{ "month": "2026-11", "item_count": 145, "items": [ { "title": "Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD", "link": "https://securityweek.com/chipmaker-patch-tuesday-over-200-vulnerabilities-addressed-by-intel-amd", "canonical_url": "https://securityweek.com/chipmaker-patch-tuesday-over-200-vulnerabilities-addressed-by-intel-amd", "date": "2026-11-11T08:42:44Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Recently Patched Barracuda Vulnerabilities Exploited in Attacks", "link": "https://securityweek.com/recently-patched-barracuda-vulnerabilities-exploited-in-attacks", "canonical_url": "https://securityweek.com/recently-patched-barracuda-vulnerabilities-exploited-in-attacks", "date": "2026-11-11T07:53:51Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ { "name": "Barracuda", "url": "/barracuda", "matched_alias": "barracuda" } ] }, { "title": "Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms", "link": "https://securityweek.com/bluetooth-airplay-pairing-vulnerabilities-patched-across-apple-platforms", "canonical_url": "https://securityweek.com/bluetooth-airplay-pairing-vulnerabilities-patched-across-apple-platforms", "date": "2026-11-11T07:00:17Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities", "link": "https://blog.talosintelligence.com/microsoft-patch-tuesday-for-november-2026", "canonical_url": "https://blog.talosintelligence.com/microsoft-patch-tuesday-for-november-2026", "date": "2026-11-11T01:41:17Z", "source": "Cisco Talos", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "November Patch Tuesday: An Overflowing Cornucopia of CVEs", "link": "https://darkreading.com/vulnerabilities-threats/november-patch-tuesday-cornucopia-cves", "canonical_url": "https://darkreading.com/vulnerabilities-threats/november-patch-tuesday-cornucopia-cves", "date": "2026-11-10T22:26:51Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Patch Tuesday - November 2026", "link": "https://rapid7.com/blog/post/em-patch-tuesday-november-2026", "canonical_url": "https://rapid7.com/blog/post/em-patch-tuesday-november-2026", "date": "2026-11-10T21:55:37Z", "source": "Rapid7", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Microsoft Fixes Nearly 1,100 Security Vulnerabilities", "link": "https://krebsonsecurity.com/2026/11/microsoft-fixes-nearly-1100-security-vulnerabilities", "canonical_url": "https://krebsonsecurity.com/2026/11/microsoft-fixes-nearly-1100-security-vulnerabilities", "date": "2026-11-10T21:55:03Z", "source": "KrebsOnSecurity", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon", "link": "https://darkreading.com/cyberattacks-data-breaches/artex-ai-pen-test-tool-hackers-weapon", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/artex-ai-pen-test-tool-hackers-weapon", "date": "2026-11-10T21:01:14Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row", "link": "https://therecord.media/patch-tuesday-microsoft-1000-bugs-again", "canonical_url": "https://therecord.media/patch-tuesday-microsoft-1000-bugs-again", "date": "2026-11-10T20:55:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft", "link": "https://securityweek.com/exploited-outlook-zero-day-among-1094-flaws-patched-by-microsoft", "canonical_url": "https://securityweek.com/exploited-outlook-zero-day-among-1094-flaws-patched-by-microsoft", "date": "2026-11-10T19:19:46Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users", "link": "https://thehackernews.com/2026/11/sglang-rce-exploit-breaches-near-ai.html", "canonical_url": "https://thehackernews.com/2026/11/sglang-rce-exploit-breaches-near-ai.html", "date": "2026-11-10T19:19:39Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access", "link": "https://thehackernews.com/2026/11/hackers-exploit-critical-xen-orchestra.html", "canonical_url": "https://thehackernews.com/2026/11/hackers-exploit-critical-xen-orchestra.html", "date": "2026-11-10T18:12:21Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Adobe Patches 110 Vulnerabilities Across 9 Products", "link": "https://securityweek.com/adobe-patches-110-vulnerabilities-across-9-products", "canonical_url": "https://securityweek.com/adobe-patches-110-vulnerabilities-across-9-products", "date": "2026-11-10T18:11:54Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem", "link": "https://thehackernews.com/2026/11/three-china-nexus-espionage-campaigns.html", "canonical_url": "https://thehackernews.com/2026/11/three-china-nexus-espionage-campaigns.html", "date": "2026-11-10T17:43:23Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "AI company Fireworks says hackers stole data, billing info during October breaches", "link": "https://therecord.media/ai-company-fireworks-says-hackers-stole-data-in-oct-attacks", "canonical_url": "https://therecord.media/ai-company-fireworks-says-hackers-stole-data-in-oct-attacks", "date": "2026-11-10T16:08:00Z", "source": "The