Hackers are using exposed credentials to access limited corporate data, then presenting that access as evidence of major breaches to pressure companies…
Fake Interview of Software Engineer Led to Binance Mega-Heist
Binance has revealed details of how North Korean hackers stole $6.4bn theft of crypto assets
North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack
In recent months, North Korea has accelerated its weapons tests in a likely bid to increase its leverage in potential diplomacy with the US.
Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure
Russian authorities have arrested three suspected members of a threat group known as VasyGrek and dismantled its criminal infrastructure. Also known as…
mSecure Password Manager Reports Suspicious Activity, Urges Users to Change All Stored Passwords
mSeven Software, the developer of the mSecure password manager, has advised customers to secure all confidential data stored in the app after detecting…
CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
We analyze a series of attacks on educational institutions that were fully automated during the post-exploitation phase using the CyberStrikeAI…
Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million
A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.
IT Security News Hourly Summary 2026-11-04 10h : 10 posts
10 posts published in the last hour 08:32Microsoft Edge Now Automatically Blocks Malicious Browser Notifications Used in Scareware Attacks 08:31Hackers Are Stealing ChatGPT and Claude Tokens That Changing Your Password May Not Stop 08:31DHS data leak, Northflank suffers breach, Russian…
Microsoft Edge Now Automatically Blocks Malicious Browser Notifications Used in Scareware Attacks
Microsoft Edge now automatically turns off website notifications linked to detected scams, cutting off a persistent delivery channel for fake antivirus…
Hackers Are Stealing ChatGPT and Claude Tokens That Changing Your Password May Not Stop
Infostealer malware is expanding into AI developer environments, harvesting authentication files that can preserve unauthorized access after a password…
DHS data leak, Northflank suffers breach, Russian Poryadok cyberattack
NetamLoader malware targets government Windows systems in Asia https://thehackernews.com/2026/11/netamloader-malware-targets-government.html Northflank…
Google Warns of LLMJacking Attacks That Generate Over $100,000 in Cloud AI Bills Per Day
Google’s Mandiant and Threat Intelligence Group (GTIG) say attackers are hijacking enterprise access to large language models and running up huge…
Hackers Use Fake Software Downloads to Secretly Hijack Windows PCs and Monetize Their Resources
Hackers are using fake software downloads to quietly turn Windows computers into revenue sources, installing programs that share internet bandwidth, run…
Open-source file sync tool rsync 3.5.2 fixes a CPU exhaustion flaw
The rsync project released version 3.5.2, and it closes a flaw that let a connecting client tie up a server’s CPU with checksum math that leads nowhere.…
Binance Hack Used Social Engineering, Malicious Code
Suspected North Korean theft of $6.34bn came after months-long campaign that made use of compromised software, fake job interviews
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model…
Hackers Use New Infostealer Malware to Steal ChatGPT, Claude, and Codex Tokens That Survive Password Resets
Hackers are expanding information theft beyond saved passwords, targeting authentication tokens and session data stored by ChatGPT, Claude, Codex, and…
IT Security News Hourly Summary 2026-11-04 09h : 6 posts
6 posts published in the last hour 07:32China’s AI guardrails, NCSC’s 2028 warning, more Binance hack details 07:31CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades 07:31What AI-generated malware looks like under the microscope 07:02Gorbag: Orcs at the border…
China’s AI guardrails, NCSC’s 2028 warning, more Binance hack details
China planning broad AI guardrails https://www.bloomberg.com/news/articles/2026-11-03/china-plans-broad-ai-guardrails-after-global-security-lapses UK…
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV)…
What AI-generated malware looks like under the microscope
In this Help Net Security interview, Lindsay Kaye, VP of Threat Intelligence at HUMAN Security, talks about what AI-generated malware looks like on the…
Gorbag: Orcs at the border harvesting intelligence from Ukraine
ESET researchers uncover Gorbag, a Russia-aligned group using simple infostealers to harvest data from Ukrainian organizations near the front line
Ghostunnel: Open-source TLS proxy with mutual authentication
Ghostunnel is an open-source proxy that handles TLS for programs that cannot handle it themselves. It works in two directions. In server mode it sits in…
IT Security News Hourly Summary 2026-11-04 08h : 14 posts
14 posts published in the last hour 06:32Secure your containers without breaking what works 06:32OpenAI Builds New Git Backend ‘Pando’ After Codex AI Agents Overwhelm Existing Infrastructure 06:32FBI confirms North Korea behind Binance hack 06:31Inside a successful AWS European Sovereign…