IT Security News Roundup: 2026-11-04 Afternoon

IT Security News: Afternoon roundup, 2026-11-04

Summary

This period is marked by a significant surge in AI-driven threats, ranging from autonomous agent attacks to warnings about future critical infrastructure risks. Parallel to this, large-scale botnet takedowns and high-profile data breaches highlight the persistent vulnerability of both IoT devices and institutional databases. For the reader, these trends underscore a shifting landscape where AI is simultaneously a powerful tool for defenders and a dangerous force multiplier for attackers.

1. Guardicore Labs discovered a ransomware campaign targeting MySQL servers using double extortion to pressure victims into paying.
2. Google and partners dismantled the XCPE botnet, which compromised 1.3 million Android Smart TVs to facilitate advertising fraud.
3. Attackers hijacked the cPGuard update channel to deploy a Linux backdoor and steal server credentials.
4. Many companies are increasing their cybersecurity budgets but continue to struggle with effective oversight of AI implementation.
5. The SANS Institute released the ISC Stormcast podcast for November 3rd, providing a summary of current security trends.
6. The Kyiv Independent, a Ukrainian news outlet, suffered a suspected cyberattack attributed to Russian actors.
7. Have I Been Pwned revealed that a breach at Harvard exposed approximately 851,000 email addresses.
8. Binance reported that the hackers responsible for stealing billions in cryptocurrency spent several months planning the heist.
9. Cogent Security was recognized in the Fortune Cyber 60 for its industrial approach to running cyber defense.
10. Google helped dismantle a botnet of 1.3 million Android TV boxes used as proxies to access millions of other IoT devices.
11. Researchers identified a credential-stealing campaign called The Oracle of Delphi that uses RDP brute forcing and Trojan.sysscan malware.
12. Acronis uncovered the BOSSAI system, where a single hacker used 12 AI agents to target Taiwan's emergency services and government systems.
13. The UK's NCSC warns that AI will likely be used to exploit longstanding weaknesses in critical infrastructure within two years.
14. MariaDB introduced new AI-focused capabilities for its Enterprise Platform 2027 to improve data retrieval and agent memory.
15. A US government IT technician pleaded guilty to stealing Top Secret files and sending them to Ethiopia over two years.
16. Unit 42 released intelligence highlights focusing on the rapid adoption of AI in offensive cyber workflows and financial extortion.
17. Ahmad Umar Agha was sentenced to 42 months in prison for a decade-long hacking conspiracy on behalf of the Syrian regime.
18. The Node.js project announced high-severity security patches for its 22.x, 24.x, and 26.x release lines arriving November 11.
19. mSeven Software warned mSecure password manager users to reset credentials after a cyberattack exposed an encrypted database.
20. Security experts argue that manual, paper-based incident response is too slow for the speed of modern cyberattacks.
21. Google shut down a global botnet involving Videostrong TV boxes that shipped with pre-installed malware to evade security tests.
22. Microsoft Edge implemented a scareware blocker to stop scams that weaponize browser push notifications to trick users.
23. A critical remote use-after-free vulnerability (CVE-2026-98432) was identified in the Linux kernel's TCP stack.
24. The NCSC published an assessment on AI-enabled threat trends and their projected impact through 2028.
25. A maximum-severity vulnerability in a widely used OT programming tool is being exploited to deliver Linux malware to industrial gateways.

Summaries written with AI from the linked source articles.

Sources in this roundup

Most-mentioned keywords

Sources

1. PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
2. Do You Have Android Smart TV? Google Disable 1.3M-Device XCPE Botnet
3. cPGuard Update Channel Hijacked to Deploy Linux Backdoor and Steal Server Credentials
4. Companies spending more on cybersecurity but still struggling with AI oversight
5. ISC Stormcast For Tuesday, November 3rd, 2026 https://isc.sans.edu/podcastdetail/10162, (Tue, Nov 3rd)
6. Ukrainian news outlet Kyiv Independent hit by suspected Russian cyberattack
7. Harvard Breach Exposed 851,000 Email Addresses, HIBP Finds
8. Binance says hackers who stole billions in crypto spent months planning heist
9. Cogent Security Makes the Fortune Cyber 60 for a Second Year, With a Plan to Run Cyber Defense Like a Factory
10. Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
11. The Oracle of Delphi Will Steal Your Credentials
12. One Hacker Used 12 AI Agents to Target Taiwan's Emergency Services
13. Cyber chief: UK facing AI-powered attacks on critical infrastructure within two years
14. MariaDB enhances agent development for its next-gen database platform
15. US gov IT worker pleads guilty to sending Top Secret files to Ethiopia
16. Unit 42 Threat Intelligence Highlights – Nov. 2, 2026
17. Syrian Man Sentenced for Wide-Ranging Hacking Conspiracy Conducted on Behalf of the Bashar Al Assad Regime
18. Node.js Schedules High-Severity Security Fixes for 22.x, 24.x, and 26.x Release Lines
19. mSecure password manager hack prompts password reset warnings
20. Incidents Move Too Fast for Pen & Paper
21. Google shuts down global botnet running on certified Android devices
22. How Microsoft Edge Scareware Blocker Stops Malicious Notification Scams
23. CVE-2026-98432: A Remote Use-After-Free in the Linux Kernel's TCP Stack
24. Artificial intelligence and cyber intrusion
25. Max-severity bug in widely used OT programming tool exploited to deliver Linux malware