Record", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor", "link": "https://thehackernews.com/2026/11/attackers-exploit-ahsaycbs-flaws-to.html", "canonical_url": "https://thehackernews.com/2026/11/attackers-exploit-ahsaycbs-flaws-to.html", "date": "2026-11-10T16:00:55Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America", "link": "https://thehackernews.com/2026/11/blind-eagle-uses-fake-court-notices-to.html", "canonical_url": "https://thehackernews.com/2026/11/blind-eagle-uses-fake-court-notices-to.html", "date": "2026-11-10T15:58:44Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Cybercriminals are increasingly infecting regular people with spyware", "link": "https://therecord.media/spyware-cyber-crime-iverify", "canonical_url": "https://therecord.media/spyware-cyber-crime-iverify", "date": "2026-11-10T15:45:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Fireworks AI Confirms Wider Breach Affecting Customer Datasets, Model Weights and Notion AI Chats", "link": "https://thehackernews.com/2026/11/fireworks-ai-breach-widens-to-expose.html", "canonical_url": "https://thehackernews.com/2026/11/fireworks-ai-breach-widens-to-expose.html", "date": "2026-11-10T15:33:59Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Today: CISO Forum Virtual Summit 2026 – Join Global Cybersecurity Leaders", "link": "https://securityweek.com/today-ciso-forum-virtual-summit-2026-join-global-cybersecurity-leaders", "canonical_url": "https://securityweek.com/today-ciso-forum-virtual-summit-2026-join-global-cybersecurity-leaders", "date": "2026-11-10T15:00:00Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ { "name": "Turla", "url": "/apt0010", "matched_alias": "summit" } ] }, { "title": "SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities", "link": "https://securityweek.com/sap-patches-critical-icm2shell-proxygate-vulnerabilities", "canonical_url": "https://securityweek.com/sap-patches-critical-icm2shell-proxygate-vulnerabilities", "date": "2026-11-10T14:46:28Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Palantir exec nominated to lead CISA; lame-duck Senate vote is uncertain", "link": "https://therecord.media/michael-losapio-cisa-director-nomination", "canonical_url": "https://therecord.media/michael-losapio-cisa-director-nomination", "date": "2026-11-10T14:31:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Critical vulnerabilities in N-able N-central prompt hosted shutdown", "link": "https://rapid7.com/blog/post/etr-critical-vulnerabilities-in-n-able-n-central-prompt-hosted-shutdown", "canonical_url": "https://rapid7.com/blog/post/etr-critical-vulnerabilities-in-n-able-n-central-prompt-hosted-shutdown", "date": "2026-11-10T14:20:34Z", "source": "Rapid7", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "AI Makes Reverse Engineering Mainstream Software & Malware Far Easier", "link": "https://darkreading.com/application-security/ai-reverse-engineering-apps", "canonical_url": "https://darkreading.com/application-security/ai-reverse-engineering-apps", "date": "2026-11-10T13:00:00Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed", "link": "https://thehackernews.com/2026/11/binance-warns-of-ios-sandbox-escape.html", "canonical_url": "https://thehackernews.com/2026/11/binance-warns-of-ios-sandbox-escape.html", "date": "2026-11-10T12:15:31Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA Adds Six Known Exploited Vulnerabilities to Catalog", "link": "https://cisa.gov/news-events/alerts/2026/11/10/cisa-adds-six-known-exploited-vulnerabilities-catalog", "canonical_url": "https://cisa.gov/news-events/alerts/2026/11/10/cisa-adds-six-known-exploited-vulnerabilities-catalog", "date": "2026-11-10T12:00:00Z", "source": "CISA Advisories", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities", "link": "https://thehackernews.com/2026/11/apple-patches-imessage-group-chat.html", "canonical_url": "https://thehackernews.com/2026/11/apple-patches-imessage-group-chat.html", "date": "2026-11-10T10:16:51Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers", "link": "https://thehackernews.com/2026/11/russian-turla-hackers-use-new-cereal.html", "canonical_url": "https://thehackernews.com/2026/11/russian-turla-hackers-use-new-cereal.html", "date": "2026-11-10T10:07:29Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "Turla", "url": "/apt0010", "matched_alias": "turla" } ] }, { "title": "Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark", "link": "https://thehackernews.com/2026/11/anthropics-claude-fable-52-beats-gpt-6.html", "canonical_url": "https://thehackernews.com/2026/11/anthropics-claude-fable-52-beats-gpt-6.html", "date": "2026-11-10T08:16:14Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "IT threat evolution in Q3 2026. Non-mobile statistics", "link": "https://securelist.com/malware-report-q3-2026-pc-iot-statistics/121843", "canonical_url": "https://securelist.com/malware-report-q3-2026-pc-iot-statistics/121843", "date": "2026-11-10T08:00:37Z", "source": "Securelist", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "IT threat evolution in Q3 2026. Mobile