VOLTA is an AI-powered infostealer that steals personal data, then uses LLMs to assess victims’ value and rank targets for attackers. Cisco Talos has…
CVE-2026-120497 – Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows
Bulletin ID: 2026-163-AWS Publication Date: 11/02/2026 11:00 AM PST Description: aidlc-traceability is an open source command-line tool, formerly…
Between Two Nerds: Finding bugs does not mean security
In this edition of Between Two Nerds Tom Uren and The Grugq discuss CISO’s expectations and priorities regarding budgets and what they will spend their…
Google disrupts million-device XCPE Android malware botnet, bans TV box maker
Google and industry partners have dismantled the XCPE malware botnet consisting of more than 1.3 million Android TV streaming TV boxes that Google says…
Mercado Bitcoin Suffers Cyberattack as Researchers Flag $40 Million in Suspicious Crypto Transfers
Brazilian cryptocurrency exchange Mercado Bitcoin suspended deposits and withdrawals on November 2, 2026, after detecting a security incident in one of…
⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
Some attacks this week didn’t need much of a trick. A fake support call, a trusted extension, a shared link, or a device with no password. Small things…
IT Security News Hourly Summary 2026-11-02 20h : 5 posts
5 posts published in the last hour 18:31PapRAT Cyber-Espionage Campaign Leaves a ‘Bitter’ Taste in South Asia 18:31Beyond DKIM key rotation: understanding email replay attacks 18:02Keeping pace with e-evidence: New report examines Europe’s digital forensic capabilities 18:02CVE-2026-119085 – Template injection…
PapRAT Cyber-Espionage Campaign Leaves a ‘Bitter’ Taste in South Asia
Organizations in the region face growing cyberattacks from the known India-linked threat group, which leverages legitimate Windows functionality in three…
Beyond DKIM key rotation: understanding email replay attacks
As the email administrator for your organization’s domain, you receive a Domain-based Message Authentication, Reporting, and Conformance (DMARC) aggregate…
Keeping pace with e-evidence: New report examines Europe’s digital forensic capabilities
Coordinated by the European Commission in cooperation with Europol, the analysis draws on stakeholder consultations, dedicated meetings, surveys and…
CVE-2026-119085 – Template injection in the publishing component of Virtual Engineering Workbench
Bulletin ID: 2026-162-AWS Publication Date: 11/02/2026 09:30 AM PST Description: Virtual Engineering Workbench (VEW) is an open-source platform where…
IT Security News Hourly Summary 2026-11-02 19h : 12 posts
12 posts published in the last hour 17:32Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes 17:31Polymarket pledges to give $3.9 million back to victims after site compromise 17:31CISA Kicks Off Critical Infrastructure Security and Resilience Month…
Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes
The Capytistas, a secretive group claiming more than $1.2 million in backing, started with Elon Musk and Tesla’s board. Members argue that those who buy…
Polymarket pledges to give $3.9 million back to victims after site compromise
In a post-mortem on an October 29 incident, prediction market Polymarket said it will pay people back what they lost, as well as compensate them for the…
CISA Kicks Off Critical Infrastructure Security and Resilience Month 2026
This post has no text preview — click the link below to read the original article. This article has been indexed from CISA News Read the original article: CISA Kicks Off Critical Infrastructure Security and Resilience Month 2026
Storm Ransomware Is Scaling Fast and Selling an AI Powered Image
A new ransomware operation appeared in August 2026 with an ambitious pitch: sophisticated infrastructure, aggressive affiliate payouts, global ambitions,…
IT Security News Roundup: 2026-11-02 Afternoon
IT Security News: Afternoon roundup, 2026-11-02 Summary This period is characterized by the escalating intersection of artificial intelligence and cybercrime, ranging from automated espionage tools to AI-driven data valuation. State-sponsored tensions are prominently reflected in tit-for-tat attacks on critical emergency…
CVE-2026-119301 – Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
Bulletin ID: 2026-161-AWS Publication Date: 11/02/2026 08:30 AM PST Description: We are aware of CVE-2026-119301 in the Apache Iceberg write component,…
BTCPay Server warns of hot wallet crypto thefts on outdated instances
The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been…
Russia’s statistics agency confirms cyberattack claimed by Belarusian and Ukrainian hackers
An alliance of Belarusian and pro-Ukrainian hackers claimed to have taken out Russia’s federal statistics agency, Rosstat, and stolen vast amounts of…
PapRAT Cyber Espionage Campaign Leaves a ‘Bitter’ Taste in South Asia
Organizations in the region face growing cyberattacks from the known India-linked threat group, which leverages legitimate Windows functionality in three…
Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
A botnet of more than 1.3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led by Google.…
Thieves pilfer environment variables from Trigger AI workflow tool
So, who’s ready to clear the dust out of that server closet and move things back on-prem?
IT Security News Hourly Summary 2026-11-02 18h : 11 posts
11 posts published in the last hour 16:32Could Nick Andersen’s leadership outlast the clock on his acting role? 16:32Agentic pen-testing tool employed in multiple espionage campaigns around the globe 16:31Token thieves costing companies $100K+ per day in illicit LLM charges…