Week 45,2026_

AI broke the cybersecurity world. What’s next?

Today, I’m talking with Alex Stamos, chief security officer at Cognition and longtime cybersecurity expert, about what a mess cybersecurity is right now. This episode is…

CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands

Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger unwanted…

NHS breach helpline left staff carrying a 'significant emotional burden'

Team given a day's notice faced distressed callers, safeguarding decisions during project that stretched from 2 weeks to 11

SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins

CVE-2026-19868 can let attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA. The post SonicWall Patches Exploited…

SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks

SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. [...]

Runaway AI hacking agent behind WorkOS breach after escaping sandbox

WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims…

OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs

OpenAI has revealed GPT-6 Cyber, a new artificial intelligence model that has discovered 81 previously unknown high-severity Firefox vulnerabilities and developed…

Fake security tools on GitHub push backdoors and infostealers

Cybersecurity professionals are being targeted with infected security projects on GitHub that deploy a backdoor and information stealer malware. [...]

Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks

The emergency package comes after dozens of companies and government agencies were hit by unauthorized access to their systems and leaks of client data, prompting…

QNAP says hackers breaching NAS devices in Plex2Shell attacks

QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center, as hackers are exploiting the Plex2Shell vulnerability chain. [...]

Veeam warns of Software Appliance boot failures on AMD EPYC hosts

​Veeam warned customers about boot failures affecting Software Appliance virtual machines (VMs) on hosts with AMD EPYC processors. [...]

IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It

IMSI and IMEI are IDs your phone shares with networks. Learn how they differ, how attackers get them, and why rotating your IMSI blunts tracking. [...]

Chainalysis says breach exposed credentials for all customers

Blockchain intelligence firm Chainalysis says a recent attack on its systems and internal tools has exposed credentials and live tokens for all customers. [...]

DigiCert Data Breach Impacts Business Customer Information

Hackers created an account on an internal system and accessed names, email addresses, phone numbers, and business addresses. The post DigiCert Data Breach Impacts…

The post-quantum future of web privacy

Cryptographic protocols like Privacy Pass help keep web sites safe from abuse while keeping their users private. This post looks at the quantum threat to these…

OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line

Rated Critical for cybersecurity, OpenAI’s new model beats GPT-5.6 Cyber at exploitation while staying in scope more reliably. The post OpenAI Says New GPT-6 Cyber Model…

DigiCert admits 16-month security lapse exposed customer information

Botched server move left the door open, and DigiCert took months to notice someone had wandered in

US Agencies Urge Organizations to Harden Refrigeration Controllers

The recommendations come amid attacks targeting fridges and freezers in supermarkets and blood banks in Europe. The post US Agencies Urge Organizations to Harden…

OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)

An OpenSSH flaw that lets remote attackers log into passwordless accounts on Alpine Linux and other musl-based systems is being exploited, threat intelligence firm…

Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack

The October incident will cut fourth-quarter sales by up to €250 million and has led Ahold Delhaize to lower its 2026 outlook. The post Grocery Giant Ahold Delhaize…

D-Link warns of multiple zero-days in DGS-3130 Series switches

D-Link shared mitigation measures for multiple unpatched security flaws affecting DGS-3130 series managed Gigabit stackable switches. [...]

Researchers Find Residential Proxies on White House Network

In a month, 28 residential proxy services used 6 addresses, mainly between 5 p.m. and midnight, Eastern Time. The post Researchers Find Residential Proxies on White…

OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass

On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters. The post OpenSSH Rushes Patches for ‘SSHole’…

Residential proxy traffic caught leaving the White House network

The White House network has been working as an exit point for residential proxy services, a setup that may open a path into one of the most closely guarded networks in…

OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed

OpenAI has introduced GPT-6 Cyber, a version of GPT-6 Astra trained to find software vulnerabilities, test how attackers could exploit them, and help develop fixes. The…

Sarajevo Cyber Security Summit 2026 puts the Western Balkans’ cyber resilience in focus

Cyber Security Summit 2026 in Sarajevo will examine the practical security questions organizations face when a supplier, network device or critical digital service…

MetaMask says recent attack didn't affect wallet infrastructure

Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure. [...]

