200 posts published today
- 22:32Russian APT29 Targets Mobile Users with Watering Hole Attacks
- 22:325 Active Cyber Threats That Put US Enterprises at Risk in October 2026
- 22:32China’s AI guardrails, NCSC’s 2028 warning, more Binance hack details
- 22:31Friday Squid Blogging: New Jurassic Squid Predecessors
- 22:31The Department of Know: LLM jacking, Asia rocked by Amadeus, freezers still getting hacked
- 22:04Why waiting for quantum computers to arrive could leave your security exposed
- 22:03CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
- 22:03AI Agent Governance: Who Owns Access and Accountability?
- 22:03The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603
- 22:02UK Wades Into Tech Sovereignty Amid AI Policy Changes
- 22:02Agents reveal secrets when offered to team up with each other
- 22:02Operação de influência russa tem como alvo generalizado a América Latina
- 22:00IT Security News Hourly Summary 2026-11-06 23h : 11 posts
- 21:32GhostMap Bug Leaves Android Phones Stuck in Reboot Loop
- 21:32Addressing protocol security gaps in multi-tenant Kubernetes
- 21:32Why enterprise AI needs unified metadata infrastructure
- 21:31Turning Up the Heat: Inside the Attacks on Europe’s Refrigeration System
- 21:31Your LLM writes good SQL. That’s not the same as safe SQL
- 21:03Chainalysis says hackers stole credentials and tokens for all of its customers
- 21:03OpenAI’s new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs
- 21:02CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access
- 21:02The Smartest Part of a Home Camera Is Moving Off the Cloud
- 21:02State attorneys general secure up to $10 million and corrective action plan from Perry Johnson companies after 2023 breach
- 21:00IT Security News Hourly Summary 2026-11-06 22h : 8 posts
- 20:31When AI Clones Your Software From the Outside, Sentinel Protects What’s Inside
- 20:31North Korean fake job interview leads to $6.3B Binance heist
- 20:31ISC Stormcast For Wednesday, November 4th, 2026 https://isc.sans.edu/podcastdetail/10164, (Wed, Nov 4th)
- 20:03Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content
- 20:02U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog
- 20:02Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach
- 20:02Risky Bulletin: Hackers brick Chinese EVs in Russia
- 20:00IT Security News Hourly Summary 2026-11-06 21h : 15 posts
- 19:32GhostMap Android Vulnerability Can Crash Phones Without Opening an App
- 19:32CISA Adds One Known Exploited Vulnerability to Catalog
- 19:32Certificate authority DigiCert reports data breach involving business customer info
- 19:31CVE-2026-119923 and CVE-2026-119924: Issues with Babelfish for Aurora PostgreSQL
- 19:31Five TEFAF robbery suspects added to EU Most Wanted
- 19:31Medical services company settles with 4 states over 2023 hack of sensitive patient records
- 19:04NATS Air Traffic Control Failure Cost UK Economy £33m
- 19:04AI Gave Your Incident Archive a Second Job
- 19:03Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks
- 19:03Free Chinese AI Models Are Getting Scary Good at Hacking
- 19:03Hundreds of Artex AI hacking tools found publicly exposed to the web
- 19:02The Good, the Bad and the Ugly in Cybersecurity – Week 45 (2026)
- 19:02Fake security tools on GitHub push backdoors and infostealers
- 19:027 Best Vulnerability Scanning Tools for Security Teams in 2026
- 19:00IT Security News Hourly Summary 2026-11-06 20h : 6 posts
- 18:03DigiCert Confirms Breach Exposing Customer Data and ID Documents
