Organizations may not be ready for completely autonomous communication processes, but there are places where automating information updates would…
Google shuts down global botnet running on certified Android devices
Videostrong sold TV set-top boxes and other devices with pre-installed malware. The yearslong operation evaded Google’s security tests and established a…
How Microsoft Edge Scareware Blocker Stops Malicious Notification Scams
HOC Shorts | Cybercriminals have weaponized native browser push notifications, tricking users into clicking “Allow” under fake “prove…
CVE-2026-98432: A Remote Use-After-Free in the Linux Kernel’s TCP Stack
Learn about CVE-2026-98432, a critical remote use-after-free flaw in the Linux kernel TCP stack, its root exploit risks, affected versions, and mitigation…
Artificial intelligence and cyber intrusion
An NCSC assessment that examines current AI-enabled threat trends and projections of the threat landscape to 2028.
Max-severity bug in widely used OT programming tool exploited to deliver Linux malware
Your industrial IoT gateway isn’t exposed to the internet, right? RIGHT?!
HHS’ Office for Civil Rights Settles Ransomware Investigation of Lehigh Valley Health Network
DataBreaches.net previously covered the 2023 Lehigh Valley Health Network breach by AlphV (aka “BlackCat”). The breach garnered a lot of public attention…
Google Calendar phishing campaign hijacks sessions, bypasses MFA
A phishing campaign used Google Calendar invites, trusted redirects, and fake login pages to hijack corporate Google sessions and bypass MFA protections.…
One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning
The record theft shows how weak system separation, inadequate controls, and untested attack possibilities can turn one breach into systemic loss.
How Skyfire and Akamai Enabled 2.5 Million Agentic Transactions
Discover how Akamai and Skyfire verify AI shopping agents with Know Your Agent (KYA) to securely enable agentic commerce and prevent checkout friction.
Hackers hit UNM hospital, then apologize and offer patients $2,500. In a new statement, they reveal more about the incident.
In more than 20 years of blogging about breaches, DataBreaches has never seen ransomware threat actors offer monetary compensation to patients affected by…
SonicWall warns of unpatched flaws in end-of-life GMS software
SonicWall warned customers of two security flaws affecting end-of-life Global Management System (GMS) systems that will not be patched. […]
A Defense Contractor Gave Their Personal AI Agent Access to a Secure Pentagon System
Vittoria Elliott reports: Earlier this year, sources tell WIRED, a contractor caused a security incident at the Department of Defense by connecting a…
IT Security News Hourly Summary 2026-11-04 17h : 50 posts
50 posts published in the last hour 15:39What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks 15:39Russian hackers target iOS and Android users with n-day exploits 15:39StyleSmuggler Exploitation Deploys PSK Agent RAT Against Magento Stores 15:38UK School…
What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks
Real-world exploitation concentrates in a small, high-impact subset of CVEs. Learn how defenders can prioritize vulnerabilities based on exploitation…
Russian hackers target iOS and Android users with n-day exploits
Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits…
StyleSmuggler Exploitation Deploys PSK Agent RAT Against Magento Stores
TL;DR: Between September 9 and September 13, 2026, we detected a coordinated campaign exploiting Magento and Adobe Commerce stores across Western Europe,…
UK School Network Hit by 3AM Ransomware as Researchers Suspect AI-Assisted Intrusion
An incident involving ransomware against a UK school network has brought attention to how much of a factor AI is becoming in cybercrime. During the…
⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
Some attacks this week didn’t need much of a trick. A fake support call, a trusted extension, a shared link, or a device with no password. Small things…
Between Two Nerds: Finding bugs does not mean security
In this edition of Between Two Nerds Tom Uren and The Grugq discuss CISO’s expectations and priorities regarding budgets and what they will spend their…
Hackers Exploit Node-RED Flaw to Deploy Malicious Flows
Hackers are exploiting a Node-RED flaw to deploy malicious flows and persistent backdoors. Learn which Siemens devices are affected and what to check.
French Bank Crédit Mutuel Arkéa Confirms Cyberattack Amid Reports of $133 Million Theft
French banking group Crédit Mutuel Arkéa has confirmed a cyberattack that enabled fraudulent transactions, following reports linking the institution to…
Germany says lawmakers’ iPhones may have been hacked with spyware
German lawmakers and a filmmaker are among the people who received notifications from Apple warning that their phones may have been hacked.
CYBER BRIEFING | NOVEMBER 04, 2026
WordPress RCE exploited in the wild; Chrome 157 fixes 213 flaws