US agencies warn attackers are targeting refrigeration systems that protect food and medicine

Threat actors are going after the controllers that keep grocery store freezers and cold storage rooms at safe temperatures, and they may push those units into continuous…

Partnering with Hacktron to find vulnerabilities in OpenAI’s systems

OpenAI is partnering with Hacktron to find vulnerabilities, test connections with third-party services, and strengthen defenses with frontier AI.

November 2026 Patch Tuesday forecast: Old software continues to bite

How did you enjoy October 2026 Patch Tuesday? Were there enough CVEs reported to keep you busy for the rest of the year or are you finished and ready for another round…

Hospital gave very sick doctor a special PC for his personal, erm, pleasure

Support chap told to either allow blatant policy violations or find a new job

Security certification is a snapshot, and buyers read too much into it

In this Help Net Security video, Mariia Bakhtina, a research specialist at Masaryk University, explains what a Common Criteria or FIPS-140 certificate does and does not…

99% of repository access tokens never expire

Developers, automated tools and AI coding agents hold permissions that can outlast the work they were granted for. Without access reviews, organizations can leave…

Rental phishing sites use live chat to win over hesitant travelers

Holiday travelers looking for a place to stay are landing on copies of popular rental platforms, complete with host names, ratings and reviews, that ask for their…

3 Charged in Scheme to Use AI to Impersonate CEOs and Attorneys to Steal $129 Million

The trio, who have nicknames that include “Rocky Balboa,” “Superman Cash” and “Fat Boy,” often targeted the companies’ accounting departments. The post 3 Charged in…

Threat actor targets Indian fintechs on weekends when defenders aren’t watching

CERT-IN warns of ‘significant escalation’ in AI-powered attacks, some after victims tried to improve defences

FBI, CISA warn of cyberattacks targeting refrigeration systems

The FBI and CISA warn that hackers are actively targeting industrial refrigeration and cold-chain monitoring systems worldwide, potentially causing food spoilage…

Meet *sshole, the vulnerability that lets hackers SSH into Linux devices

Certain configurations of Alpine are affected. Other distros may be as well.

Feds warn grocers: Don't chill on cyber defenses as freezer hacking spree heats up

No documented attacks against American supermarkets…yet

Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts

Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to…

The White House is apparently a popular residential proxy exit spot

How it got there is another matter entirely

MS Paint Remote Code Execution Vulnerability

Nearly 1.5 million exposed secrets targeted in new revocation program

Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid…

Get root on a musl Linux system by slamming it with an overly long password

Decade-old vulnerability in OpenSSH is now fixed, so get a-patchin'

October crypto-tracker hack: Access cracked, law enforcement tokens packed

Agentic 'on-path attack' went after Chainalysis's tools, which are routinely called upon to assist police investigations

OpenSSH flaw lets attackers log into password-disabled Linux accounts

A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to…

OpenAI says its new cybersecurity model is better at not hacking other companies

OpenAI is launching GPT-6 Cyber, the latest version of its cybersecurity AI model, which it says is better at finding vulnerabilities and less likely to go rogue and…

OpenAI releases GPT-6 Cyber, and promises this one stays within 'rules of engagement'

The latest bug hunting model 'avoided exploiting out-of-scope services over 99 percent of the time', claims House of Altman

Hackers backdoor Linux servers using trojanized CWP web server

A new Linux malware called CWPdoor is being distributed through a trojanized version of cwpsrv, the web server behind the Control Web Panel (CWP) management interface…

DigiCert data breach exposes customer information, identity documents

DigiCert warns it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to…

Tobacco company got smoked by leaving secret recipes on a file share

They denied the data was real...then removed it

Cyberhaven launches Agentic Data Security to track and control AI data use

Cyberhaven has introduced Agentic Data Security (ADS), to help CISOs, data security teams, insider risk teams, and AI governance leaders say yes to AI agents without…

Closing the Identity Gap at the Service Desk

Attackers target IT service desks to bypass MFA by impersonating employees and convincing staff to reset passwords or register new authentication devices. Specops…

Rubrik hosts NAS backups in isolated, immutable vaults

Rubrik has announced Rubrik-Hosted Protection for On-Premise Unstructured Data. The offering is built on Rubrik’s Network Attached Storage (NAS) Cloud Direct service…

Alpine Linux Security Advisory: OpenSSH-server password authentication bypass

Vercel ties login sessions to devices, rolls out AI security reviews in public beta

