Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations
The startup maps how identities, assets and vulnerabilities connect, and uses AI agents to find and fix risky combinations of issues.
Security Feed
Cybersecurity news & advisories
500 articles 44 of 44 sources updated RSS ↗
Trending
Cross-source coverage · last 72 h
Google Launches Gemini 4 Carbon With State-Of-The-Art Cybersecurity Capabilities
CrowdStrike Blog
Cyber Security News
Microsoft Security
The Hacker News
+1
CVE-2026-111497 ↗
Google has announced Gemini 4 Carbon, its latest AI model built to find software flaws , test whether attackers could exploit them, and produce fixes. Unveiled on October 28, 2026, Carbon builds on Gemini 4 Argon and targets complex security and coding work that can take days. Access will begin with selected cyber defenders, not a public launch. According to Google’s announcement , Carbon combines stronger cybersecurity skills with improved handling of long tasks. Google says internal teams have seen it work through dead ends while tracing subtle bugs across large codebases and low-level…
Microsoft Security
CVE-2026-111497 Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder
31 Oct
Cyber Security News
Google Launches Gemini 4 Carbon With State-Of-The-Art Cybersecurity Capabilities
31 Oct
CrowdStrike Blog
CrowdStrike Expands Falcon Adversary OverWatch Threat Hunting Across AI and Google Cloud
30 Oct
The Hacker News
Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities
29 Oct
Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
Bleeping Computer
CCCS Alerts & Advisories
The Hacker News
The Register Security
+1
CVE-2026-98432 ↗
Suspected Chinese attackers chained PHP2Shell with a Linux kernel privilege-escalation exploit to root 25 servers, including Palo Alto Networks firewalls linked to US government-affiliated organizations, according to Dream researchers. The snoops began exploiting these servers on October 23, targeting organizations across the US, Japan, Taiwan, and South Korea. The attackers also honed in on US government-affiliated firewalls. “Within hours of compromising a US government-affiliated firewall, they had tunneled into the internal network, compromised a third server using the same PHP2Shell…
CCCS Alerts & Advisories
Linux security advisory (AV26-1108)
30 Oct
Bleeping Computer
Critical Linux kernel flaw allows remote root attacks on MPTCP servers
30 Oct
The Register Security
Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
29 Oct
The Hacker News
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
29 Oct
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
CCCS Alerts & Advisories
CISA Alerts & Advisories
The Hacker News
CVE-2026-111357 ↗
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild. The vulnerabilities are listed below - CVE-2026-111357 (CVSS score: 8.8) - A missing authentication for a critical function vulnerability that could allow a
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
Bleeping Computer
CCCS Alerts & Advisories
SecurityWeek
The Hacker News
+1
CVE-2026-118539 ↗
Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13. "This module enables you to sell goods and services to customers through an included shopping cart
CCCS Alerts & Advisories
Drupal security advisory (AV26-1105)
30 Oct
SecurityWeek
Drupal Commerce Core Vulnerability Exploited Against Online Stores
30 Oct
Bleeping Computer
Drupal warns of critical Commerce Core flaw exploited in attacks
30 Oct
The Hacker News
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
30 Oct
NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
Cyber Security News
The Hacker News
Cybersecurity researchers have disclosed details of what has been described as a "highly sophisticated infection chain" targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a custom Windows 10 build used exclusively by government entities in Asia and involves the deployment of a previously undocumented .NET assembly-loading framework codenamed
Hackers steal $6.3 billion from Binance in record crypto heist
Ars Technica Security
Bleeping Computer
The Hacker News
The Register Security
+1
Binance has suspended all withdrawals after the world’s largest cryptocurrency exchange fell victim to what appears to be the biggest heist in history. The exchange put the “estimated total impact” of the hack at about $6.3 billion and said around $3 billion of affected assets, mainly stablecoins that act as cash for the crypto market, had been frozen. But analysts at Elliptic said the attacker had changed about $3.3 billion into digital assets that could not be frozen and was working to cash those out as traditional currency. Read full article Comments
Ars Technica Security
Hackers steal $6.3 billion from Binance in record crypto heist
30 Oct
Bleeping Computer
Binance links $6.3 billion crypto theft to compromised DevOps laptop
30 Oct
The Register Security
In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security
30 Oct
The Hacker News
Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
30 Oct
Bleeping Computer
Binance probes potential $5.8 billion crypto-theft hack
29 Oct
Over 60,000 Attacks Target WordPress RCE Vulnerability Within 24 Hours
Cyber Security News
SecurityWeek
The Hacker News
Hackers are targeting a WordPress Core remote code execution vulnerability that can expose websites during software updates. The supplied Wordfence threat intelligence snapshot lists 60,471 blocked attempts over 24 hours. These are attack attempts, not confirmed website compromises, and the figure does not establish how many individual sites were targeted. WordPress released version 7.1.4 on October 28, 2026, addressing 22 security vulnerabilities. The update closes the code execution weakness alongside stored cross-site scripting, information disclosure, and permission issues. The official…
Cyber Security News
Over 60,000 Attacks Target WordPress RCE Vulnerability Within 24 Hours
31 Oct
SecurityWeek
PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
30 Oct
The Hacker News
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
30 Oct
SecurityWeek
Fresh WordPress Vulnerability in Attackers’ Crosshairs
30 Oct
Apple Warns iPhone Users in 99 Countries of Sophisticated Mercenary Spyware Attacks
404 Media
Cyber Security News
CyberScoop
Apple has issued a fresh round of threat notifications to selected iPhone users in 99 countries, warning that they have been targeted by sophisticated mercenary spyware attacks. Security researcher Costin Raiu reported the new wave on October 30, 2026, saying it was separate from August’s alerts and linked to new attacks. “Today’s notification is being sent to targeted users in 99 countries, and to date we have notified users in over 150 countries in total,” Apple said in the notice shared by Raiu. The company did not name the attackers or connect the warnings to any specific region…
Claude Model Builds Exploits Across Major Browsers & OSes
Bleeping Computer
Dark Reading
CVE-2026-58882 ↗
An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says.
