IT Security News: Overnight roundup, 2026-11-02 Summary This period is marked by a high concentration of state-sponsored threats and critical system vulnerabilities, particularly concerning North Korean financial heists and Linux host security. A recurring theme is the dual nature of…
A week in security (October 26 – November 1)
A list of topics we covered in the week of October 26 to November 1 of 2026
CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
We analyze a series of attacks on educational institutions that were fully automated during the post-exploitation phase using the CyberStrikeAI…
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
Attackers are impersonating trusted AI bots to scan enterprise websites for exposed passwords, API keys, and cloud credentials. The company tracked a…
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks.
IT Security News Hourly Summary 2026-11-02 09h : 4 posts
4 posts published in the last hour 07:31DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work 07:31DHS data leak, Northflank suffers breach, Russian Poryadok cyberattack 07:02The first ten lines of a command policy for AI coding agents…
DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work
Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for work The agent…
DHS data leak, Northflank suffers breach, Russian Poryadok cyberattack
NetamLoader malware targets government Windows systems in Asia https://thehackernews.com/2026/11/netamloader-malware-targets-government.html Northflank…
The first ten lines of a command policy for AI coding agents
In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI agents. He…
IT Security News Hourly Summary 2026-11-02 08h : 7 posts
7 posts published in the last hour 06:32Hackers Gain Unauthorized Access to WS Audiology CRM Environment and Operational IT Systems 06:31Byoky: Open-source wallet for AI API keys 06:31New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by…
Hackers Gain Unauthorized Access to WS Audiology CRM Environment and Operational IT Systems
WS Audiology (WSA), the parent company of Widex and Signia, is investigating unauthorized access to its internal IT infrastructure after taking selected…
Byoky: Open-source wallet for AI API keys
Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their keys for…
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model…
Malicious Claude Code Extensions in Cursor Marketplace Install Persistent SSH Backdoors on Windows and macOS
Malicious Claude Code extensions distributed through Cursor’s VS Code The Extension Marketplace tried to create persistent SSH backdoors on Windows and…
Product showcase: Trust Onion uses rotating codewords to verify callers
Trust Onion is a free app that gives trusted groups three rotating codewords to check who they are communicating with. It also includes signed selfies,…
Hackers Weaponize ARTEX AI Agents to Automate Network Intrusions and Steal Sensitive Data
Threat actors are weaponizing ARTEX, an autonomous penetration-testing framework, to accelerate network intrusions, escalate privileges, and steal…
IT Security News Hourly Summary 2026-11-02 07h : 10 posts
10 posts published in the last hour 05:32FBI Confirms North Korean Hackers Stole Over $6 Billion From Binance in Massive Crypto Attack 05:32New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Profile Victims and Rank Stolen Data 05:32Ransomware gang…
FBI Confirms North Korean Hackers Stole Over $6 Billion From Binance in Massive Crypto Attack
The Federal Bureau of Investigation (FBI) has linked the theft of over $6 billion in virtual assets from Binance to North Korean hackers, labeling the…
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Profile Victims and Rank Stolen Data
A self-deleting Windows infostealer named VOLTA uses commercial AI models to turn stolen credentials, sessions, and cryptocurrency data into prioritized…
Ransomware gang talked AI agents into doing much of its dirty work
The group behind the Aur0ra ransomware has been using AI agents to move through victim networks, collect credentials and work its way up to domain…
Hacktober 2026: Major Cyberattacks Hit Binance, PHP, Node.js, LiteLLM, and Pentagon
October’s cybersecurity disclosures spanned cryptocurrency platforms, developer infrastructure, certificate authorities, government records, gaming…
Hackers Drain Bitcoin Hot Wallets on BTCPay Servers, Users Urged to Shut Down Immediately
BTCPay Server has issued an urgent warning after receiving reports that attackers were draining Bitcoin hot wallets on its servers. The open-source…
Hackers Target 61 GitHub Repositories With Command Injection Attacks to Steal CI/CD Secrets
Hackers targeted 61 public GitHub repositories in a coordinated command injection campaign designed to steal data from automated development systems.…
Critical Incus and LXD Vulnerabilities Allow Unauthenticated Attackers to Gain Full Cluster Access
Critical certificate-validation vulnerabilities have been identified in Incus and Canonical LXD, allowing unauthenticated attackers to impersonate trusted…
TightVNC Pre-Auth RCE Vulnerability Lets Hackers Execute Code on Windows PCs, PoC Released
A TightVNC Viewer vulnerability can let attackers execute code on Windows PCs before a password prompt appears. Research credited to SeongJoon Cho of SSD…