IT Security News: Afternoon roundup, 2026-11-03 Summary The afternoon was dominated by the dual-edged nature of artificial intelligence, which is being leveraged both by cybercriminals for sophisticated attacks and by security firms to evolve defense operations. A disturbing trend of…
IT Security News Hourly Summary 2026-11-03 18h : 24 posts
24 posts published in the last hour 16:36Password manager mSecure tells users to change passwords, won’t say why 16:35Arara Message Hack: 77 Million Emails Exposed, Millions of Phishing Messages Sent 16:35LLMJacking Emerges as Thriving Cybercriminal Enterprise 16:35Citizen Lab Researchers Win…
Password manager mSecure tells users to change passwords, won’t say why
Customers left wondering what’s been compromised after vendor advises resetting passwords, 2FA and passkeys
Arara Message Hack: 77 Million Emails Exposed, Millions of Phishing Messages Sent
A cyberattack on Japan’s Arara Message service may have exposed 77 million email addresses and enabled millions of suspicious emails targeting customers.
LLMJacking Emerges as Thriving Cybercriminal Enterprise
Cybercriminals have turned reselling cloud access to LLMs into a lucrative business model, with some victims paying as much as $1 million in resource…
Citizen Lab Researchers Win IRTF Applied Networking Research Prize
Researchers from the Citizen Lab and Princeton have won the IRTF Applied Networking Research Prize for their work on the network security of Android apps.
European Supermarket Freezers Set to 122°F in Suspected Hacks
Suspected cyberattacks disrupted refrigeration across seven European countries. Learn how stores were affected and what EMEA retailers should do next.
Hackers Target Supermarket Refrigeration Systems Across Europe, Raising Freezer Temperatures to 50°C
Hackers have targeted supermarket refrigeration systems across at least 10 European countries, forcing retailers to remove chilled and frozen food from…
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
UEFI bootkit BlackX exploits Microsoft’s lack of clarity around Secure Boot protections.
3AM Ransomware Hits 37 UK School Systems in Suspected AI-Assisted Attack
Bitdefender details a 3AM ransomware attack on a UK school estate that encrypted 37 systems, with command timing suggesting possible AI-assisted…
Subnet Solutions PowerSYSTEM Center
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute unauthorized SQL commands and gain access to…
Q&A With Pierre-Loic Kuhn at Filigran: Why Cybersecurity Needs to Evolve
For years, cybersecurity teams have relied on vulnerability scanning and periodic penetration testing to identify weaknesses before attackers can exploit…
Ballot scanner malfunctions, flurry of federal legal actions test election officials on final day of voting
Rumors of malfeasance spread on X despite no evidence, as election officials continue to fight off numerous legal challenges from the Trump administration…
Hackers Use AI Agents to Launch 3AM Ransomware Attacks Against UK School Networks
A ransomware affiliate has hit a group of UK schools with a mix of human control and AI-style automation. The attackers used built-in Windows tools,…
New York City’s Mamdani criticizes Madison Square Garden owner over surveillance tech
The mayor’s comments come after the entertainment giant’s data breach last year, which exposed James Dolan’s surveillance.
Hackers Hijack Emergency Alert Apps in Ukraine and Russia to Send Fake Nuclear Attack Warnings
Hackers targeted emergency alert apps in Ukraine and Russia late on November 1 and into November 2, sending false warnings about radiation, chemical…
Gartner Predicts SOCs Will Have 50% More Engineers Than Analysts by 2028
Gartner predicts that security operations centers will have 50% more engineers than analysts by 2028 as AI agents take over routine alert handling.…
Wordfence Price Increase Coming December 3, 2026
On Thursday, December 3, 2026, pricing for Wordfence Premium, Care, and Response will increase. We’re announcing this change a month in advance so you…
Spring Security JWT Validation Best Practices
A few months into a large-scale legacy-to-cloud migration for a Fortune 50 insurance carrier, I found something that had been sitting quietly in our…
AI threats create ‘urgent’ need to renew cybersecurity information-sharing law, businesses tell Congress
Leading infrastructure-operator associations want lawmakers to renew the program for another 10 years.
Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges
Google on Monday warned that threat actors are hijacking enterprise access to Large Language Models (LLMs) to fraudulently leverage expensive computing…
Russia-Aligned Gorbag Targets Ukraine for Intelligence
Russia-aligned Gorbag has hit Ukrainian justice, local government and defense bodies since 2025
CrowdStrike moves to acquire Fiddler and Dreadnode, adding AI observability and testing to its security platform
CrowdStrike is extending its platform to watch, test and explain autonomous AI agents, as enterprises face behavior-based risks that conventional security…
Barracuda warns of critical flaws allowing root access to devices
Cybersecurity company Barracuda Networks warned customers to patch two vulnerabilities that can let attackers run commands with root privileges. […]
cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
An attacker broke into the update system of the cPGuard security tool on November 2 and used it to send a malicious script to customers’ Linux servers.…