release Notes

  • SCORM courses in the CustomHoots Training Library. A new SCORM tab lists the CyberHoot SCORM trainings, and you can copy them into your tenants.
  • The Today page puts the most urgent alerts first, with broken integration syncs ahead of dark web exposures.
  • The chatbot is available to tenant admins, not only site admins.
  • Text-message assignment notifications link straight to the assignment. 
  • A tidier side nav: AttackPhish is back for tenants and scoped to the tenant, Assessments sit under Power Ups, and Help lives in the top-nav ? menu.
  • Deployments: a clearer Search sites box and single-click site selection.
  • Delete Tenant explains itself with a tooltip when it’s disabled (MSP, primary or active tenant).
  • Row menus with a single action now show it as a button.
  • Custom Messaging: HR contact variables are labelled HR Contact and no longer appear in the Welcome email picker.
  • Directory sync: Entra ID shows a clear reconnect message when its credentials need renewing and handles large directories, and Google group sync skips external members it can’t read.
  • Tighter API security: tenant API keys can’t change protected customer fields or read other tenants’ AttackPhish logs.
  • Video link help now asks for SharePoint sharing links.
  • A new workflow-first Autopilot. A sidebar with a scope switcher, a Today page for what needs attention, a tenant Home, dark mode, FlockPoints and guided walkthroughs.
  • Assignment reminders by text message. Turn on SMS notifications and manage each user’s mobile number and consent; users get their assignment by text.
  • Partner Lead Capture page. Get a link or embed code for a branded risk report page with sample attacks, and see the leads it captures.
  • Your Custom Library, available to tenant admins. Partner Custom Library items now appear when tenant admins assign training or build a program.
  • SCORM courses in the CyberHoot Training Library.
  • HootPoints replace the legacy Hoot Score everywhere in Autopilot.
  • Subprocessors page in the customer portal.
  • New API calls for partner alerts, setup status and a tenants summary.
  • SharePoint and direct video links play right in the training, in a built-in video player.
  • SCORM CustomHoots handle more courses: SCORM 2004 courses with objectives work, simulations show the passing score, and SCORM assignments complete without a separate Mark Completed step.
  • CustomHoots wizards show the selected tenant on the Review step when you work across all tenants.
  • Every plain HTTP address now redirects to HTTPS.
  • Upload SCORM packages as a CustomHoots training type. Drop in a SCORM zip and assign it like any other training; completion flows into compliance reports.
  • CSV import for CustomHoots quiz questions. Build a quiz from a spreadsheet instead of one question at a time.
  • Notify All Users button on the tenant dashboard Dark Web panel. Send every exposed user their exposure email in one click
  • Google Workspace sync defaults to Groups and keeps your selections when you re-authorize.
  • Archive and Pause Training now work on a reseller’s own anchor tenant, with a confirmation warning before anything changes.
  • Mass mark complete on the assignment compliance report. Select the users, mark them compliant, done.
  • CustomHoots video links accept any embeddable URL, including SharePoint, OneDrive and Microsoft Stream.

Infostealer

An infostealer, short for information-stealing malware, is malicious software designed to quietly collect sensitive information from a computer or other device and send it back to an attacker.

Unlike ransomware, which makes its presence obvious by encrypting files or displaying a ransom demand, an infostealer is usually designed to remain unnoticed. It may search web browsers, applications, and local storage for valuable information such as:

  • Saved usernames and passwords
  • Browser cookies
  • Session tokens
  • Autofill information
  • Cryptocurrency wallet information
  • Email credentials
  • System information
  • Files containing sensitive data

Once this information is stolen, criminals can use it themselves or sell it to other attackers. A stolen password might lead to one account, while a stolen session cookie or authentication token may provide access to an account that the user has already authenticated to.

Infostealers therefore create both a malware problem and an identity-security problem.

Click here to read more!


Enroll in CyberHoot’s Referral Program today and start earning a 20% share of all revenue generated for one year by those who register through your exclusive referral link. As a referral partner, not only will you receive financial rewards, but you’ll also experience the satisfaction of aiding others in becoming more security-conscious, safeguarding them against cyber threats. Don’t hesitate, sign up now at https://cyberhoot.com/referral-program/.

Referral through Autopilot’s Dashboard:

Join CyberHoot in our mission to create a more aware and better secured world! Recommend CyberHoot Autopilot to a friend, and they will enjoy a complimentary first month. For every new sign up who uses your referral link, you will receive a free month added to your account. This offer is exclusively for first-time CyberHoot registrants.


Know someone who had a close call recently with a cyber attack, phishing email, or social engineering phone call?  Recommend CyberHoot’s free cybersecurity training.  They’ll receive six (6) videos (each video is 3-4min.) and one of our positive reinforcement, hyper-realistic, phishing simulations. All for free.

Registration: https://cyberhoot.com/individuals


Looking for additional resources?

CyberHoot Case-Studies

CyberHoot White Paper Download – How HootPhish Improves upon AttackPhish

All New: 2026 Infographics on Cybersecurity Statistics


Secure your business with CyberHoot Today!!!

Latest Blogs

Stay sharp with the latest security insights

Discover and share the latest cybersecurity trends, tips and best practices – alongside new threats to watch out for.

The Patented Phishing Test that Introduces Itself

The Patented Phishing Test that Introduces Itself

Most phishing tests lie to your employees. This one says hello first! HootPhish tells people up front: this is...

Read more
EMERGENCY ADVISORY: Critical PHP Flaws (“PHP2Shell”) Need Action Today

EMERGENCY ADVISORY: Critical PHP Flaws (“PHP2Shell”) Need Action Today

Severity: CRITICAL (CVSS 9.2) | Issued: October 22, 2026 On October 21, two critical flaws in PHP,...

Read more
Fake Crypto Wallet Extensions Hit Firefox. Here Is How to Keep Your Browser Clean.

Fake Crypto Wallet Extensions Hit Firefox. Here Is How to Keep Your Browser Clean.

Author: Katie Boquetti | Editorial: Craig Taylor Editorial by Craig Taylor: Even before Claude Code made...

Read more