Vercel, the popular cloud platform for building and hosting websites and web applications, has announced the rollout of Device Bound Session Credentials (DBSC) and the…

Cyberattack on Norway’s aid agency may have swept up all user data

The names and email addresses of 20,614 people registered on Norad’s Grants Portal may have ended up in the hands of attackers, Norway’s development aid agency has…

PortSwigger’s Burp AT lets enterprises delegate pentests with defined limits

PortSwigger has announced the availability of Burp AT for enterprises, an agentic pentesting solution that helps security teams investigate important applications more…

Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns

More than 200 sites were seen serving phishing content to first-time visitors but not to those who revisit. The post Bank Phishing Sites Show Fake ‘Suspended’ Pages to…

Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries

From EOP to RCE in six simple steps

Cyberattack Hits French Blood Bank Site but No Blood Products Are Compromised

The incident comes after supermarkets in a number of European countries reported this week that their fridges and freezers warmed up after they were remotely hacked. The…

Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws

Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws. The post Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws…

New York's Queens Public Library battles ransomware crims: Wi-Fi, checkouts, and website go dark

No gang has claimed the attack on incredible neighborhood resource yet

Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441)

Zyxel GS1900 series network switches that received a fix for a flaw that was later reported to have been exploited in the wild are still open to an exploit attackers…

Scammers capitalize on GTA 6 hype to push malware and crypto cons

Scammers are offering supposed leaked builds, early copies and phone versions of Grand Theft Auto VI (GTA 6) weeks before the game’s November 19 launch, Netcraft warned…

Norway's aid agency pwned and all users' data is stolen

Norad said it cannot be sure that the details of those in 'conflict areas and authoritarian states' are safe or not

Google puts new limits on AI agents that hunt threats and fix vulnerabilities

Google Cloud is adding new controls to CodeMender, its AI tool for finding and fixing software vulnerabilities, allowing businesses to isolate attack simulations and…

CISO Conversations: Ryan Davis – The Unknown Is Where Security Meets Reality

Ryan Davis went from hacking his school’s network to running security at New Charter Technologies. What worries him now is shadow AI. The post CISO Conversations: Ryan…

Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day

Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests. The post Zyxel Switch Hacks Blamed on…

Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes

The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine. The post Russia-Linked Hackers Hit iOS, Android Devices With…

OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks

OpenAI says its Critical-rated cyber model met fewer hidden task goals when work was framed as AI safety research, often silently. The post OpenAI Finds GPT-6 Astra…

OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability

GhostMap Android flaw lets malicious app trigger persistent boot loop

Attackers can force Android devices into a continuous boot loop using a specially crafted app that requires no permissions and only needs to be installed. [...]

OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run

An automated system running on an upcoming AI model turned hundreds of Linux kernel bugs into working exploits that give an ordinary user root access, and wrote a patch…

A banking malware sample led researchers to an Android bug that can loop-crash phones

Bitdefender Labs researchers built an Android app that contains no executable code and requests no permissions, and installing it leaves a Pixel 10 in a crash loop that…

GPT‑6 Cyber: Advancing the frontier of aligned cybersecurity agents

Introducing GPT‑6 Cyber, OpenAI’s cybersecurity model for finding exploitable vulnerabilities and developing fixes, trained to stay within authorized scope.

Apple is bringing harmful content checks to iCloud link sharing with potential account penalties

Apple will begin checking iCloud content shared using the “Anyone with the link” option for harmful material in iOS, iPadOS, macOS, and visionOS 27.3 or later. When…

Want to Rent an Internet Address at the White House?

Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for…

Hackers exploited iOS and Android flaws to infect phones

Researchers say group may have been Kremlin-sponsored in search of diplomatic targets.

Apple turns iCloud into spy cloud, will start looking at public share links

Content shared with anyone who has the URL will be scanned for 'harmful content,' though the iMaker hasn't defined that term

Vercel rolls out new protection against stolen session cookie attacks

Vercel is gradually rolling out Device Bound Session Credentials (DBSC) on its platform as a key defense against information stealer malware. [...]

