200 posts published today
- 22:32CVE-2026-98432: A Remote Use-After-Free in the Linux Kernel’s TCP Stack
- 22:31Google shuts down global botnet running on certified Android devices
- 22:31How Skyfire and Akamai Enabled 2.5 Million Agentic Transactions
- 22:03Chinese hackers use ARTEX AI in automated attacks against 200 orgs
- 22:02CVE-2026-105811 – Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
- 22:02Largest crypto exchange in Brazil confirms cyberattack as millions flow out of platform
- 22:02CVE-2026-116635 – Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
- 22:00IT Security News Hourly Summary 2026-11-02 23h : 5 posts
- 21:32Maple Networks Highlights AI Data Security Risks at International Cyber Expo 2026
- 21:31Business groups mount fresh campaign for long-term renewal of information sharing law
- 21:31StyleSmuggler Exploitation Deploys PSK Agent RAT Against Magento Stores
- 21:31What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks
- 21:00IT Security News Hourly Summary 2026-11-02 22h : 4 posts
- 20:31Michigan State cyber incident claimed by ransomware gang behind recent hospital attack
- 20:02Fintech platform Sageworks taken offline after suspected cyberattack
- 20:02Germany says lawmakers’ iPhones may have been hacked with spyware
- 20:00IT Security News Hourly Summary 2026-11-02 21h : 9 posts
- 19:32How to Keep Your Voice Recordings Private on iPhone
- 19:32Cops bust botnet of 1.3M infected Android TV boxes
- 19:32VOLTA, the infostealer that asks an AI which victims are worth the effort
- 19:31CVE-2026-120497 – Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows
- 19:31Between Two Nerds: Finding bugs does not mean security
- 19:02Google disrupts million-device XCPE Android malware botnet, bans TV box maker
- 19:02Mercado Bitcoin Suffers Cyberattack as Researchers Flag $40 Million in Suspicious Crypto Transfers
- 19:02⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
- 19:00IT Security News Hourly Summary 2026-11-02 20h : 5 posts
- 18:31PapRAT Cyber-Espionage Campaign Leaves a ‘Bitter’ Taste in South Asia
- 18:31Beyond DKIM key rotation: understanding email replay attacks
- 18:02Keeping pace with e-evidence: New report examines Europe’s digital forensic capabilities
- 18:02CVE-2026-119085 – Template injection in the publishing component of Virtual Engineering Workbench
- 18:00IT Security News Hourly Summary 2026-11-02 19h : 12 posts
- 17:32Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes
- 17:31Polymarket pledges to give $3.9 million back to victims after site compromise
- 17:31CISA Kicks Off Critical Infrastructure Security and Resilience Month 2026
- 17:31Storm Ransomware Is Scaling Fast and Selling an AI Powered Image
- 17:07IT Security News Roundup: 2026-11-02 Afternoon
- 17:04CVE-2026-119301 – Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
- 17:04BTCPay Server warns of hot wallet crypto thefts on outdated instances
- 17:03Russia’s statistics agency confirms cyberattack claimed by Belarusian and Ukrainian hackers
- 17:03PapRAT Cyber Espionage Campaign Leaves a ‘Bitter’ Taste in South Asia
- 17:03Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
- 17:02Thieves pilfer environment variables from Trigger AI workflow tool
- 17:00IT Security News Hourly Summary 2026-11-02 18h : 11 posts
- 16:32Could Nick Andersen’s leadership outlast the clock on his acting role?
