France Blood Service Cyber-Attack Sends Blood Storage Temperatures to 110°C
A supplier of the French National Blood Service was hit by a cyber-attack in which hackers turned cold rooms hosting blood samples up to 110°C (230°F)
Security Feed
Cybersecurity news & advisories
500 articles 45 of 45 sources updated RSS ↗
Trending
Cross-source coverage · last 72 h
Russian APT29 Hackers Turn Trusted Websites Into Traps to Compromise iPhone and Android Users
Ars Technica Security
Bleeping Computer
Cyber Security News
CyberScoop
Krebs On Security
Malwarebytes Labs
SecurityWeek
The Hacker News
The Record
The Register Security
+7
CVE-2026-58868 ↗
A Russian state-linked hacking group is using trusted websites to quietly break into phones. Researchers say APT29, also known as Midnight Blizzard or Cozy Bear, planted hidden code on real and cloned sites in the US, Ukraine, the Czech Republic and Bulgaria. Visitors with out-of-date iPhones or Android phones can lose cookies, Wi-Fi passwords and, in some cases, almost all of their phone data. They only need to open the page. The campaign was found in mid-October 2026. It uses three entry routes: code added directly to hacked sites, lookalike sites that copy real ones, and a one-week…
Cyber Security News
Russian APT29 Hackers Turn Trusted Websites Into Traps to Compromise iPhone and Android Users
1h ago
Cyber Security News
Google Patches Over 200 Android Vulnerabilities, Including Critical Zero-Click RCE Flaws
2h ago
Bleeping Computer
Hackers use n-day exploits in zero-click attacks on iOS, Android devices
3h ago
The Hacker News
Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
5h ago
The Record
Google dismantles massive botnet hidden in Android TV boxes
17h ago
Ars Technica Security
Google dismantles botnet secretly running on 1.3 million Android TV boxes
19h ago
SecurityWeek
Android’s November 2026 Updates Patch Over 200 Vulnerabilities
3 Nov
Krebs On Security
Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
3 Nov
CyberScoop
Google shuts down global botnet running on certified Android devices
2 Nov
The Register Security
Cops bust botnet of 1.3M infected Android TV boxes
2 Nov
Bleeping Computer
Google disrupts million-device XCPE Android malware botnet, bans TV box maker
2 Nov
The Hacker News
⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
2 Nov
The Hacker News
Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
2 Nov
Malwarebytes Labs
Applebee’s customer data exposed by password left in app
2 Nov
Microsoft Edge Now Automatically Blocks Malicious Websites Sending Fake Virus Alert Notifications
Ars Technica Security
Cyber Security News
Dark Reading
The Hacker News
Zero Day Initiative
+2
Microsoft Edge now automatically disables notifications from websites that send users to detected scam pages, cutting off a route used to deliver fake virus warnings. The protection connects Microsoft Defender SmartScreen and Scareware blocker detections with notification permissions, helping prevent malicious sites from repeatedly drawing people back into the same scam. The change arrived with Edge 156, according to Microsoft’s November 2 disclosure. Rather than simply warning about a dangerous destination, Edge can now stop further notifications from the website responsible for sending the…
Cyber Security News
Microsoft Edge Now Automatically Blocks Malicious Websites Sending Fake Virus Alert Notifications
1h ago
Ars Technica Security
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
20h ago
Zero Day Initiative
ZDI-26-868: Microsoft Windows Aero Theme Improper Handling Of Error Condition Denial-of-Service Vulnerability
3 Nov
Dark Reading
Microsoft's AI Risk Report Misses This Key Detail
2 Nov
The Hacker News
Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
2 Nov
Zero Day Initiative
ZDI-26-850: Microsoft Qlib MLflowRecorder Deserialization of Untrusted Data Remote Code Execution Vulnerability
2 Nov
Zero Day Initiative
ZDI-26-849: Microsoft Qlib RestrictedUnpickler Deserialization of Untrusted Data Remote Code Execution Vulnerability
2 Nov
CISA Warns of WordPress Core Vulnerability Exploited in Attacks to Execute Malicious Code
Bleeping Computer
CCCS Alerts & Advisories
CISA Alerts & Advisories
Cyber Security News
The Hacker News
+2
CVE-2026-119977 ↗
The U.S. Cybersecurity and Infrastructure Security Agency has warned that attackers are exploiting a WordPress Core vulnerability that can allow malicious code to run on website servers. CISA added the flaw to its Known Exploited Vulnerabilities catalog on November 3, 2026, confirming evidence of active exploitation and raising the need for prompt patching. Tracked as CVE-2026-119977, the vulnerability affects WordPress Core versions 4.7 through 7.1.3 and carries a high severity CVSS score of 8.1. Attackers do not need a valid account or user interaction. However, exploitation requires…