- 18:03CVE-2026-122193 – Issue with Trusted Remote Execution Setup Guide – OS command injection in the example SSM documents in Trusted Remote Execution (REX)
- 18:02Vercel Introduces DBSC: How It Protects Against Cookie Theft
- 18:02QNAP says hackers breaching NAS devices in Plex2Shell attacks
- 18:01Holiday Retail Fraud: How Scammers Exploit Refunds and Gift Cards
- 18:00IT Security News Hourly Summary 2026-11-06 19h : 18 posts
- 17:33New Dark Project Ransomware Group Offers Hackers 80% Commission to Expand Cyberattacks
- 17:32Authorities accuse trio of using AI deepfakes to defraud $129M from businesses
- 17:32Building a Windows App for a Resilient SSH SOCKS Proxy and Selective Browser Routing
- 17:327 Best Vulnerability Scanning Tools for Lean Security Teams in 2026
- 17:31Hackers Publish Stolen Data After Bristol Schools Hack
- 17:31Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
- 17:31FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers
- 17:05IT Security News Roundup: 2026-11-06 Afternoon
- 17:03Thai Opposition Leaders Warn Of Spyware Attacks
- 17:03Active Exploits, AI Attacks, and Massive Breaches Define the Week
- 17:035th EMPACT Hackathon leads to the detection of 51 potential victims
- 17:03DreamHost Data Breach Exposes FTP Credentials and Webmail Session Information
- 17:02OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits
- 17:02Blood bank fridge hacks, Anthropic model identity, Google Calendar phishing
- 17:02Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time
- 17:02India’s Road Ministry Orders Forensic Audit of Four Transport Portals After Vehicle Data Found for Sale on Telegram
- 17:02Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot
- 17:00IT Security News Hourly Summary 2026-11-06 18h : 12 posts
- 16:32Crypto Players Shut Down Anti-Crime Programme
- 16:31Cybersecurity Training That Earns Recognition
- 16:31Hackers enlist Artex to scan GitHub repositories for exposed secrets
- 16:31Inside IAM 360 Issue 5: AI Agents, Water Security, Carbon Capture and More
- 16:03Hackers Exploit Vulnerabilities Within 35 Minutes of Public PoC Release, CrowdStrike Finds
- 16:03Companies struggle to know what normal looks like for AI agents
- 16:03Veeam warns of Software Appliance boot failures on AMD EPYC hosts
- 16:02GTA 6 Scams Push Malware and Crypto Cons
- 16:02OpenAI Unveils GPT-6 Cyber: Stronger Exploits, Tighter Safeguards
- 16:02IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It
- 16:01DreamHost Breach Exposes FTP/SFTP and Webmail Credentials
- 16:00IT Security News Hourly Summary 2026-11-06 17h : 23 posts
- 15:33SpaceX selects Qualcomm for Starlink Mobile 5G
- 15:33Big Tech sues over California plan to limit kids’ scrolling
- 15:33CYBER BRIEFING | NOVEMBER 06, 2026
- 15:32Enterprises must take blame for their AI agents’ mistakes, say regulators
- 15:32Queens Public Library hit by ransomware attack
- 15:32U.S. Charges Canadian Man in Alleged Hack of University Supercomputers
- 15:31EU Cyber Resilience Act enforcement deadline Dec 2027
- 15:31Railway Engineer Admits Running AI Agents Against Rival Cloud Platform
- 15:31CISA adds Apple CVE-2024-27834 to KEV catalog
- 15:06CEO-spoofing scammers used AI to help steal more than $100 million, feds say
- 15:05Chainalysis says breach exposed credentials for all customers
- 15:05In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days
- 15:05The 5 Best VPN Extensions for Chrome
- 15:04Mirax Android RAT Hijacks Phones Through Streaming-App Ads to Steal Banking Credentials and Drain Accounts
- 15:04After Binance, check what your signing systems can approve
