A single operator in Taiwan built a team of 12 AI agents and used it to attack hundreds of organizations in 11 countries. The campaign hit emergency…
Tag: EN
Binance Hack Used Social Engineering, Malicious Code
Suspected North Korean theft of $6.34bn came after months-long campaign that made use of compromised software, fake job interviews
Ukraine fires two senior security officials amid corruption probe into scam call centers
Ukraine’s security service has fired two senior officials amid a corruption investigation into an alleged criminal network that bribed law enforcement…
Fake ChatGPT and Claude Apps Use Signed Executables to Install Yoba Malware
Fake ChatGPT and Claude apps spread Yoba malware through GitHub, using signed executables to load a cryptominer on…
ARTEX Hackers Used Claude Code, DeepSeek, and Grok in Attacks Targeting South Korean Banks
A financially motivated threat actor used ARTEX, Claude Code, and multiple large language models in a campaign targeting South Korean financial…
ISC Stormcast For Thursday, November 5th, 2026 https://isc.sans.edu/podcastdetail/10166, (Thu, Nov 5th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Thursday, November 5th, 2026 https://isc.sans.edu/podcastdetail/10166,…
Google puts new limits on AI agents that hunt threats and fix vulnerabilities
Google Cloud is adding new controls to CodeMender, its AI tool for finding and fixing software vulnerabilities, allowing businesses to isolate attack…
CISO Conversations: Ryan Davis – The Unknown Is Where Security Meets Reality
Ryan Davis went from hacking his school’s network to running security at New Charter Technologies. What worries him now is shadow AI.
Norway’s aid agency pwned and all users’ data is stolen
Norad said it cannot be sure that the details of those in ‘conflict areas and authoritarian states’ are safe or not
Tata Motors iRA App Flaws Could Let Hackers Impersonate Car Owners and Access Vehicle Services
Tata Motors’ iRA 2.0 and iRA.ev mobile apps contain four security flaws that could let attackers steal credentials, impersonate car owners, and access…
Meta acquires Conductor as AI coding shifts toward multi-agent development
Meta has acquired AI coding startup Conductor, gaining technology that coordinates work across competing AI coding agents as it seeks a bigger role in…
Hackers Hide Marsalek Malware in Fake Roblox and Fortnite Cheats to Steal Passwords and Crypto Wallet Data
Hackers are hiding a free information stealer called Marsalek inside fake cheats and tools for games such as Roblox, Fortnite, and Counter-Strike 2. The…
Russian APT29 Targets Mobile Users with Watering Hole Attacks
Russia-linked group APT29 targeted iOS and Android users through hijacked websites and a compromised analytics service. Sekoia says a large-scale watering…
Gorbag: Orcs at the border harvesting intelligence from Ukraine
ESET researchers uncover Gorbag, a Russia-aligned group using simple infostealers to harvest data from Ukrainian organizations near the front line
Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes
The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine.
China’s AI guardrails, NCSC’s 2028 warning, more Binance hack details
China planning broad AI guardrails https://www.bloomberg.com/news/articles/2026-11-03/china-plans-broad-ai-guardrails-after-global-security-lapses UK…
5 Active Cyber Threats That Put US Enterprises at Risk in October 2026
October 2026 brought another wave of cyber threats targeting US businesses, with attackers exploiting trusted platforms, legitimate authentication…
Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day
Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests.
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV)…
The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603
Kaspersky researchers analyze a complex fileless cyberattack by Storm-2603 involving ToolShell exploitation and subsequent runtime subversion, and discuss…