IT Security News: Afternoon roundup, 2026-11-05 Summary This afternoon's security landscape is dominated by alarming attacks on critical infrastructure, specifically targeting European refrigeration systems to disrupt food and medical supplies. A recurring theme is the exploitation of trust, ranging from…
AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research
An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million.
APT29 Watering Holes Target Unpatched iPhones and Android Devices
APT29 compromised Ukrainian analytics tracker Plerdy to serve n-day exploits to mobile users
OpenSSH flaw lets attackers log into password-disabled Linux accounts
A newly disclosed OpenSSH vulnerability dubbed “*sshole” allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are…
Inside ARTEX: How Autonomous AI Agents Are Being Used in Real-World Cyberattacks
AI agents are already changing how cyberattacks are carried out. Check Point Research (CPR) analyzed ARTEX, an AI-powered penetration testing platform…
What to expect from Democrats’ cybersecurity agenda in Congress
From CISA to AI and beyond, the new Democratic majority has many opportunities to scrutinize government programs and push new policies.
European and Ecuadorian cooperation leads to 20 arrests in major hit against drug trafficking
The operation, codenamed Operation CANTABRIA, underscores the success of strong cooperation between European and Ecuadorian law enforcement agencies,…
Revolve fashion retailer breach affects 1.5M
Fashion retailer Revolve Group has notified customers that payment card information was stolen in a breach affecting an estimated 1.5 million people.
Attackers Leverage Critical Node-RED Flaw to Gain Unauthorized Access
There is an active exploit of a critical security vulnerability in Node-RED by threat actors to install malicious Linux bots and webshells on vulnerable…
Impart Security launches AI-powered Runtime Defense Harness
Impart Security has introduced Runtime Defense Harness, a new tool designed to accelerate vulnerability response by using AI agents to create virtual…
IT Security News Hourly Summary 2026-11-05 19h : 25 posts
25 posts published in the last hour 17:34OpenAI debuts GPT-6 Cyber, touting better performance — and safety guardrails 17:34Apple Will Check Public iCloud Share Links for Harmful Content Starting With iOS 27.3 17:34US Government Partners Urge Hardening Industrial Refrigeration and…
OpenAI debuts GPT-6 Cyber, touting better performance — and safety guardrails
After a summer of sandbox escaping hacks, OpenAI said their new model was trained to be more cautious around user intent and less sensitive to “reward…
Apple Will Check Public iCloud Share Links for Harmful Content Starting With iOS 27.3
Apple will start checking iCloud content shared through public links for “harmful content” with version 27. Thank you for being a Ghacks reader.
US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems
Overview The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Health and Human Services (HHS), U.S.…
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 26, 2026 to November 1, 2026)
Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to…
Ninth Circuit: Breach Of Confidence Confers Standing In Health Data Security Case
Claire E. Castles, Amanda Fitzsimmons, Nathaniel P. Garrett, Rebekah Byers Kcehowski, Mary Alexander Myers, and Alexander H. Southwell of Jones Day write:…
Hackers Target French Blood Bank Refrigerators Through Third-Party Breach
Hackers reportedly altered refrigeration settings at three French blood bank facilities through a supplier breach. Monitoring systems prevented damage to…
A tiny squeeze dramatically changes the magnetism of exotic materials
Scientists have discovered that a simple mechanical squeeze can dramatically alter the magnetic properties and electrical behavior of exotic materials…
Hackers Tamper With Refrigeration Controls at France’s National Blood Service
Hackers altered refrigeration controls at three French blood service sites, but staff protected plasma supplies and prevented damage to blood products.
OpenAI releases GPT-6 Cyber, and promises this one stays within ‘rules of engagement’
The latest bug hunting model ‘avoided exploiting out-of-scope services over 99 percent of the time’, claims House of Altman
Barracuda ESG Authentication Bypass Flaw Opens Path to Root
An authentication bypass and a command injection flaw can be chained for root access on Barracuda’s Email Security Gateway appliances.
Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign
Russian state-linked hackers targeted users in Ukraine, the United States and Europe in a campaign to steal sensitive information from iPhone and Android…
Russian-Linked Hackers Use Trusted Sites to Target iPhones and Android
Russian-linked hackers used compromised websites to target iPhones and Android phones. See how the exploits worked and what security teams should check.
US charges two Canadians accused of hacking US universities
A federal grand jury indicted two Canadians suspected of hacking multiple US universities and using the compromised systems to mine for cryptocurrency.…
SLAC scientists find conclusive proof of a mysterious third type of magnetism
For nearly 90 years, scientists believed magnetism fell into just two categories, but researchers have now confirmed a remarkable third type called…