- 15:04Microsoft Warns Fake Game Downloads Are Secretly Monetizing Windows PCs
- 15:03What AI Changes About the Cybersecurity Skills Your Team Needs
- 15:03ARTEX AI Agents Steal 190,000 Gaming Credentials and Hundreds of Apple Code-Signing Certificates
- 15:03Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
- 15:02Anthropic’s Claude Code Reportedly Leaks User Email Addresses Through HTTP User-Agent Headers
- 15:02Pinpointing Location of Videos from Background Airplane Sounds
- 15:01Hackers Launch 240,000 Exploit Attempts WordPress Core Flaw Enabling Remote Code Execution
- 15:00IT Security News Hourly Summary 2026-11-06 16h : 10 posts
- 14:33Bank Phishing Sites Fake Suspensions to Evade Takedowns
- 14:32OpenAI buys tiny software developer to improve Codex
- 14:32DigiCert Data Breach Impacts Business Customer Information
- 14:32The Next Target for Data Breach Lawsuits – Law Firms That Represent Breached Parties
- 14:31Metasploit Wrapup: Unauth RCE modules in Network Perimeter Devices and much more
- 14:31Chainalysis Says Cyber Breach Exposed User Data and Authentication Tokens Due to Agentic Attack
- 14:02Any long password will do: SSH flaw lets hackers into Alpine systems, routers and more
- 14:02Why Europe’s Freezer Hacks Spread So Far, So Fast
- 14:01NI: Parents warned to be on alert after school data breach
- 14:00IT Security News Hourly Summary 2026-11-06 15h : 15 posts
- 13:32DigiCert admits 16-month security lapse exposed customer information
- 13:32OpenAI Unveils AI Pipeline That Found & Patched 948 Linux Root Exploits
- 13:32Storm-2603 Hackers Exploit SharePoint ToolShell Flaws to Hide Fileless Backdoor and Launch Ransomware Attack
- 13:31US Agencies Urge Organizations to Harden Refrigeration Controllers
- 13:31Hackers Use ARTEX AI to Find GitHub Secrets and Steal Azure Key Vault Data in Just 5 Minutes
- 13:31OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line
- 13:04Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack
- 13:04D-Link warns of multiple zero-days in DGS-3130 Series switches
- 13:03Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users’ Computers
- 13:03OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)
- 13:03ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns, Censys Finds
- 13:02OpenAI Rates GPT-6 Cyber Critical After Major Vulnerability Discoveries
- 13:02Insignary Releases Free Insignary-Chk Tool to Detect PHP2Shell and Node2Shell Exposure
- 13:02Microsoft Paint RCE Fix Now Available, but Windows Update Won’t Deliver It
- 13:00IT Security News Hourly Summary 2026-11-06 14h : 14 posts
- 12:32Agentic Scrum, Part 1 of 5: The Product Owner Is Not a Vending Machine
- 12:32Attacks on supermarket and blood storage systems prompt US warning
- 12:32OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass
- 12:31OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run
- 12:31MDR vs SOC: How to choose the right option for your organisation
- 12:31Researchers Find Residential Proxies on White House Network
- 12:04Srsly Risky Biz: The ritual bitcoin sacrifices will continue until security improves
- 12:03Dark Project Ransomware Gang Claims 38 Victims Across 8 Countries, Targeting Healthcare and Manufacturing
- 12:03The Flood is Coming And The Pipes Were Already Full
- 12:03CWPdoor Malware Detection and Removal: What Linux Server Admins Should Check
- 12:02CISA, FBI Urge Action to Protect Industrial Refrigeration Networks
- 12:02EU accuses TikTok of trapping users in harmful ‘rabbit holes’
- 12:01Want to Rent an Internet Address at the White House?
