IT Security News: Morning roundup, 2026-11-04 Summary This period is marked by the escalating role of artificial intelligence in both offensive cyberattacks and defensive strategies, as seen in massive crypto heists and new security platforms. A recurring focus on mobile…
Cloudflare Launches Zero Wire to Track Critical Vulnerabilities and Active Exploitation Across the Internet
Cloudflare launched Zero Wire, a public vulnerability intelligence hub that helps security teams investigate critical internet threats, assess…
Apple Warns Of Sophisticated iPhone Hacks
Government-level spyware is targeting iPhones, warns alert to users in 99 countries, as Germany urges targeted lawmakers to take action
3AM Ransomware Used Human-AI Hybrid Tactics in UK School Estate Compromise
Bitdefender highlighted a unique human-AI approach during a September attack on a UK school estate, which resulted in financial data being exfiltrated
Cursor removes malicious Claude Code extension after SSH backdoor attempt
A malicious version of Anthropic’s Claude Code extension distributed through the Cursor marketplace attempted to install a persistent Secure Shell (SSH)…
FBI pins $6.3B Binance crypto heist on North Korean hackers
Exchange scrambles to replace stolen funds as customers withdraw billions and hackers get busy laundering their haul
Hackers Use Stolen Microsoft Entra ID App Credentials to Breach 27 Organizations and Steal Sensitive Data
Hackers are exploiting stolen Microsoft Entra ID application credentials to infiltrate Microsoft 365 and Azure environments, impacting 27 organizations…
Israeli Start-Up Says Human Error Led To AI Hacks
Tel Aviv-based start-up Irregular Security says human error, time pressures allowed AI models to escape isolation and carry out hacks in testing
Cyberattack on French plasma stores is enough to make your blood boil
Attackers reportedly set cold-room controls to 110°C, but safeguards prevented stock losses
CISA Warns of Active Attacks Exploiting WordPress Core Code Execution Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included a WordPress Core vulnerability in its Known Exploited Vulnerabilities…
IT Security News Hourly Summary 2026-11-04 13h : 26 posts
26 posts published in the last hour 11:32Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527) 11:32Poisoned cPGuard update hits thousands of web hosting servers 11:323AM Ransomware Hackers Use AI-Assisted Attacks to Breach UK Schools and Spread Across…
Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
Overview On October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released…
Poisoned cPGuard update hits thousands of web hosting servers
An attacker has compromised the update infrastructure of cPGuard, a security suite for Linux web hosting servers, and pushed out a malicious update to…
3AM Ransomware Hackers Use AI-Assisted Attacks to Breach UK Schools and Spread Across Windows Domains
A ransomware affiliate known as 3AM compromised a UK school network using a mix of traditional intrusion techniques and patterns suggesting the…
Police Seize 100+ Servers After Four-Year Investment Fraud Probe
A German-led coalition of law enforcers has intensified efforts to strike at a €4m investment fraud scheme
US Military Probes Freezer Failures, After French Hack
Pentagon investigators look into at least six simultaneous freezer failures at US military bases, after French supermarket fridges hacked
Hackers Pushing Remote Access Tool Through Fake Adobe Acrobat Pages
Fake Adobe Acrobat pages distribute signed ScreenConnect installers configured for attacker-controlled remote access to Windows PCs, CloudSEK’s…
Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory…
My Journey to the Center of America’s Political Spam Text Hell
I’ve gotten nearly 2,000 campaign fundraising texts that were meant for someone else. I tried to find out why—and uncovered a labyrinth of politicians,…
Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
Cybersecurity researchers have disclosed details of a cyber espionage campaign specifically targeting Linux infrastructure associated with government…
Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens
Hackers reportedly hit Ukraine ‘s and Russia ‘s emergency alert apps, sending fake nuclear and attack warnings and raising concerns over public safety.…
Malicious cPGuard Updates Served in OpsShield Supply Chain Attack
Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.
Fake job interview opened the door to $6.34 billion Binance heist
A tampered software installer and a fake job interview gave attackers the access they needed to steal about $6.34 billion in digital assets from Binance.…
Hundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake Features
WIRED uncovered some 400 apps and websites linked to Chinese-language developers that look like regular AI tools but had secret features that let users…
Fake Microsoft Support Scams Spread Through Online Ads as Researchers Uncover Organized Fraud Network
An organized fraud operation using paid advertisements, Microsoft Azure hosting, and centrally managed telephone numbers to distribute counterfeit…