There has been a major data exposure at the AI aggregator 302.ai that has resulted in millions of documents containing private user conversations,…
Category: EN
ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories
How much damage can someone do without breaking much? Quite a lot, it seems. A stolen login can open doors across several systems. A trusted setting can…
OpenMatter Network Positions Decentralized Computing as an Alternative to Data Centers for AI
Melbourne, Florida, 5th November 2026, CyberNewswire
UNM Health Shuts Clinics and Diverts Patients During Security Incident
A cybersecurity incident forced UNM Health to divert ambulances, cancel appointments, and pause care while it contained the threat. On Monday, October 26,…
Hackers pull off $133 million French bank heist via service provider
French cooperative bank Crédit Mutuel Arkéa was targeted in a cyberattack that enabled fraudulent transactions of up to $133 million, forcing it to…
No need to hack when it’s leaking: Artex edition
Zack Whittaker reports: Security researchers have discovered hundreds of copies of a Chinese-made AI hacking tool publicly exposed to the internet for…
Hackers Exploit Malicious CWP Web Server to Backdoor Linux Systems
Linux backdoors have been discovered that have been maliciously implanted into servers that are running Control Web Panel (CWP) via trojanized versions of…
Exilware and BraZetsu
The Hacked-PC Marketplace
Norad targeted by cyberattack
From Norway’s aid agency, Norad, November 3: Norad has been targeted by a cyberattack in which the perpetrators may have gained access to the names and…
AI-Powered CEO Impersonation Scheme Allegedly Defrauded Companies of $129 Million
Three men have been indicted in the United States for an alleged international fraud scheme in which they used artificial intelligence to impersonate…
County of Sussex, New Jersey Notice of Data Privacy Incident
November 6, 2026 8:00 PM EST NEWTON, N.J., Nov. 6, 2026 /PRNewswire/ — Sussex County Prosecutor’s Office (SCPO) experienced a data privacy event that…
DigiCert Hack Exposes Customer Details, Passports, and Driver’s Licences
DigiCert has disclosed a data breach after a server migration error exposed an internal business system to the internet, allowing unauthorized users to…
Coding Agents Copy Your Secrets to a Hidden File. Thousands Are on GitHub
Shmulik Cohen and Matan Giladi write: Apiiro research found 2,539 real secrets in 1,994 public GitHub repositories: database passwords, cloud keys, API…
APT29-Linked Campaign Uses Compromised Websites to Target iOS and Android Devices
Russia-linked cyberespionage hackers have compromised a legitimate web analytics script to distribute sophisticated spyware targeting Apple iOS and Google…
CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands
Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger…
CISA Warns of Actively Exploited WordPress RCE Flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are actively exploiting a recently patched, high-severity…
SonicWall Warns of Potential In-the-Wild Exploitation of SSLVPN Flaw That Bypasses MFA
SonicWall has warned customers to patch a SonicOS SSLVPN vulnerability that could let attackers bypass SAML authentication and its multi-factor…
Gartner Report: The Attack Path is Closing Faster than Most Teams Can Patch
Security teams have never lacked vulnerability data. The harder problem is deciding which issues create a credible path to business impact, then acting…
A tiny supercurrent could unlock quantum information without destroying it
Researchers have proposed a breakthrough technique for reading quantum information without destroying the delicate states that make quantum computers…
The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call
Escalating hacks affecting blood labs and grocery stores show the very real risks to critical infrastructure that come from basic security lapses…