IT Security News Roundup: 2026-11-05 Overnight

IT Security News: Overnight roundup, 2026-11-05

Summary

The early morning news is dominated by the dual-edged nature of AI, which is simultaneously being used to uncover massive amounts of kernel vulnerabilities and accelerate the exploitation of critical infrastructure. A concerning trend of IoT-based attacks on European supermarkets highlights the physical risks of insecure connected devices. These stories underscore a growing urgency for organizations to move beyond legacy systems as automated threats scale rapidly.

1. DreamHost suffered a data breach where attackers exploited a web-based File Manager to steal customer FTP, SFTP, and webmail credentials.
2. A discussion on the Binance hack highlights the systemic security gaps in cryptocurrency exchanges compared to the cooperative recovery mechanisms of traditional banks.
3. The SlippyNunchucks operation is abusing insecure HTTP communications in the Sogou Input Method for Windows to distribute malware via DNS hijacking.
4. OpenAI's upcoming cyber model successfully identified 948 privilege escalation vulnerabilities in the Linux kernel during a single automated research run.
5. IDC MarketScape has recognized Akamai as a leader in Managed Edge Services for its contributions to secure, low-latency AI inference.
6. Attackers stole approximately $1.63 million by exploiting a flaw in outdated BTCPay Server instances to drain hot wallets.
7. Red Hat released critical security updates to fix a Linux kernel TCP vulnerability with a high severity score of 9.8.
8. Bank of America is warning customers against sharing banking passwords with AI assistants, while the podcast also explores the risks of autonomous AI hacking agents.
9. The UK government is urging citizens to stockpile three days of emergency supplies due to threats including potential cyberattacks and military conflict.
10. A second wave of cyberattacks targeting connected refrigeration systems has hit seven European countries, risking widespread physical food spoilage.
11. Videostrong installed backdoors in 1.3 million Android set-top boxes, creating a massive botnet that was then sold to cybercriminals.
12. Coordinated attacks on commercial refrigeration controls forced European supermarkets to discard millions of euros in spoiled food.
13. The Russia-aligned Gorbag group is using information-stealing malware and a WinRAR flaw to target organizations in Ukraine.
14. Gartner predicts that open-weight AI models will manage 90% of enterprise agentic workflow steps by 2030 to reduce automation costs.
15. Cybersecurity agendas are being reshaped in the US as Democratic leaders prepare for upcoming control of congressional homeland security panels.
16. Google has introduced a $250,000 reward for "Root-in-Cloud" vulnerabilities within its Cloud Vulnerability Reward Program.
17. The UK's NCSC warns that AI is making old vulnerabilities easier to exploit, predicting AI-powered ransomware attacks on critical infrastructure by 2028.
18. Hackers manipulated temperatures in supermarket refrigerators across Europe, mirroring a previous attack on French retailers.
19. A breach of the Inna student-information system in Iceland allowed a student to attempt altering grades and attendance records across 16 schools.
20. A 3AM ransomware affiliate appears to have used AI-like loops to generate and revise commands during an attack on a European school.
21. Lab 1 research reveals that a single data breach now typically exposes data linked to over 500 organizations beyond the primary victim.

Summaries written with AI from the linked source articles.

Sources in this roundup

Most-mentioned keywords

Sources

1. DreamHost Confirms Data Breach – Hackers Stole Customer Credentials and Accessed Emails
2. Srsly Risky Biz: The ritual bitcoin sacrifices will continue until security improves
3. SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware
4. OpenAI Cyber Model Uncovers 948 Linux Kernel Privilege Escalation Vulnerabilities
5. Akamai Named a Leader in 2026 IDC MarketScape for Managed Edge
6. Hackers Exploit BTCPay Server Flaw to Steal Cryptocurrency
7. Red Hat Patches 9.8 Linux TCP RCE Flaw
8. Smashing Security podcast #491: How AI agents are spooking the banks
9. UK 'Be Ready' Campaign Urges Household Emergency Prep
10. Supermarket Freezer Cyberattacks Spread Across Europe as Experts Warn of Wider IoT Risks
11. A hidden backdoor put 1.3 million TV boxes to work for criminals
12. Supermarket fridges hacked across Europe
13. Gorbag Hackers Exploit WinRAR Flaw
14. Gartner: Open Models Handle 90% of Agentic AI Work
15. What Democratic control of Congress means for cybersecurity
16. Google expands Cloud VRP with $250K Root-in-Cloud reward
17. UK Warns of Unprecedented Rise in Cyberattacks as AI Accelerates Vulnerability Exploitation
18. Cyber-Attack on Refrigeration Systems Hits Supermarkets Across Europe
19. Student Data Breach Affects Up to 16 Icelandic Schools
20. 3AM Affiliate Embraces AI-Like Loops in European School Attack
21. Lab 1 warns breach data now exposes thousands more firms