- 16:32Agentic pen-testing tool employed in multiple espionage campaigns around the globe
- 16:31Token thieves costing companies $100K+ per day in illicit LLM charges
- 16:31As the White House touts its AI task force, CISA is conspicuously missing
- 16:03Your Mobile Carrier Stores Your Call Logs for Years
- 16:03Google disrupts XCPE botnet, bans the company behind it
- 16:03Why Pay Twice? One Platform for Enterprise WAF and CDN Speed
- 16:02HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites
- 16:02BTCPay Server warns of hot wallet thefts targeting outdated instances
- 16:02CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)
- 16:00IT Security News Hourly Summary 2026-11-02 17h : 21 posts
- 15:33Cybersecurity M&A Roundup: 37 Deals Announced in October 2026
- 15:32Apktool – Decompile, Edit and Rebuild Android APKs
- 15:32CYBER BRIEFING | NOVEMBER 02, 2026
- 15:32Cyber-Attacks Target Ukraine and Russia Emergency Alert Apps
- 15:31European and Ecuadorian cooperation leads to 20 arrests in major hit against drug trafficking
- 15:31Drupal Commerce Flaw Exposes Online Stores to Fraudulent Order Manipulation
- 15:06Cloudflare Report Highlights Changing DDoS Attack Trends in Q3 2026
- 15:06Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk
- 15:05Microsoft fixes Smart App Control broken by October Windows update
- 15:05Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps
- 15:05Microsoft’s AI Risk Report Misses This Key Detail
- 15:04Armadin Tests Find 88% of Severe Flaws Outside Vendor Advisories
- 15:045 stars for sale: Inside the underground fake review trade
- 15:04AI-powered infostealer picks out the most profitable parts of your stolen data
- 15:03DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment
- 15:03Mutipath TCP: Use and Detection, (Mon, Nov 2nd)
- 15:03Russian and Ukrainian hackers hijack emergency apps to spread fake nuclear attack warnings
- 15:02Hackers disrupt refrigeration systems at European supermarkets
- 15:02Applebee’s customer data exposed by password left in app
- 15:02Apple warns users in 99 countries of mercenary spyware
- 15:00IT Security News Hourly Summary 2026-11-02 16h : 23 posts
- 14:33Ordering violence from abroad: five suspects arrested in Spain, Morocco, and France
- 14:33Guardz Brings Palo Alto Networks Prisma Browser Protection to Small Businesses
- 14:32A fresh wave of cyberattacks has hit Europe’s supermarket refrigerators, destroying food across countries
- 14:32PapRAT Cyber Espionage Campaign Leaves a ‘BITTER’ Taste in South Asia
- 14:32Second wave of refrigeration cyberattacks hits European supermarkets
- 14:31SMS of Death: Android Zero-Click DoS Vulnerability
- 14:31BITTER APT Using Fake Diplomatic Documents to Deliver PapRAT Spyware
- 14:06Revolve Data Breach Impacts at Least 180,000 People
- 14:06Hackers Using Microsoft Teams Messages and Calls to Trick Users and Gain Remote Access to System
- 14:06UK Court Upholds Ofcom Information Notices
- 14:05Bitter Deploys PapRAT in Asian Cyber-Espionage Campaign
- 14:05Hackers hijack Ukrainian and Russian alert apps to push fake nuclear and chemical warnings
- 14:05What Makes a Good Security Agent? 5 Lessons from the AgentWorks Hackathon
- 14:04Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward
- 14:04POC Released for Windows WinSock Ancillary Privilege Escalation Vulnerability
- 14:04Government Linux Servers Hit by SysGoRAT Campaign
- 14:03Hackers Could Exploit iPhone BootROM Flaws to Compromise Cryptocurrency Wallet Security
- 14:03Hackers Compromise Ukraine, Russia Emergency Alert Apps
- 14:03Hackers Exploit Patched Synology NAS Vulnerabilities to Deploy C3RB3R Ransomware and Encrypt Files
- 14:02Cognizant forms 25,000-strong OpenAI group
- 14:02Northflank Security Breach Leads to Unauthorized AI API Key Usage, Customers Urged to Rotate Secrets
- 14:02Malicious Claude Extension in Cursor Supply Chain
- 14:00IT Security News Hourly Summary 2026-11-02 15h : 8 posts