Zyxel fixes zero-day exploited to hack nearly 1,000 network switches

Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal…

Gemini for Home now plugs into AT&T’s smart security system

AT&T's smart home security system now integrates with Gemini for Home. The company says its Connected Life system is the "first" home security product to integrate with…

DreamHost confirms data breach exposed FTP logins and webmail sessions

DreamHost is warning of a data breach after attackers gained access to its File Manager platform for two months and stole customers' FTP/SFTP usernames and passwords…

Cyberattack disrupts blood storage refrigeration systems in France

France's national blood service has confirmed that a cyberattack targeting a refrigeration equipment provider raised temperature and defrost settings at three of its…

NIKKE PC game launcher hacked to spread remote access, data-stealing malware

The developers of Goddess of Victory: NIKKE have confirmed that hackers tampered with the game's PC launcher scripts in a supply-chain attack, distributing malware…

mSecure password manager hack prompts password reset warnings

mSeven Software is warning current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys following a…

US gov IT worker pleads guilty to sending Top Secret files to Ethiopia

Help desk technician agrees to minimum 10-year jail term after being caught copying files for more than 2 years

Google Calendar phishing campaign hijacks sessions, bypasses MFA

A phishing campaign used Google Calendar invites, trusted redirects, and fake login pages to hijack corporate Google sessions and bypass MFA protections. Material…

SonicWall warns of unpatched flaws in end-of-life GMS software

SonicWall warned customers of two security flaws affecting end-of-life Global Management System (GMS) systems that will not be patched. [...]

Cycurion Habit verifies threats and validates fixes before closing cases

Cycurion has launched Habit, an AI-driven security operations center (SOC) built to identify threats before they disrupt operations. The launch also marks Cycurion’s…

Russian hackers target iOS and Android users with n-day exploits

Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits for patched…

Sysdig Adds Runtime Security and Governance for AI Agents

Sysdig’s platform uses runtime visibility to track AI agent actions and block risky behavior before it reaches production systems. The post Sysdig Adds Runtime Security…

Barracuda ESG Authentication Bypass Flaw Opens Path to Root

An authentication bypass and a command injection flaw can be chained for root access on Barracuda’s Email Security Gateway appliances. The post Barracuda ESG…

BlueFlag Security adds controls for AI agents working under developer identities

BlueFlag Security has expanded AI Agent Governance that fully maps the access, behavior and oversight of both approved and shadow AI agents, including options for…

Agentic Data Security Firm Sentra Raises $150 Million

The company will invest in agentic data security capabilities and expand its go-to-market organization. The post Agentic Data Security Firm Sentra Raises $150 Million…

Live Q&A: CISSP exam prep with ISC2 experts

Join ISC2 on November 6, 2026 at 7:00pm CET for a live Q&A about the CISSP exam. A panel of experts will answer your questions, explain what it takes to earn the…

Cyberattack hits French blood banks

Three blood banks have detected and reversed a potentially destructive temperature spike in their cold rooms, following a cyberattack that targeted a refrigeration…

US charges two Canadians accused of hacking US universities

A federal grand jury indicted two Canadians suspected of hacking multiple US universities and using the compromised systems to mine for cryptocurrency. [...]

Impart uses AI to build virtual patches without putting models in the traffic path

Impart Security has launched the Runtime Defense Harness, a controlled environment where AI agents write and test virtual patches for new vulnerabilities without putting…

AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks

Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks. The post AI-Linked Breaches Mount as WorkOS…

Canadian Extradited to US Over Cryptomining Hacks on University Supercomputers

A federal grand jury indicted two Canadian men for hijacking university supercomputers to secretly mine Electroneum cryptocurrency. The post Canadian Extradited to US…

CISA flags WordPress RCE flaw as actively exploited in attacks

The US Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that attackers have started exploiting a recently patched high-severity WordPress…

Cyberattack on French plasma stores is enough to make your blood boil

Attackers reportedly set cold-room controls to 110°C, but safeguards prevented stock losses

Poisoned cPGuard update hits thousands of web hosting servers

An attacker has compromised the update infrastructure of cPGuard, a security suite for Linux web hosting servers, and pushed out a malicious update to nearly 3,000…

Malicious cPGuard Updates Served in OpsShield Supply Chain Attack

Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions. The post Malicious cPGuard Updates Served in…

Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical

The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues. The post Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated…

Fake job interview opened the door to $6.34 billion Binance heist

A tampered software installer and a fake job interview gave attackers the access they needed to steal about $6.34 billion in digital assets from Binance. “It was not a…