statistics", "link": "https://securelist.com/malware-report-q3-2026-mobile-statistics/121844", "canonical_url": "https://securelist.com/malware-report-q3-2026-mobile-statistics/121844", "date": "2026-11-10T08:00:17Z", "source": "Securelist", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "France Blames Iran for a Cyberattack That Heated Supermarket Refrigerators", "link": "https://securityweek.com/france-blames-iran-for-a-cyberattack-that-heated-supermarket-refrigerators", "canonical_url": "https://securityweek.com/france-blames-iran-for-a-cyberattack-that-heated-supermarket-refrigerators", "date": "2026-11-10T07:35:05Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026", "link": "https://thehackernews.com/2026/11/google-issues-chrome-security-update.html", "canonical_url": "https://thehackernews.com/2026/11/google-issues-chrome-security-update.html", "date": "2026-11-10T06:52:54Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws", "link": "https://thehackernews.com/2026/11/cisa-warns-of-active-exploitation-of.html", "canonical_url": "https://thehackernews.com/2026/11/cisa-warns-of-active-exploitation-of.html", "date": "2026-11-10T06:31:42Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Chrome Update Patches Exploited XML Zero-Day, Eighth This Year", "link": "https://securityweek.com/chrome-update-patches-exploited-xml-zero-day-eighth-this-year", "canonical_url": "https://securityweek.com/chrome-update-patches-exploited-xml-zero-day-eighth-this-year", "date": "2026-11-10T06:12:24Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA Announces Enhanced Reporting Form for Cyber Incidents", "link": "https://darkreading.com/cyberattacks-data-breaches/cisa-announces-enhanced-reporting-form-cyber-incidents", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/cisa-announces-enhanced-reporting-form-cyber-incidents", "date": "2026-11-09T21:38:20Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion", "link": "https://darkreading.com/application-security/microsoft-rce-bug-windows-paint-confusion", "canonical_url": "https://darkreading.com/application-security/microsoft-rce-bug-windows-paint-confusion", "date": "2026-11-09T21:12:24Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Data breach at hearing aid giant Amplifon impacts thousands", "link": "https://therecord.media/amplifon-hearing-aid-company-data-breach", "canonical_url": "https://therecord.media/amplifon-hearing-aid-company-data-breach", "date": "2026-11-09T20:44:00Z", "source": "The Record", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India", "link": "https://darkreading.com/cybersecurity-operations/black-hat-india-2026-landmark-debut", "canonical_url": "https://darkreading.com/cybersecurity-operations/black-hat-india-2026-landmark-debut", "date": "2026-11-09T20:19:56Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Vulnerability that lets hackers SSH into Linux devices is under active exploitation", "link": "https://arstechnica.com/security/2026/11/vulnerability-that-lets-hackers-ssh-into-linux-devices-is-under-active-exploitation", "canonical_url": "https://arstechnica.com/security/2026/11/vulnerability-that-lets-hackers-ssh-into-linux-devices-is-under-active-exploitation", "date": "2026-11-09T19:41:34Z", "source": "Ars Technica", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Vanderbilt cybersecurity incident impacting campus devices and systems", "link": "https://therecord.media/vanderbilt-cyberattack-ransomware-alert", "canonical_url": "https://therecord.media/vanderbilt-cyberattack-ransomware-alert", "date": "2026-11-09T18:30:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data", "link": "https://thehackernews.com/2026/11/hackers-exploit-quboles-trusted-aws.html", "canonical_url": "https://thehackernews.com/2026/11/hackers-exploit-quboles-trusted-aws.html", "date": "2026-11-09T17:51:21Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware", "link": "https://thehackernews.com/2026/11/hackers-compromise-etherspheres-bee-js.html", "canonical_url": "https://thehackernews.com/2026/11/hackers-compromise-etherspheres-bee-js.html", "date": "2026-11-09T17:36:28Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia", "link": "https://thehackernews.com/2026/11/bitter-hackers-deploy-new-paprat.html", "canonical_url": "https://thehackernews.com/2026/11/bitter-hackers-deploy-new-paprat.html", "date": "2026-11-09T14:31:29Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "BITTER", "url": "/apt1002", "matched_alias": "bitter" }, { "name": "HAZY TIGER", "url": "/hazy-tiger", "matched_alias": "bitter" } ] }, { "title": "Alleged AI-aided cyberattack exploits assistant interface to breach German web host", "link": "https://therecord.media/cyberattack-germany-ai-mittwald", "canonical_url": "https://therecord.media/cyberattack-germany-ai-mittwald", "date": "2026-11-09T14:15:00Z", "source": "The Record", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Revolve Puts Data Breach Victim Count at 1.5 