- 13:32Frozen part II: Hackers remotely defrost produce in Euro supermarkets … again
- 13:32Second wave of suspected cyberattacks hits supermarket freezers across Europe
- 13:32Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
- 13:31Northflank Breach Exposes Customer Secrets, Leading to Unauthorized AI API Key Usage
- 13:31Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy
- 13:02Trezor warns some of its wallets may hide a seed-stealing implant
- 13:02Over 1,000 GitLab servers vulnerable to ongoing RCE attacks
- 13:00IT Security News Hourly Summary 2026-11-02 14h : 22 posts
- 12:34New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia
- 12:34What Is SASE? Secure Access Service Edge Explained
- 12:34AI Vulnerability Finding
- 12:33Unpatchable Hardware Flaws in Older iPhones Allow Attackers to Steal Crypto Wallet Recovery Phrases
- 12:33Top 10 Best Digital Forensics & Incident Response (DFIR) Companies in 2026 [Ranked & Scored]
- 12:33Backporting security fixes at scale with Codex
- 12:32Top 10 Best Managed SIEM Services in 2026 [Ranked & Scored]
- 12:32CrowdStrike 2026 Legal Threat Landscape Report: eCrime Leads Attacks, China Activity Intensifies
- 12:32Top 10 Best SOC-as-a-Service Providers in 2026 [Ranked & Scored]
- 12:31AI Scams: How Criminals Use Deepfakes, Fake Websites and Voice Cloning to Target Consumers
- 12:31Top 10 Best Incident Response Retainer Services in 2026 [Ranked & Scored]
- 12:05Hackers Use CyberStrikeAI Agents to Automate Windows Domain Takeovers and Credential Theft
- 12:04New ChatGPT Phishing Kit Uses Rotating WordPress Websites to Steal Payment Details and OTPs
- 12:04Synology warns of C3RB3R ransomware attacks targeting NAS devices
- 12:04Hackers Hijack Swedish Supermarket Fridges and Raise Freezer Temperatures to 55°C
- 12:03Cursor removes malicious Claude Code extension after SSH backdoor attempt
- 12:03Top 10 Best Identity Governance & Administration (IGA) Tools in 2026
- 12:03FBI pins $6.3B Binance crypto heist on North Korean hackers
- 12:02PentestPad: How Pentest Companies Adapt In The Era of AI
- 12:02Chainalysis breached using “offensive agentic techniques”
- 12:02Hackers Exploit ChatGPT’s Popularity With Fake Billing Notices That Target Credit Cards and OTPs
- 12:00IT Security News Hourly Summary 2026-11-02 13h : 14 posts
- 11:33Malicious Claude Code Extension Served in Cursor Supply Chain Attack
- 11:33Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
- 11:32My Journey to the Center of America’s Political Spam Text Hell
- 11:32Hackers Target Supermarket Refrigeration Systems Across Sweden, Raising Freezer Temperatures to 55°C
- 11:32Hackers Pushing Remote Access Tool Through Fake Adobe Acrobat Pages
- 11:31Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
- 11:31Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
- 11:31Hackers Target Emergency Alert Apps in Ukraine and Russia, Sending Fake Nuclear Attack Warnings
- 11:08IT Security News Roundup: 2026-11-02 Morning
- 11:02US Military Probes Freezer Failures, After French Hack
- 11:02Hackers Weaponize Open-Source CyberStrikeAI Framework to Launch AI-Powered Network Intrusions
- 11:02Chainalysis Discloses Data Breach Following AI-Driven Cyberattack
- 11:02Researchers Discover High-Severity ChatGPT Flaw That Exposed Private Conversations to Attackers
- 11:00IT Security News Hourly Summary 2026-11-02 12h : 19 posts
- 10:33FBI pins $6.3 billion Binance crypto heist on North Korea while scammers circle anxious users
- 10:33Seven egregious failures of modern web tech
- 10:33Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens
- 10:33Hundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake Features
- 10:33Apple Issues Urgent Security Alerts Over Mercenary Spyware Attacks in 99 Countries
- 10:323 questions for securing AI agents
- 10:32FBI Attributes Binance Heist to North Korea’s TraderTraitor
- 10:32How fixing our data infrastructure before it broke us gave back 6,200 engineering hours