Hackers use n-day exploits in zero-click attacks on iOS, Android devices

A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting compromised sites or fake ones impersonating…

North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack

In recent months, North Korea has accelerated its weapons tests in a likely bid to increase its leverage in potential diplomacy with the US. The post North Korea…

Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million

A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff. The post Meta Shares Top Muse Bug Bounty…

Open-source file sync tool rsync 3.5.2 fixes a CPU exhaustion flaw

The rsync project released version 3.5.2, and it closes a flaw that let a connecting client tie up a server’s CPU with checksum math that leads nowhere. The new version…

What AI-generated malware looks like under the microscope

In this Help Net Security interview, Lindsay Kaye, VP of Threat Intelligence at HUMAN Security, talks about what AI-generated malware looks like on the bench. She points…

Ghostunnel: Open-source TLS proxy with mutual authentication

Ghostunnel is an open-source proxy that handles TLS for programs that cannot handle it themselves. It works in two directions. In server mode it sits in front of a…

Secure your containers without breaking what works

Container security has a familiar problem. Teams identify vulnerabilities, but turning those findings into lower risk is much harder. A standard container image may…

NIST publishes cybersecurity guide for businesses too small to have IT staff

The National Institute of Standards and Technology (NIST) released cybersecurity guidance for small businesses with no paid employees other than their owners. These…

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data

Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. [...]

North Korean fake job interview led to $6.3B Binance heist

'It was not a single isolated breach or a simple phishing incident,' exchange says

WorkOS says attacker used ARTEX AI to breach internal sales app

Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications. [...]

Binance says fake job interview led to $6.3 billion crypto heist

Cryptocurrency exchange Binance says North Korean hackers used a fake job interview to trick an employee into installing malware that ultimately let them compromise the…

Google: LLMjacking attacks rack up $1 million in cloud AI charges

Large language model hijacking attacks, also known as LLMjacking, are generating large fraudulent cloud charges, with some organizations losing more than $100,000 per…

Password manager mSecure tells users to change passwords, won't say why

Customers left wondering what's been compromised after vendor advises resetting passwords, 2FA and passkeys

Barracuda warns of critical flaws allowing root access to devices

Cybersecurity company Barracuda Networks warned customers to patch two vulnerabilities that can let attackers run commands with root privileges. [...]

Gartner Predicts SOCs Will Have 50% More Engineers Than Analysts by 2028

Gartner predicts that security operations centers will have 50% more engineers than analysts by 2028 as AI agents take over routine alert handling. Prophet Security…

Frontline Education Data Breach Impacts Over 1.3 Million

Hackers exploited a flaw in third-party software and stole the personal information of school district staff and students. The post Frontline Education Data Breach…

Police seize over 100 servers linked to investment fraud with more than €4 million in losses

Seven people have been arrested and more than 100 servers seized in a coordinated law enforcement action against an investment fraud network that started unravelling…

CrowdStrike Reportedly Paying $495 Million for AI Security Firms Fiddler, Dreadnode

The acquisitions will add AI agent observability and automated AI security testing capabilities to the CrowdStrike Falcon platform. The post CrowdStrike Reportedly…

Novee puts forgotten internet-facing assets through penetration testing

Novee’s External Surface Testing is a new capability in its AI penetration testing platform that helps security teams discover internet-facing assets and validate…

Introducing Zero Wire, a hub for investigating critical Internet vulnerabilities

Zero Wire on Cloudflare Radar pairs plain-language briefings with global attack telemetry and remediation steps. Triage critical CVEs faster and decide how to protect…

UK school estate hit by 3AM ransomware in suspected AI-assisted attack

A 3AM ransomware affiliate targeted a school estate in the UK and successfully encrypted around 37 of nearly 50 machines reached from an unmanaged host. [...]