Million", "link": "https://securityweek.com/revolve-puts-data-breach-victim-count-at-1-5-million", "canonical_url": "https://securityweek.com/revolve-puts-data-breach-victim-count-at-1-5-million", "date": "2026-11-09T14:08:08Z", "source": "SecurityWeek", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers", "link": "https://securityweek.com/iris-plaza-breach-may-have-exposed-data-of-7-7-million-customers", "canonical_url": "https://securityweek.com/iris-plaza-breach-may-have-exposed-data-of-7-7-million-customers", "date": "2026-11-09T12:41:27Z", "source": "SecurityWeek", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web", "link": "https://securityweek.com/italys-meloni-blames-pro-russian-hackers-for-leak-of-foreign-ministers-data-on-the-dark-web", "canonical_url": "https://securityweek.com/italys-meloni-blames-pro-russian-hackers-for-leak-of-foreign-ministers-data-on-the-dark-web", "date": "2026-11-09T12:22:12Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH", "link": "https://securityweek.com/hackers-exploiting-sshole-authentication-bypass-in-openssh", "canonical_url": "https://securityweek.com/hackers-exploiting-sshole-authentication-bypass-in-openssh", "date": "2026-11-09T12:13:32Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA Adds Four Known Exploited Vulnerabilities to Catalog", "link": "https://cisa.gov/news-events/alerts/2026/11/09/cisa-adds-four-known-exploited-vulnerabilities-catalog", "canonical_url": "https://cisa.gov/news-events/alerts/2026/11/09/cisa-adds-four-known-exploited-vulnerabilities-catalog", "date": "2026-11-09T12:00:00Z", "source": "CISA Advisories", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Amplifon Americas Data Breach Impacts 1.3 Million", "link": "https://securityweek.com/amplifon-americas-data-breach-impacts-1-3-million", "canonical_url": "https://securityweek.com/amplifon-americas-data-breach-impacts-1-3-million", "date": "2026-11-09T11:20:09Z", "source": "SecurityWeek", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Over 3 Million People Hit by Frontline Education Data Breach", "link": "https://securityweek.com/3-million-people-hit-by-frontline-education-data-breach", "canonical_url": "https://securityweek.com/3-million-people-hit-by-frontline-education-data-breach", "date": "2026-11-09T10:09:02Z", "source": "SecurityWeek", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records", "link": "https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html", "canonical_url": "https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html", "date": "2026-11-09T09:01:50Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation", "link": "https://thehackernews.com/2026/11/cisa-flags-sonicwall-sonicos-mfa-bypass.html", "canonical_url": "https://thehackernews.com/2026/11/cisa-flags-sonicwall-sonicos-mfa-bypass.html", "date": "2026-11-09T06:05:24Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Emerging Threat: Critical Vulnerability in N-able N-central", "link": "https://labs.beazley.security/advisories/BSL-A1242", "canonical_url": "https://labs.beazley.security/advisories/BSL-A1242", "date": "2026-11-09T06:00:00Z", "source": "Beazley Security Labs Advisories", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call", "link": "https://wired.com/story/kernel-panic-refrigeration-hacks-internet-of-things", "canonical_url": "https://wired.com/story/kernel-panic-refrigeration-hacks-internet-of-things", "date": "2026-11-07T13:00:00Z", "source": "Wired Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins", "link": "https://securityweek.com/sonicwall-patches-exploited-sonicos-bug-that-weakens-vpn-logins", "canonical_url": "https://securityweek.com/sonicwall-patches-exploited-sonicos-bug-that-weakens-vpn-logins", "date": "2026-11-07T10:16:23Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Chainalysis says hackers stole credentials and tokens for all of its customers", "link": "https://arstechnica.com/security/2026/11/chainalysis-says-hackers-stole-credentials-and-tokens-for-all-of-its-customers", "canonical_url": "https://arstechnica.com/security/2026/11/chainalysis-says-hackers-stole-credentials-and-tokens-for-all-of-its-customers", "date": "2026-11-06T20:56:41Z", "source": "Ars Technica", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Certificate authority DigiCert reports data breach involving business customer info", "link": "https://therecord.media/digicert-certificate-authority-reports-data-breach", "canonical_url": "https://therecord.media/digicert-certificate-authority-reports-data-breach", "date": "2026-11-06T18:56:00Z", "source": "The Record", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Free Chinese AI Models Are Getting Scary Good at Hacking", "link": "https://wired.com/story/free-chinese-ai-models-are-getting-scary-good-at-hacking", "canonical_url": "https://wired.com/story/free-chinese-ai-models-are-getting-scary-good-at-hacking", "date": "2026-11-06T18:43:43Z", "source": "Wired Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "The Good, the Bad and the Ugly in Cybersecurity - Week 45 (2026)", "link": "https://sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-45-8", "canonical_url": "https://sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-45-8", "date": "2026-11-06T18:30:54Z", "source": "SentinelOne", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks", "link": "https://securityweek.com/japan-announces-emergency-cybersecurity-package-following-a-wave-of-attacks", "canonical_url": "https://securityweek.com/japan-announces-emergency-cybersecurity-package-following-a-wave-of-attacks", "date": "2026-11-06T18:28:41Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers", "link": "https://therecord.media/fbi-agent-pleads-guilty-to-stealing-from-nation-state-hackers", "canonical_url": "https://therecord.media/fbi-agent-pleads-guilty-to-stealing-from-nation-state-hackers", "date": "2026-11-06T16:53:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot", "link": "https://thehackernews.com/2026/11/hackers-exploited-openssh-sshole-flaw.html", "canonical_url": "https://thehackernews.com/2026/11/hackers-exploited-openssh-sshole-flaw.html", "date": "2026-11-06T15:21:49Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "DigiCert Data Breach Impacts Business Customer Information", "link": "https://securityweek.com/digicert-data-breach-impacts-business-customer-information", "canonical_url": "https://securityweek.com/digicert-data-breach-impacts-business-customer-information", "date": "2026-11-06T14:00:07Z", "source": "SecurityWeek", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Metasploit Wrapup: Unauth RCE modules in Network Perimeter Devices and much more", "link": "https://rapid7.com/blog/post/pt-metasploit-wrapup-unauth-rce-modules-in-network-perimeter-devices-and-much-more", "canonical_url": "https://rapid7.com/blog/post/pt-metasploit-wrapup-unauth-rce-modules-in-network-perimeter-devices-and-much-more", "date": "2026-11-06T13:52:11Z", "source": "Rapid7", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack", "link": "https://securityweek.com/grocery-giant-ahold-delhaize-estimates-financial-toll-of-october-cyberattack", "canonical_url": "https://securityweek.com/grocery-giant-ahold-delhaize-estimates-financial-toll-of-october-cyberattack", "date": "2026-11-06T12:47:55Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It", "link": "https://thehackernews.com/2026/11/microsoft-paint-rce-fix-now-available.html", "canonical_url": "https://thehackernews.com/2026/11/microsoft-paint-rce-fix-now-available.html", "date": "2026-11-06T12:06:43Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA Adds One Known Exploited Vulnerability to Catalog", "link": "https://cisa.gov/news-events/alerts/2026/11/06/cisa-adds-one-known-exploited-vulnerability-catalog", "canonical_url": "https://cisa.gov/news-events/alerts/2026/11/06/cisa-adds-one-known-exploited-vulnerability-catalog", "date": "2026-11-06T12:00:00Z", "source": "CISA Advisories", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions", "link": "https://securityweek.com/openai-model-wrote-its-own-network-code-to-get-around-sandbox-restrictions", "canonical_url": "https://securityweek.com/openai-model-wrote-its-own-network-code-to-get-around-sandbox-restrictions", "date": "2026-11-06T09:33:51Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services", "link": "https://thehackernews.com/2026/11/chainalysis-breach-exposes-all-users.html", "canonical_url": "https://thehackernews.com/2026/11/chainalysis-breach-exposes-all-users.html", "date": "2026-11-06T08:04:49Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs", "link": "https://thehackernews.com/2026/11/hackers-hide-linux-backdoor-in-control.html", "canonical_url": "https://thehackernews.com/2026/11/hackers-hide-linux-backdoor-in-control.html", "date": "2026-11-06T05:58:54Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Threat actors use agentic AI tooling to find and abuse exposed secrets", "link": "https://microsoft.com/en-us/security/blog/2026/11/05/threat-actors-use-agentic-ai-tooling-to-find-and-abuse-exposed-secrets", "canonical_url": "https://microsoft.com/en-us/security/blog/2026/11/05/threat-actors-use-agentic-ai-tooling-to-find-and-abuse-exposed-secrets", "date": "2026-11-05T23:46:50Z", "source": "Microsoft Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Meet *sshole, the vulnerability that lets hackers SSH into Linux devices", "link": "https://arstechnica.com/security/2026/11/vulnerability-allows-attackers-to-log-into-some-linux-devices-sans-password", "canonical_url": "https://arstechnica.com/security/2026/11/vulnerability-allows-attackers-to-log-into-some-linux-devices-sans-password", "date": "2026-11-05T23:09:36Z", "source": "Ars Technica", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Queens Public Library says ransomware attack disrupted Wi-Fi, on-site computers", "link": "https://therecord.media/queens-library-ransomware-causes-disruptions", "canonical_url": "https://therecord.media/queens-library-ransomware-causes-disruptions", "date": "2026-11-05T22:08:00Z", "source": "The