Bleeping Computer
CISA flags WordPress RCE flaw as actively exploited in attacks
45m ago
Cyber Security News
CISA Warns of WordPress Core Vulnerability Exploited in Attacks to Execute Malicious Code
3h ago
The Hacker News
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
7h ago
CCCS Alerts & Advisories
WordPress security advisory (AV26-1117)
15h ago
CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
3 Nov
The Hacker News
Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
3 Nov
Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
Bleeping Computer
Check Point Research
Kaspersky Securelist
The Hacker News
The Register Security
+2
Binance on Tuesday said the record-setting theft of $6.43 billion in assets from the world's largest cryptocurrency exchange was the culmination of a "sophisticated, multi-stage campaign" that involved the use of a tampered Homebrew installation and recruitment-themed social engineering attack targeting two of its engineers. "It was not a single isolated breach or a simple phishing incident,"
Bleeping Computer
Binance says fake job interview led to $6.3 billion crypto heist
16h ago
The Hacker News
Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
20h ago
Kaspersky Securelist
MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT devices
3 Nov
Check Point Research
2nd November – Threat Intelligence Report
2 Nov
The Register Security
FBI pins $6.3B Binance crypto heist on North Korean hackers
2 Nov
Google Releases Major Chrome Security Update Fixing 213 Bugs, Including 7 Critical Vulnerabilities
Cyber Security News
Malwarebytes Labs
SecurityWeek
Google has released Chrome 157 for Windows, macOS, and Linux, fixing 213 security bugs, including seven rated critical. Announced on November 3, 2026, the update addresses flaws across graphics, memory handling, browser features, and access controls. Google says the stable release will reach users over the coming days and weeks. The patched versions are 157.0.8103.38 for Linux and 157.0.8103.38/.39 for Windows and macOS. The release follows another large patch cycle covered in Cybersecuritynews.com’s report on Chrome 156 fixing 353 security flaws , showing the continued need to keep browser…
Malwarebytes Labs
Chrome 157 fixes 213 security issues, including 7 critical flaws
40m ago
Cyber Security News
Google Releases Major Chrome Security Update Fixing 213 Bugs, Including 7 Critical Vulnerabilities
1h ago
SecurityWeek
Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical
2h ago
Malwarebytes Labs
A week in security (October 26 – November 1)
2 Nov
Cloudflare Launches Zero Wire to Track Critical CVEs, Active Exploits, and Security Fixes
Cyber Security News
The Hacker News
Wiz Research
Cloudflare has launched Zero Wire, a public vulnerability intelligence feed designed to help security teams track critical CVEs, understand exploitation activity, and find security fixes. Announced on November 3, 2026, the service sits within Cloudflare Radar’s security section and brings technical evidence, vendor guidance, and recommended actions into readable briefings. The platform addresses a familiar problem: when a serious vulnerability emerges, defenders must piece together scattered advisories while checking their own systems. Cloudflare’s launch announcement describes a service…
Cyber Security News
Cloudflare Launches Zero Wire to Track Critical CVEs, Active Exploits, and Security Fixes
1h ago
Wiz Research
From Reactive to Proactive: Empowering SOC Teams with the Wiz Red and Blue Agents
2 Nov
The Hacker News
Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy
2 Nov
cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
CCCS Alerts & Advisories
The Hacker News
The Register Security
Trail of Bits
+1
An attacker broke into the update system of the cPGuard security tool on November 2 and used it to send a malicious script to customers' Linux servers. The script installed a backdoor and collected password hashes and other sensitive files from servers that ran it, cPGuard maker OPSSHIELD said in an advisory. The attacker has since taken some of that data. cPGuard 5.88.25 and later versions
The Hacker News
cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
21h ago
The Hacker News
Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
3 Nov
The Register Security
Max-severity bug in widely used OT programming tool exploited to deliver Linux malware
2 Nov
CCCS Alerts & Advisories
SUSE Linux security advisory (AV26-1113)
2 Nov
Trail of Bits
Backporting security fixes at scale with Codex
2 Nov
The Hacker News
Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
2 Nov
Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges
Bleeping Computer
CCCS Alerts & Advisories
Infosecurity Magazine
The Hacker News
+1
Google on Monday warned that threat actors are hijacking enterprise access to Large Language Models (LLMs) to fraudulently leverage expensive computing resources and AI services. The tactic is called LLMjacking, a form of resource hijacking adapted for the LLM era, where an attacker obtains an API key through phishing, source code leaks, misconfigured environments, or exposed client-side code
Bleeping Computer
Google: LLMjacking attacks rack up $1 million in cloud AI charges
18h ago
The Hacker News
Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges
21h ago
Bleeping Computer
Google adds new $250,000 Cloud VRP reward for Root-in-Cloud bugs
3 Nov
Infosecurity Magazine
LLMJacking is Costing Some Businesses Up to $1m, Warns Google
3 Nov
Infosecurity Magazine
Police and Tech Firms Team Up to Dismantle XCPE Botnet
3 Nov
CCCS Alerts & Advisories
Google security advisory (AV26-1109)
2 Nov
China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
Dark Reading
The Hacker News
A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method as part of a surveillance campaign designed to deploy an implant called DarkVigil (aka FDMTP). The campaign, observed starting July 1, 2026, is assessed to have targeted organizations and
The Hacker News
China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
1h ago
Dark Reading
PapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South Asia
2 Nov
The Hacker News
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
2 Nov
Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
CCCS Alerts & Advisories
The Hacker News
CVE-2026-58115 ↗
A maximum-severity security flaw impacting Siemens SIMATIC IoT2050 Advanced devices has come under active exploitation, VulnCheck has revealed. The vulnerability, tracked as CVE-2026-58115 (CVSS score: 10.0), is a case of missing authentication for a critical function that could be exploited by an unauthenticated remote attacker to run arbitrary code. "SIMATIC IoT2050 Advanced devices running
CrowdStrike moves to acquire Fiddler and Dreadnode, adding AI observability and testing to its security platform
CyberScoop
SecurityWeek
CrowdStrike announced Monday it has signed agreements to acquire two artificial intelligence security companies, Fiddler AI and Dreadnode, in deals announced at its Fal.Con Europe conference in Barcelona. CrowdStrike did not disclose what it paid for the companies. A report in the Wall Street Journal listed the price for Fiddler at $400 million, and Dreadnode at $95 million. Fiddler, which specializes in AI agent observability and explainability, will become Falcon Observe on the company’s Falcon platform. Dreadnode builds automated security testing for AI systems, checking models and agents…
Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets
Infosecurity Magazine
The Hacker News
BTCPay Server, a self-hosted, open-source cryptocurrency payment processor, has urged users to install the latest version of its software in response to reports of Bitcoin and Litecoin being stolen from hot wallets on instances running older versions. "Our investigation found that these attacks targeted servers running BTCPay Server 2.4.1 (released on 23 July 2026) or earlier," BTCPay Server
Mutipath TCP: Use and Detection, (Mon, Nov 2nd)
Fortinet PSIRT
SANS Internet Storm Center
CVE-2026-98432 ↗
Last week, an often-ignored TCP option, introduced in 2020, made the news due to a new vulnerability in Linux's implementation (RFC 8684, CVE-2026-98432)
Latest
AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks
Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks.
Canadian Extradited to US Over Cryptomining Hacks on University Supercomputers
A federal grand jury indicted two Canadian men for hijacking university supercomputers to secretly mine Electroneum cryptocurrency.
Chrome 157 fixes 213 security issues, including 7 critical flaws
On November 3, Google issued Chrome 157 to the stable channel for Windows, Mac and Linux. The update is rolling out over the coming days and weeks. Most users are on Chrome’s Stable channel. The desktop update brings…
‘There Is One Fight’: American Voters Reject Tech Oligarchy
Last month, OpenAI CEO Sam Altman told Politico that “we believe that the world should accept some bad things happening for the benefits of this technology,” referring to ChatGPT users dying, people losing their jobs to…
CISA flags WordPress RCE flaw as actively exploited in attacks
The US Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that attackers have started exploiting a recently patched high-severity WordPress vulnerability in the wild.