Assured helps recovery teams find clean backups after ransomware attacks

Assured Data Protection has announced CleanRoom SCAN, a new managed service designed to strengthen cyber recovery by independently scanning isolated backup data using…

Police seizes over 100 servers in investment scam crackdown

European law enforcement authorities arrested seven suspects and seized more than 100 servers in a joint action targeting an unnamed company suspected of providing…

Attackers exploit critical Node-RED flaw to deploy Linux bot and backdoors (CVE-2026-58115)

Attackers are exploiting an authentication flaw (CVE-2026-58115) in Node-RED, a programming tool built into some industrial control products, to install a Linux bot and…

Britain on notice: AI-powered ransomware attacks to arrive by 2028

Cyber agency warns critical infrastructure is a likely target as chief urges bosses to stop doing 'tech on the cheap'

AI agents scale and speed up Chinese-linked attacks

A China-nexus espionage group used AI agents to attack more than 200 organizations in 11 days, CrowdStrike said last week. On Monday, Kaspersky published details of a…

Android’s November 2026 Updates Patch Over 200 Vulnerabilities

The most severe is a critical flaw in Framework leading to remote code execution without user interaction. The post Android’s November 2026 Updates Patch Over 200…

Critical Node-RED Flaw Exploited in Attacks

Multiple attacks from the same IP address attempted to deploy various payloads, including a Linux bot and webshells. The post Critical Node-RED Flaw Exploited in Attacks…

Google adds new $250,000 Cloud VRP reward for Root-in-Cloud bugs

Google has expanded its Cloud Vulnerability Reward Program (VRP) with a new top-tier reward for high-impact architectural security flaws. [...]

Harvard University data breach exposed info of 851,000 accounts

Hackers who breached Harvard University's Alumni Affairs and Development systems in November 2025 stole data linked to more than 850,000 unique email addresses…

Gorbag APT group hits Ukrainian courts and city councils with self-deleting malware

ESET has been tracking a Russia-aligned group it calls Gorbag, which has been breaking into Ukrainian organizations since at least February 2025 using spearphishing…

UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028

The U.K. will likely face AI cyberattacks on its critical infrastructure by 2028 as criminals and states, including China and Russia, increasingly use AI in their cyber…

Stolen AI access leaves companies with cloud bills of up to $1 million

Criminals who break into corporate cloud accounts are using the stolen access to run AI models at the victim’s expense, in some cases racking up more than $100,000 in…

Google Dismantles XCPE Botnet of 1.3 Million Android Devices

The botnet was created and operated for financial gain by Android OEM/ODM Videostrong Technology. The post Google Dismantles XCPE Botnet of 1.3 Million Android Devices…

Opal’s agent.ID virtual event: Top security leaders on governing Al agents

Opal Security will host agent.ID, a free virtual event focused on adapting identity and access management (IAM) to AI agents, on November 5, 2026. The event will bring…

NATO’s Crossed Swords Exercise Brings AI Agents Into Cyber Operations Training

The NATO CCDCOE exercise in Estonia introduces AI agents and OpenAI Daybreak into joint cyber and kinetic operations training. The post NATO’s Crossed Swords Exercise…

Over 100 European Stores Hit as Supermarket Fridge Attacks Return

Attackers again tampered with internet-exposed refrigeration controllers, this time at stores in Belgium, Sweden, Ireland and beyond. The post Over 100 European Stores…

What human hackers still do better than AI, according to HackerOne’s CEO

AI can find vulnerabilities in minutes, but people still hold the edge in judging what a flaw means for a business. In this Help Net Security interview, Kara Sprague…

Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies

Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software…

WorkOS reports security breach

Max-severity bug in widely used OT programming tool exploited to deliver Linux malware

Your industrial IoT gateway isn't exposed to the internet, right? RIGHT?!

Chinese hackers use ARTEX AI in automated attacks against 200 orgs

Chinese hackers used ARTEX, an open-source, multi-agent AI penetration-testing framework, in attacks against more than 200 organizations across 14 countries. [...]

Cops bust botnet of 1.3M infected Android TV boxes

Videostrong accused of shipping devices with a backdoor baked in

Fintech platform Sageworks taken offline after suspected cyberattack

Financial technology company Abrigo has restored its Sageworks risk management application, except for borrower-facing capabilities, following an outage triggered by…

Google disrupts million-device XCPE Android malware botnet, bans TV box maker

Google and industry partners have dismantled the XCPE malware botnet consisting of more than 1.3 million Android TV streaming TV boxes that Google says its manufacturer…

Preparing our next security sprint to harden OpenAI

OpenAI is preparing its next internal security sprint with Cathedral Systems to test and strengthen its defenses using AI.

