A malicious version of Anthropic’s Claude Code extension distributed through the Cursor marketplace attempted to install a persistent Secure Shell (SSH)…
Top 10 Best Identity Governance & Administration (IGA) Tools in 2026
Quick Answer: Linx is the AI-native solution for modern IGA across all identity types; SailPoint remains the IGA benchmark with AI-driven certifications;…
FBI pins $6.3B Binance crypto heist on North Korean hackers
Exchange scrambles to replace stolen funds as customers withdraw billions and hackers get busy laundering their haul
PentestPad: How Pentest Companies Adapt In The Era of AI
Every penetration testing firm is facing the same pressure right now. AI tools are faster, cheaper, andincreasingly capable, and testers are using them…
Chainalysis breached using “offensive agentic techniques”
Blockchain analytics firm Chainalysis has suffered a cybersecurity incident that led to a data breach. According to the company’s Friday announcement, the…
Hackers Exploit ChatGPT’s Popularity With Fake Billing Notices That Target Credit Cards and OTPs
Hackers are impersonating OpenAI in fake ChatGPT Plus billing emails that lead users to payment pages designed to steal credit card details and one-time…
IT Security News Hourly Summary 2026-11-02 13h : 14 posts
14 posts published in the last hour 11:33Malicious Claude Code Extension Served in Cursor Supply Chain Attack 11:33Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data 11:32My Journey to the Center of America’s Political…
Malicious Claude Code Extension Served in Cursor Supply Chain Attack
The extension performed host reconnaissance and attempted to create a reverse SSH tunnel.
Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory…
My Journey to the Center of America’s Political Spam Text Hell
I’ve gotten nearly 2,000 campaign fundraising texts that were meant for someone else. I tried to find out why—and uncovered a labyrinth of politicians,…
Hackers Target Supermarket Refrigeration Systems Across Sweden, Raising Freezer Temperatures to 55°C
Hackers have disrupted refrigeration systems at several ICA and Coop supermarkets across Sweden, destroying food and prompting temporary closures. One…
Hackers Pushing Remote Access Tool Through Fake Adobe Acrobat Pages
Fake Adobe Acrobat pages distribute signed ScreenConnect installers configured for attacker-controlled remote access to Windows PCs, CloudSEK’s…
Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
Overview On October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released…
Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
Cybersecurity researchers have disclosed details of a cyber espionage campaign specifically targeting Linux infrastructure associated with government…
Hackers Target Emergency Alert Apps in Ukraine and Russia, Sending Fake Nuclear Attack Warnings
Hackers compromised emergency alert applications in Ukraine and Russia, distributing fabricated nuclear and radiation warnings as officials sought to…
IT Security News Roundup: 2026-11-02 Morning
IT Security News: Morning roundup, 2026-11-02 Summary This morning's news is dominated by a massive $6.3 billion cryptocurrency heist attributed to North Korean state-sponsored actors. A recurring theme is the dual-edged nature of artificial intelligence, appearing both as a tool…
US Military Probes Freezer Failures, After French Hack
Pentagon investigators look into at least six simultaneous freezer failures at US military bases, after French supermarket fridges hacked
Hackers Weaponize Open-Source CyberStrikeAI Framework to Launch AI-Powered Network Intrusions
Hackers are abusing CyberStrikeAI, an open-source penetration-testing framework, to orchestrate network intrusions against educational organizations…
Chainalysis Discloses Data Breach Following AI-Driven Cyberattack
The attackers used offensive agentic techniques to access the company’s systems and internal tools.
Researchers Discover High-Severity ChatGPT Flaw That Exposed Private Conversations to Attackers
Researchers found a chain of flaws that turned an ordinary public ChatGPT share link into attacker-controlled JavaScript running inside the victim’s…
IT Security News Hourly Summary 2026-11-02 12h : 19 posts
19 posts published in the last hour 10:33FBI pins $6.3 billion Binance crypto heist on North Korea while scammers circle anxious users 10:33Seven egregious failures of modern web tech 10:33Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens…
FBI pins $6.3 billion Binance crypto heist on North Korea while scammers circle anxious users
North Korea was behind the theft of more than $6 billion in cryptocurrency from Binance, the FBI has confirmed. “The Federal Bureau of Investigation (FBI)…
Seven egregious failures of modern web tech
The modern web is a miracle of engineering, but its history is littered with brilliant concepts that flamed out in execution. For every innovation that…
Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens
Hackers reportedly hit Ukraine ‘s and Russia ‘s emergency alert apps, sending fake nuclear and attack warnings and raising concerns over public safety.…