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app's server by uploading a crafted file if the app processes uploads using ImageMagick. The Rails project…
3AM Ransomware Used Human-AI Hybrid Tactics in UK School Estate Compromise
Bitdefender highlighted a unique human-AI approach during a September attack on a UK school estate, which resulted in financial data being exfiltrated
Hackers Exploit Zyxel GS1900 Zero-Day in the Wild to Hijack Network Switches
A flaw in Zyxel GS1900 switches was already being used by hackers, and the patch meant to fix it did not work. Researchers at Binarly found that a public exploit hit a different bug than the one Zyxel had patched. Zyxel…
Cyberattack on French plasma stores is enough to make your blood boil
Attackers tampered with cold-storage settings used by France's civilian blood service after compromising a refrigeration supplier, the organization said. The French Blood Establishment (EFS) confirmed the incident on…
Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory
Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including dom0. Dom0 is the VM that, by default, has full permissions and manages…
Microsoft Edge Now Automatically Blocks Malicious Websites Sending Fake Virus Alert Notifications
Microsoft Edge now automatically disables notifications from websites that send users to detected scam pages, cutting off a route used to deliver fake virus warnings. The protection connects Microsoft Defender…
Radio With No Radar: Why Agent Runtime Security Fails Without the Layers Beneath It
Nearly every agent security pitch now ends on the same promise: the product stops the bad action in real time. The promise holds for one kind of agent, the kind whose traffic passes through a gateway the enterprise…
Google Releases Major Chrome Security Update Fixing 213 Bugs, Including 7 Critical Vulnerabilities
Google has released Chrome 157 for Windows, macOS, and Linux, fixing 213 security bugs, including seven rated critical. Announced on November 3, 2026, the update addresses flaws across graphics, memory handling, browser…
China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method as part of a…
Russian APT29 Hackers Turn Trusted Websites Into Traps to Compromise iPhone and Android Users
A Russian state-linked hacking group is using trusted websites to quietly break into phones. Researchers say APT29, also known as Midnight Blizzard or Cozy Bear, planted hidden code on real and cloned sites in the US…
Cloudflare Launches Zero Wire to Track Critical CVEs, Active Exploits, and Security Fixes
Cloudflare has launched Zero Wire, a public vulnerability intelligence feed designed to help security teams track critical CVEs, understand exploitation activity, and find security fixes. Announced on November 3, 2026…
Police Seize 100+ Servers After Four-Year Investment Fraud Probe
A German-led coalition of law enforcers has intensified efforts to strike at a €4m investment fraud scheme
Malicious cPGuard Updates Served in OpsShield Supply Chain Attack
Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.
Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical
The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues.
Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist
Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.
Hackers Hide XLoader Malware in Fake Business Orders to Steal Passwords and Evade Detection
A new XLoader malware campaign is landing in inboxes as ordinary business orders and price quote requests. The emails look routine, but the attached archive holds a script that starts a chain of hidden steps. The chain…
Google Patches Over 200 Android Vulnerabilities, Including Critical Zero-Click RCE Flaws
Google has released its November 2026 Android security update, addressing more than 200 vulnerabilities across the operating system, kernel, and hardware components. Published on November 2, the bulletin includes…
Hackers use n-day exploits in zero-click attacks on iOS, Android devices
A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting compromised sites or fake ones impersonating legitimate portals.
Ransomware Gangs Claim 30% More Victims, but Researchers Warn Some Breaches May Be Fake
The number of organizations named on ransomware leak sites rose 30% in the third quarter of 2026. Researchers say that does not mean attacks rose by the same amount. Most of the growth came from new, unproven groups…
CISA Warns of WordPress Core Vulnerability Exploited in Attacks to Execute Malicious Code
The U.S. Cybersecurity and Infrastructure Security Agency has warned that attackers are exploiting a WordPress Core vulnerability that can allow malicious code to run on website servers. CISA added the flaw to its Known…
Fake Interview of Software Engineer Led to Binance Mega-Heist
Binance has revealed details of how North Korean hackers stole $6.4bn theft of crypto assets
North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack
In recent months, North Korea has accelerated its weapons tests in a likely bid to increase its leverage in potential diplomacy with the US.
Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million
A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.
Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure
Russian authorities have arrested three suspected members of a threat group known as VasyGrek and dismantled its criminal infrastructure. Also known as Fluffy Wolf, the threat actor has a history of targeting Russian…
Top 10 Best Breach & Attack Simulation (BAS) Tools in 2026 [Ranked & Scored]
Every SOC believes its controls work; BAS is the machine that checks. By safely running real attacker techniques against production defenses continuously, not annually these platforms convert “we should be covered” into…
Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin. The flaw, CVE-2026-58868, affects Android 14 through 17. Phones get…
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The…
Risky Business #858 -- The $6.3b laptop
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Ciaran Martin, former CEO of the UK’s National Cyber Security Centre (NCSC), to talk through the week’s cybersecurity news…
Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach
An unknown operator appears to have exfiltrated SQL Server backups from the Philippine Overseas Employment Administration in under a half hour.
Hackers hijack cPGuard autoupdate to deploy backdoor, steal data
Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script.
Fresh European Fridge Attacks Put Cold-Chain Security in Focus
Beyond food storage, the same combination of Internet connectivity, remote access, and inadequate security practices can put temperature-controlled infrastructure across other critical sectors at risk.