Self-Employed? Solopreneur? NIST Has a Cybersecurity Guide Just for You

CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)

CISA added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog on Friday, after Ivanti…

Google disrupts XCPE botnet, bans the company behind it

Google shut down the servers behind XCPE, a backdoor hidden in the firmware of Android TV set-top boxes. Google’s Threat Intelligence Group attributes the operation with…

BTCPay Server warns of hot wallet crypto thefts on outdated instances

The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been draining "hot…

Your Mobile Carrier Stores Your Call Logs for Years

Mobile carriers can retain years of call and text metadata, exposing sensitive details about customers' relationships, locations, and daily routines if breached. Cape…

Cybersecurity M&A Roundup: 37 Deals Announced in October 2026

Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint. The post Cybersecurity M&A Roundup: 37 Deals…

AI-powered infostealer picks out the most profitable parts of your stolen data

A new Windows infostealer sends the data it steals to an AI model and asks it to rank the victim’s assets by how much money they could bring in, Cisco Talos has found…

Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps

Within minutes of a ceasefire lifting in Kherson, Ukraine’s citizens were pummelled with threatening notifications

Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk

The Florida Department of Education says SSNs and other personal data may have been exposed in a breach of its financial aid website. The post Florida Student Aid…

Hackers disrupt refrigeration systems at European supermarkets

A cyberattack on refrigeration systems has disrupted stores run by multiple supermarket chains across several European countries after hackers remotely changed…

Second wave of refrigeration cyberattacks hits European supermarkets

Three weeks after the attack that turned refrigeration units in French supermarkets into ovens overnight, similar cyberattacks have hit shops in other European countries…

Microsoft fixes Smart App Control broken by October Windows update

Microsoft has resolved a known issue that prevented some users from activating the Smart App Control security feature after installing the October 2026 KB5127648 Windows…

Revolve Data Breach Impacts at Least 180,000 People

Hackers accessed its online shopping platform and stole customers’ personal and payment card information. The post Revolve Data Breach Impacts at Least 180,000 People…

Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward

The top payout is for high-impact architectural research demonstrating full administrative control. The post Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward…

Frozen part II: Hackers remotely defrost produce in Euro supermarkets ... again

Let it go (bad): Dozens of stores report mass food wastage as managers start their week in puddles

Trezor warns some of its wallets may hide a seed-stealing implant

A Trezor Safe 5 sold by CryptoBilis, the reseller linked to the recent Ledger wallet drains, may contain a hidden implant that steals the owner’s recovery phrase, Trezor…

Over 1,000 GitLab servers vulnerable to ongoing RCE attacks

Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks. [...]

FBI pins $6.3B Binance crypto heist on North Korean hackers

Exchange scrambles to replace stolen funds as customers withdraw billions and hackers get busy laundering their haul

Chainalysis breached using “offensive agentic techniques”

Blockchain analytics firm Chainalysis has suffered a cybersecurity incident that led to a data breach. According to the company’s Friday announcement, the incident is…

Malicious Claude Code Extension Served in Cursor Supply Chain Attack

The extension performed host reconnaissance and attempted to create a reverse SSH tunnel. The post Malicious Claude Code Extension Served in Cursor Supply Chain Attack…

Synology warns of C3RB3R ransomware attacks targeting NAS devices

Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware attacks. [...]

Chainalysis Discloses Data Breach Following AI-Driven Cyberattack

The attackers used offensive agentic techniques to access the company’s systems and internal tools. The post Chainalysis Discloses Data Breach Following AI-Driven…

FBI pins $6.3 billion Binance crypto heist on North Korea while scammers circle anxious users

North Korea was behind the theft of more than $6 billion in cryptocurrency from Binance, the FBI has confirmed. “The Federal Bureau of Investigation (FBI) is releasing…

Ivanti patches two more Connect Secure zero-days chained in attacks

Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least October 1…

Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack

DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was targeted. The post Polymarket Returns $3.9…

FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist

The FBI has officially pinned the $6 billion Binance hack on North Korea’s TraderTraitor as the attackers launder the stolen crypto. The post FBI Flags Over 600…

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain

CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks. The post Ivanti Patches Two More…

OpenAI appoints Dan Driscoll as Senior Counselor for National Security Modernization

OpenAI appoints Dan Driscoll to advise on responsible AI for national security modernization, cyber resilience, and collaboration with U.S. allies.