Record", "cves": [ ], "tags": [ "ransomware" ], "actors": [ ] }, { "title": "What We Missed: Knicks Phishing Test Goes Out of Bounds", "link": "https://darkreading.com/cyber-risk/what-we-missed-knicks-phishing-test-out-of-bounds", "canonical_url": "https://darkreading.com/cyber-risk/what-we-missed-knicks-phishing-test-out-of-bounds", "date": "2026-11-05T21:00:47Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "APT29's Watering Holes Target Thousands of Mobile Users", "link": "https://darkreading.com/mobile-security/apt29-watering-holes-target-mobile-users", "canonical_url": "https://darkreading.com/mobile-security/apt29-watering-holes-target-mobile-users", "date": "2026-11-05T20:05:39Z", "source": "DarkReading", "cves": [ ], "tags": [ "apt" ], "actors": [ { "name": "APT29", "url": "/apt29", "matched_alias": "apt29" } ] }, { "title": "Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign", "link": "https://therecord.media/russia-hackers-smartphone-cyberattacks", "canonical_url": "https://therecord.media/russia-hackers-smartphone-cyberattacks", "date": "2026-11-05T17:00:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Email threat landscape: Q3 2026 trends and insights", "link": "https://microsoft.com/en-us/security/blog/2026/11/05/email-threat-landscape-q3-2026-trends-and-insights", "canonical_url": "https://microsoft.com/en-us/security/blog/2026/11/05/email-threat-landscape-q3-2026-trends-and-insights", "date": "2026-11-05T16:00:00Z", "source": "Microsoft Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories", "link": "https://thehackernews.com/2026/11/threatsday-apache-ofbiz-rce-dreamhost.html", "canonical_url": "https://thehackernews.com/2026/11/threatsday-apache-ofbiz-rce-dreamhost.html", "date": "2026-11-05T14:41:10Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns", "link": "https://securityweek.com/bank-phishing-sites-show-fake-suspended-pages-to-evade-takedowns", "canonical_url": "https://securityweek.com/bank-phishing-sites-show-fake-suspended-pages-to-evade-takedowns", "date": "2026-11-05T13:22:12Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Cyberattack Hits French Blood Bank Site but No Blood Products Are Compromised", "link": "https://securityweek.com/cyberattack-hits-french-blood-bank-site-but-no-blood-products-are-compromised", "canonical_url": "https://securityweek.com/cyberattack-hits-french-blood-bank-site-but-no-blood-products-are-compromised", "date": "2026-11-05T12:58:32Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day", "link": "https://securityweek.com/zyxel-switch-hacks-blamed-on-patched-flaw-actually-exploited-a-zero-day", "canonical_url": "https://securityweek.com/zyxel-switch-hacks-blamed-on-patched-flaw-actually-exploited-a-zero-day", "date": "2026-11-05T10:56:41Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes", "link": "https://securityweek.com/russia-linked-hackers-hit-ios-android-devices-with-exploit-chains-via-watering-holes", "canonical_url": "https://securityweek.com/russia-linked-hackers-hit-ios-android-devices-with-exploit-chains-via-watering-holes", "date": "2026-11-05T10:37:13Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks", "link": "https://securityweek.com/openai-finds-gpt-6-astra-quietly-holding-back-on-internal-red-teaming-exploit-tasks", "canonical_url": "https://securityweek.com/openai-finds-gpt-6-astra-quietly-holding-back-on-internal-red-teaming-exploit-tasks", "date": "2026-11-05T10:02:00Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603", "link": "https://securelist.com/storm-2603-fileless-toolshell-attack/121467", "canonical_url": "https://securelist.com/storm-2603-fileless-toolshell-attack/121467", "date": "2026-11-05T10:00:11Z", "source": "Securelist", "cves": [ ], "tags": [ "breach" ], "actors": [ { "name": "Storm-2603", "url": "/storm-2603", "matched_alias": "storm-2603" } ] }, { "title": "Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution", "link": "https://thehackernews.com/2026/11/zyxel-gs1900-patch-fails-to-block-zero.html", "canonical_url": "https://thehackernews.com/2026/11/zyxel-gs1900-patch-fails-to-block-zero.html", "date": "2026-11-05T07:06:33Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says", "link": "https://thehackernews.com/2026/11/hackers-exploit-patched-apple-flaw-to.html", "canonical_url": "https://thehackernews.com/2026/11/hackers-exploit-patched-apple-flaw-to.html", "date": "2026-11-05T05:17:04Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers exploited iOS and Android flaws to infect phones", "link": "https://arstechnica.com/security/2026/11/hackers-exploited-ios-and-android-flaws-to-infect-phones", "canonical_url": "https://arstechnica.com/security/2026/11/hackers-exploited-ios-and-android-flaws-to-infect-phones", "date": "2026-11-04T22:26:49Z", "source": "Ars Technica", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Canadian extradited to US for allegedly hacking schools in at least four