North Korean fake job interview led to $6.3B Binance heist
North Korean cryptocurrency thieves tricked a Binance software engineer into downloading malware onto their work-issued computer during a fake job interview process before last week's record-breaking $6.3 billion heist…
Germany Busts 'Crime-as-a-Service' Investment Fraud Outfit
German police led a multinational probe that exposed an alleged crime-as-a-service provider supplying fraudulent trading platforms to investment scammers.
Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements
A Delaware-based defense and aerospace company has settled a case with U.S. agencies over government allegations that the firm neglected its cybersecurity obligations in its contracts. ILC — the name the government uses…
WorkOS says attacker used ARTEX AI to breach internal sales app
Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications.
Binance says fake job interview led to $6.3 billion crypto heist
Cryptocurrency exchange Binance says North Korean hackers used a fake job interview to trick an employee into installing malware that ultimately let them compromise the company's wallet infrastructure and steal about…
Google dismantles massive botnet hidden in Android TV boxes
The overwhelming majority of the infected devices in the X.CPE botnet are Android TV set-top boxes, Google said, adding that they observed a number of other infected Android-based IoT devices, including telehealth…
AI policy wonks declare 'sovereign agents' a threat to civilization
The Center for a New American Security posits that the next big threat from our future AI overlords involves "sovereign agents" acting on their own and regularly improving themselves. These are AI agents that operate…
Binance Says Hackers Used Well-Known Tricks to Carry Out a $6.34 Billion Heist
Suspected North Korean attackers duped an engineer with a fake job interview and a malicious download to gain a foothold in the crypto firm’s system and steal billions, according to Binance.
Oklahoma man charged with mailing threats, substances to election officials nationwide
An Oklahoma man has been charged with mailing suspicious white substances to election officials across the country. Robin Patrick Martin faces charges of conveying false or misleading information and hoaxes, as well as…
Google: LLMjacking attacks rack up $1 million in cloud AI charges
Large language model hijacking attacks, also known as LLMjacking, are generating large fraudulent cloud charges, with some organizations losing more than $100,000 per day.
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity
Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords, resetting two-factor authentication (2FA), and removing…
Several German lawmakers and foreign policy staff received Apple warnings on spyware
Members of Germany's political elite were among the spyware targets in 99 countries that Apple personally warned recently.
Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes
Blockchain infrastructure provider Chainstack on Tuesday disclosed that it was targeted in a cyber attack that allowed an unauthorized party to gain access to some parts of its infrastructure. The incident is assessed…
British businesses caught in Europe-wide supermarket fridge attacks
Supermarket and grocery store refrigerator controls across Europe were hacked in the early hours of Monday in the second such wave of attacks in recent weeks — following a first wave in France — with unidentified…
Fake-download campaign uses trojanized installers to deliver monetization payloads
Microsoft Threat Intelligence has identified an evolving fake-download campaign targeting users searching for cracked commercial software, free games, activators, plugins, and unofficial utilities. The campaign uses…
Google dismantles botnet secretly running on 1.3 million Android TV boxes
Google's Threat Intelligence Group says it has shut down a massive botnet called x.cpe. At its height, x.cpe ran on more than 1.3 million Android TV devices, and unusually, these were Google-certified boxes. Google says…
Cisco Secure Email Gateway SQL Injection Vulnerability
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying…
Europol dismantles investment scheme that impacted potential victims in 50 countries
Authorities arrested seven people allegedly involved in an investment fraud scheme that claimed potential victims in more than 50 countries, Europol said Tuesday. Officials said the operation caused estimated losses of…
Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms
Microsoft has been named a Leader in the inaugural 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms . We believe this recognition reflects Microsoft’s approach to helping organizations manage, secure, and…
Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
Binance on Tuesday said the record-setting theft of $6.43 billion in assets from the world's largest cryptocurrency exchange was the culmination of a "sophisticated, multi-stage campaign" that involved the use of a…
Binance CEO says ‘months-long campaign’ led to $6.3 billion theft as N. Korea denies responsibility
North Korean attackers "combined a range of techniques, including social engineering by fake recruitment interviews," Binance said about the multibillion-dollar crypto heist it discovered in October.
Ballot scanner malfunctions, flurry of federal legal actions test election officials on final day of voting
Early reports of ballot scanner malfunctions in Westchester County, New York are a sign of the challenges election officials will face in the current online information environment as voters head to the polls Tuesday on…
No articles found
Try adjusting your search, category, tags, source selection, or date range.