CISA says max severity GitLab flaw now exploited in the wild
Bleeping Computer
CCCS Alerts & Advisories
SecurityWeek
CVE-2026-97229 ↗
Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA).
Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
SecurityWeek
The Hacker News
Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million network-layer (L3) DDoS attacks and 14.4 trillion HTTP DDoS requests in the third quarter of 2026. That amounts to 197,400 attacks per day, or one attack every 0.44
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
Cisco Security Advisories
Palo Alto Unit 42
CVE-2026-109618 ↗
CVE-2026-109619 ↗
CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems.
Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving
Microsoft Security Blog
The Hacker News
The alert is critical. The fix is known. And the ticket sits in a queue for days. Security teams understand the risk, but the people who keep applications available need proof that the change won’t break anything. Their concerns are practical. An IPS protection could block legitimate traffic. A configuration change could interrupt a service. An endpoint policy could affect an application
Malicious Claude Code extension on Cursor planted SSH backdoors
Bleeping Computer
Sophos Threat Research
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors.
Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis
Bleeping Computer
The Hacker News
A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported. Trezor has not yet examined the device. It is telling everyone who bought a Trezor from CryptoBilis since March 2026 to move their funds to a new wallet with a new recovery phrase. Trezor said in a blog post 
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
CCCS Alerts & Advisories
The Hacker News
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-97229 (CVSS score: 10.0) - An integer overflow or wraparound vulnerability in GitLab Community Edition and Enterprise
Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched
Bleeping Computer
The Register Security
Multiple vulnerabilities in five popular AI developer tools could allow attackers to execute code on a host machine, read and steal files, or spoof browser address bars. Researchers say flaws in OpenAI's Codex and Microsoft's VS Code remain unpatched, potentially putting developers who use affected configurations at risk. AI security startup Forever Security discovered vulnerabilities in Cursor, GitHub Copilot, Anthropic's Claude Desktop, VS Code, and Codex, and disclosed four of the flaws to the affected vendors. GitHub independently fixed the Copilot vulnerability without receiving a report…
Manifestos, Fear, and ‘Loser Thinking’: Inside Proton’s AI Reckoning
404 Media
Dark Reading
Andy Yen, the CEO of Proton, had a message for an employee in the company’s security Slack channel who urged the company to at least take a few days to pentest newly written code before pushing it live. “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,” Yen wrote in the channel at the end of August. “Stop thinking always of how to be slower, and focus more on how to be faster.” In a follow-up message, Yen reiterated his point: “only losers think like that.” His ultimate message for the team was to “stop lovingly handcrafting all our code and use AI more.”…
Latest
OneNote File Extraction, (Sun, Nov 1st)
Recently, I had to extract embedded files from a set of OneNote files (extension .one).
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker had to reach their HTTPS API over the network and have the…
Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
Malicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded…
FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist
The U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets to TraderTraitor, a North Korea-aligned elite hacking group also tracked as Jade Sleet…
NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
Cybersecurity researchers have disclosed details of what has been described as a "highly sophisticated infection chain" targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted…
FBI Confirms North Korean Hackers Responsible for $6 Billion+ Binance Attack
The Federal Bureau of Investigation has confirmed that North Korean hackers stole more than $6 billion in virtual assets from Binance on or about October 29, 2026. The agency tracks the activity as TraderTraitor…
Hacktober – Cyberattack Wave Hits PHP, Node.js, Binance, LiteLLM, Pentagon, and a Few More
October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software packages, government records, and grocery chains. Binance investigated billions of dollars in…
Northflank security breach leads to abuse of customers' AI API keys
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers' AI API keys.
New Android SMS of Death exploit can remotely crash unpatched phones
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or…
Reddit to lock content behind logins to fight scrapers
Reddit announced in a post by co-founder Steve Huffman that the site will gradually become a "logged-in service," offering limited access to visitors without accounts.
From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era
AI-generated vulnerability reports are overwhelming some bug bounty programs, making it harder for aspiring security researchers to know where to start. TryHackMe explains how beginners can build practical cybersecurity…
Chainalysis discloses data breach from "offensive agentic techniques"
Blockchain analytics firm Chainalysis disclosed a data breach after attackers used "offensive agentic techniques" to access internal systems and tools, exposing customer names, email addresses, user IDs, and…
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that the breach did not result…
Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
VOLTA is a mature stealer implant with an optional AI-integration layer. After stealing credentials, sessions, and cryptocurrency wallets, VOLTA sends a structured evidence bundle to an LLM to rank the victim’s assets…
No articles found
Try adjusting your search, category, tags, source selection, or date range.