- 10:32Chainalysis Confirms Cyberattack as Hackers Exploit Vulnerabilities to Access Internal Tools
- 10:31Protecting OT, IoT and medical devices without disrupting operations
- 10:31Are AI certifications still worth it? What changed in 2026
- 10:0411 Breach & Attack Simulation Tools: The 2026 Buyer’s Verdict Guide
- 10:03Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
- 10:0311 Security Data Lake Platforms: The 2026 Buyer’s Verdict Guide
- 10:03Ivanti patches two more Connect Secure zero-days chained in attacks
- 10:0211 Security Log Management Tools: The 2026 Buyer’s Verdict Guide
- 10:02Chainalysis Warns Customers After “Offensive Agentic” Security Incident
- 10:0211 Threat Hunting Services: The 2026 Buyer’s Verdict Guide
- 10:00IT Security News Hourly Summary 2026-11-02 11h : 9 posts
- 09:31Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques
- 09:04Reddit Plans Mandatory Logins to Block AI Bots From Scraping User Data
- 09:03Hackers Use ARTEX AI Agents to Automate Active Directory Attacks, Kerberoasting, and Lateral Movement
- 09:03Hackers Claim to Have Stolen 30GB of Data From Frooti Maker Parle Agro
- 09:03FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
- 09:02VOLTA Malware Steals Gmail and Discord Sessions, Then Uses AI to Build Detailed Victim Profiles
- 09:02FBI blames N. Korea’s TraderTraitor for Binance theft, urges crypto industry to block transactions
- 09:02Critical BeyondTrust Vulnerability Faces Fresh Exploitation Probes as Hackers Prepare for Mass Scanning
- 09:00IT Security News Hourly Summary 2026-11-02 10h : 5 posts
- 08:32A week in security (October 26 – November 1)
- 08:31CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
- 08:31Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
- 08:02Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
- 08:00IT Security News Hourly Summary 2026-11-02 09h : 4 posts
- 07:31DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work
- 07:31DHS data leak, Northflank suffers breach, Russian Poryadok cyberattack
- 07:02The first ten lines of a command policy for AI coding agents
- 07:00IT Security News Hourly Summary 2026-11-02 08h : 7 posts
- 06:32Hackers Gain Unauthorized Access to WS Audiology CRM Environment and Operational IT Systems
- 06:31Byoky: Open-source wallet for AI API keys
- 06:31New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
- 06:02Malicious Claude Code Extensions in Cursor Marketplace Install Persistent SSH Backdoors on Windows and macOS
- 06:02Product showcase: Trust Onion uses rotating codewords to verify callers
- 06:02Hackers Weaponize ARTEX AI Agents to Automate Network Intrusions and Steal Sensitive Data
- 06:00IT Security News Hourly Summary 2026-11-02 07h : 10 posts
- 05:32FBI Confirms North Korean Hackers Stole Over $6 Billion From Binance in Massive Crypto Attack
- 05:32New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Profile Victims and Rank Stolen Data
- 05:32Ransomware gang talked AI agents into doing much of its dirty work
- 05:31Hacktober 2026: Major Cyberattacks Hit Binance, PHP, Node.js, LiteLLM, and Pentagon
- 05:05IT Security News Roundup: 2026-11-02 Overnight
- 05:04Hackers Drain Bitcoin Hot Wallets on BTCPay Servers, Users Urged to Shut Down Immediately
- 05:03Hackers Target 61 GitHub Repositories With Command Injection Attacks to Steal CI/CD Secrets
- 05:03Critical Incus and LXD Vulnerabilities Allow Unauthenticated Attackers to Gain Full Cluster Access
- 05:03TightVNC Pre-Auth RCE Vulnerability Lets Hackers Execute Code on Windows PCs, PoC Released
- 05:00IT Security News Hourly Summary 2026-11-02 06h : 3 posts
- 04:32Android SMS of Death Exploit Goes Public, Leaving Android 12 and 13 Phones Without a Fix
- 04:31Why Organizations Secure AI Agents with Falcon Guardian
- 04:03Inside a successful AWS European Sovereign Cloud exercise to demonstrate independent operation
- 03:31Critical Certificate Validation Flaw in LXD and Incus Could Give Hackers Control of Linux Hosts