- 12:00IT Security News Hourly Summary 2026-11-06 13h : 12 posts
- 11:32CPython flaw exposes AI inference servers to sandbox escape attacks
- 11:31SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware
- 11:31CISA Warns Hackers Are Exploiting 18-Year-Old WordPress Core Vulnerability
- 11:31UK ministers seek powers to investigate when AI agents are let off the leash
- 11:05IT Security News Roundup: 2026-11-06 Morning
- 11:03Residential proxy traffic caught leaving the White House network
- 11:03ENISA Warns of Cyberattacks Targeting Refrigeration Systems Across Europe
- 11:02What Democratic control of Congress means for cybersecurity
- 11:02Student Data Breach Affects Up to 16 Icelandic Schools
- 11:02Smashing Security podcast #491: How AI agents are spooking the banks
- 11:01Lab 1 warns breach data now exposes thousands more firms
- 11:00IT Security News Hourly Summary 2026-11-06 12h : 20 posts
- 10:34Sweden Excludes ChatGPT and Claude From Government Workflows While Retaining Copilot
- 10:33Why edge-cloud AI inference pipelines are key
- 10:33OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed
- 10:33Hackers Use Fake Streaming Apps to Spread Mirax Android Malware and Steal Bank Accounts
- 10:32Virtualization security: attack layers and misconfiguration impact
- 10:32Claude Dispatch Flaw Lets Malicious Browser Extensions Run Code on Connected Computers
- 10:32Critical Rails Bug Threatens to Derail Vulnerable Servers
- 10:31Python is de-jitted but still de-lovely
- 10:31Sarajevo Cyber Security Summit 2026 puts the Western Balkans’ cyber resilience in focus
- 10:31ARTEX AI Hacking Framework Found on 1,465 Public Servers, Some Hosting Cyberattack Tools
- 10:04OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions
- 10:04Hackers exploited iOS and Android flaws to infect phones
- 10:04Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
- 10:03MetaMask says recent attack didn’t affect wallet infrastructure
- 10:03Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released
- 10:03Apple turns iCloud into spy cloud, will start looking at public share links
- 10:02CVE-2026-122266 – Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS
- 10:02Vercel rolls out new protection against stolen session cookie attacks
- 10:01OpenAI Reports Covert Underperformance in GPT-6 Astra
- 10:00IT Security News Hourly Summary 2026-11-06 11h : 11 posts
- 09:32UK Warns Its Critical Infrastructure Faces Grave Risk
- 09:32Claude AI Flaw Lets Malicious Browser Extensions Execute Commands on Remote Computers
- 09:32PHP2Shell: What the rapid exploitation of critical PHP vulnerabilities means for security teams
- 09:31Half of Security Leaders Report Sensitive Data Exposure Through AI Tools
- 09:31US agencies warn attackers are targeting refrigeration systems that protect food and medicine
- 09:31Huntress turns real-world attack intelligence into fleet-wide ‘herd immunity’ with new platform capabilities
- 09:03Hackers Could Bypass ChatGPT Lockdown Mode to Steal Conversations Without Users Knowing
- 09:02Chainalysis Breach Exposes All Users’ Credentials, Forces Shutdown of Key Services
- 09:02Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
- 09:01ChatGPT Lockdown Mode Bypass Allowed Hackers to Steal Private Chats Without User Interaction
- 09:00IT Security News Hourly Summary 2026-11-06 10h : 8 posts
- 08:31AI agents are a ‘bane’ for some website operators, says Cloudflare
- 08:31mSecure tells users to change passwords but won’t say why [updated]
- 08:31Investment scams with potential victims in at least 50 countries: over 100 servers seized
- 08:03Officials extradite Canadian man to US for alleged cryptomining spree
- 08:02Hackers stole DreamHost customer files and inboxes during months-long attack
- 08:02CVE-2026-122192 – Guest Access to Firecracker Process Memory After a Failed Memory Discard
- 08:02DreamHost confirms data breach exposed FTP logins and webmail sessions
- 08:00IT Security News Hourly Summary 2026-11-06 09h : 21 posts
- 07:34Top 10 Best Deception Technology Solutions in 2026 [Ranked & Scored]
- 07:33The fake $750 Apple Cash reward that pays out nothing
- 07:33Hackers steal 320,000 UK school files and publish them on dark web
- 07:33Hugging Face’s CEO Says His P(Doom) Is ‘Close to Zero’