states", "link": "https://therecord.media/canadian-nationals-accused-us-education-hacks-cryptomining", "canonical_url": "https://therecord.media/canadian-nationals-accused-us-education-hacks-cryptomining", "date": "2026-11-04T19:17:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "French bank confirms cyber heist, hackers suspected to have stolen an estimated $133 million", "link": "https://therecord.media/french-bank-confirms-cyber-heist", "canonical_url": "https://therecord.media/french-bank-confirms-cyber-heist", "date": "2026-11-04T18:58:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root", "link": "https://thehackernews.com/2026/11/debian-and-ubuntu-apt-flaw-lets-mitm.html", "canonical_url": "https://thehackernews.com/2026/11/debian-and-ubuntu-apt-flaw-lets-mitm.html", "date": "2026-11-04T17:00:46Z", "source": "The Hacker News", "cves": [ ], "tags": [ "apt" ], "actors": [ ] }, { "title": "SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records", "link": "https://thehackernews.com/2026/11/sonicwall-wont-patch-eol-gms-flaws-that.html", "canonical_url": "https://thehackernews.com/2026/11/sonicwall-wont-patch-eol-gms-flaws-that.html", "date": "2026-11-04T17:00:38Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet", "link": "https://darkreading.com/endpoint-security/google-13-million-device-strong-xcpe-botnet", "canonical_url": "https://darkreading.com/endpoint-security/google-13-million-device-strong-xcpe-botnet", "date": "2026-11-04T16:24:08Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Ukrainian news outlet Kyiv Independent hit by suspected Russian cyberattack", "link": "https://therecord.media/ukraine-kyiv-independent-cyberattack", "canonical_url": "https://therecord.media/ukraine-kyiv-independent-cyberattack", "date": "2026-11-04T16:15:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Binance says hackers who stole billions in crypto spent months planning heist", "link": "https://arstechnica.com/information-technology/2026/11/binance-says-hackers-who-stole-billions-in-crypto-spent-months-planning-heist", "canonical_url": "https://arstechnica.com/information-technology/2026/11/binance-says-hackers-who-stole-billions-in-crypto-spent-months-planning-heist", "date": "2026-11-04T16:06:03Z", "source": "Ars Technica", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits", "link": "https://thehackernews.com/2026/11/apt29-linked-hackers-hijack-web.html", "canonical_url": "https://thehackernews.com/2026/11/apt29-linked-hackers-hijack-web.html", "date": "2026-11-04T14:27:52Z", "source": "The Hacker News", "cves": [ ], "tags": [ "apt" ], "actors": [ { "name": "APT29", "url": "/apt29", "matched_alias": "apt29" } ] }, { "title": "Cyberattack wipes cloud data at major Russian hosting provider Beget", "link": "https://therecord.media/russia-cyberattack-beget-cloud", "canonical_url": "https://therecord.media/russia-cyberattack-beget-cloud", "date": "2026-11-04T14:00:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "HYFLOCK Ransomware Evolves with New Builds and Encryption Weaknesses", "link": "https://blog.checkpoint.com/security/hyflock-ransomware-evolves-with-new-builds-and-encryption-weaknesses", "canonical_url": "https://blog.checkpoint.com/security/hyflock-ransomware-evolves-with-new-builds-and-encryption-weaknesses", "date": "2026-11-04T13:00:18Z", "source": "Check Point", "cves": [ ], "tags": [ "ransomware" ], "actors": [ { "name": "Hyflock", "url": "/hyflock", "matched_alias": "hyflock" } ] }, { "title": "Modernising threat hunting: Using Semantic Search to Find Risky AI Agent Behavior", "link": "https://elastic.co/security-labs/blog/ai-agent-session-monitoring-embedding-models", "canonical_url": "https://elastic.co/security-labs/blog/ai-agent-session-monitoring-embedding-models", "date": "2026-11-04T12:45:02Z", "source": "Elastic Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor", "link": "https://thehackernews.com/2026/11/china-aligned-hackers-hijack-sogou.html", "canonical_url": "https://thehackernews.com/2026/11/china-aligned-hackers-hijack-sogou.html", "date": "2026-11-04T11:24:31Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Malicious cPGuard Updates Served in OpsShield Supply Chain Attack", "link": "https://securityweek.com/malicious-cpguard-updates-served-in-opsshield-supply-chain-attack", "canonical_url": "https://securityweek.com/malicious-cpguard-updates-served-in-opsshield-supply-chain-attack", "date": "2026-11-04T10:54:48Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure", "link": "https://thehackernews.com/2026/11/russian-police-arrest-3-suspected.html", "canonical_url": "https://thehackernews.com/2026/11/russian-police-arrest-3-suspected.html", "date": "2026-11-04T08:17:11Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "High-Severity Remote Code Execution Vulnerability in WordPress Core Under Active Exploitation (CVE-2026-119977)", "link": "https://labs.beazley.security/advisories/BSL-A1241", "canonical_url": "https://labs.beazley.security/advisories/BSL-A1241", "date": "2026-11-04T08:00:00Z", "source": "Beazley Security Labs Advisories", "cves": [ "CVE-2026-119977" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction", "link": "https://thehackernews.com/2026/11/google-patches-critical-android-flaw.html", "canonical_url": "https://thehackernews.com/2026/11/google-patches-critical-android-flaw.html", "date": "2026-11-04T07:46:15Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades", "link": "https://thehackernews.com/2026/11/cisa-confirms-hackers-exploiting.html", "canonical_url": "https://thehackernews.com/2026/11/cisa-confirms-hackers-exploiting.html", "date": "2026-11-04T05:43:11Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach", "link": "https://darkreading.com/cyberattacks-data-breaches/philippine-migrant-worker-data-69gb-government-breach", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/philippine-migrant-worker-data-69gb-government-breach", "date": "2026-11-04T02:00:00Z", "source": "DarkReading", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Phishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification Gap", "link": "https://darkreading.com/identity-access-management-security/beyond-phishing-resistant-yubico-identity-verification-gap", "canonical_url": "https://darkreading.com/identity-access-management-security/beyond-phishing-resistant-yubico-identity-verification-gap", "date": "2026-11-04T01:05:40Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Google dismantles massive botnet hidden in Android TV boxes", "link": "https://therecord.media/google-dismantles-botnet-hidden-android-tv-boxes", "canonical_url": "https://therecord.media/google-dismantles-botnet-hidden-android-tv-boxes", "date": "2026-11-03T19:48:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Binance Says Hackers Used Well-Known Tricks to Carry Out a $6.34 Billion Heist", "link": "https://wired.com/story/binance-says-hackers-used-well-known-tricks-to-carry-out-a-dollar634-billion-heist", "canonical_url": "https://wired.com/story/binance-says-hackers-used-well-known-tricks-to-carry-out-a-dollar634-billion-heist", "date": "2026-11-03T19:04:58Z", "source": "Wired Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Several German lawmakers and foreign policy staff received Apple warnings on spyware", "link": "https://therecord.media/german-officials-among-apple-spyware-warning-recipients", "canonical_url": "https://therecord.media/german-officials-among-apple-spyware-warning-recipients", "date": "2026-11-03T18:44:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes", "link": "https://thehackernews.com/2026/11/chainstack-reports-production-systems.html", "canonical_url": "https://thehackernews.com/2026/11/chainstack-reports-production-systems.html", "date": "2026-11-03T18:16:19Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Google dismantles botnet secretly running on 1.3 million Android TV boxes", "link": "https://arstechnica.com/google/2026/11/google-dismantles-botnet-secretly-running-on-1-3-million-android-tv-boxes", "canonical_url": "https://arstechnica.com/google/2026/11/google-dismantles-botnet-secretly-running-on-1-3-million-android-tv-boxes", "date": "2026-11-03T17:08:21Z", "source": "Ars Technica", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes", "link": "https://thehackernews.com/2026/11/cpguard-update-channel-hijacked-to.html", "canonical_url": "https://thehackernews.com/2026/11/cpguard-update-channel-hijacked-to.html", "date": "2026-11-03T15:16:32Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Frontline Education Data Breach Impacts Over 1.3 Million", "link": "https://securityweek.com/frontline-education-data-breach-impacts-over-1-3-million", "canonical_url": "https://securityweek.com/frontline-education-data-breach-impacts-over-1-3-million", "date": "2026-11-03T14:32:38Z", "source": "SecurityWeek", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "A hidden backdoor put 1.3 million TV boxes to work for criminals", "link": "https://malwarebytes.com/blog/mobile/2026/11/a-hidden-backdoor-put-1-3-million-tv-boxes-to-work-for-criminals", "canonical_url": "https://malwarebytes.com/blog/mobile/2026/11/a-hidden-backdoor-put-1-3-million-tv-boxes-to-work-for-criminals", "date": "2026-11-03T14:11:25Z", "source": "Malwarebytes", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Introducing Zero Wire, a hub for investigating critical Internet vulnerabilities", "link": "https://blog.cloudflare.com/zero-wire", "canonical_url": "https://blog.cloudflare.com/zero-wire", "date": "2026-11-03T14:00:00Z", "source": "Cloudflare", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Android’s November 2026 Updates Patch Over 200 Vulnerabilities", "link": "https://securityweek.com/androids-november-2026-updates-patch-over-200-vulnerabilities", "canonical_url": "https://securityweek.com/androids-november-2026-updates-patch-over-200-vulnerabilities", "date": "2026-11-03T12:21:49Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers put porn on public billboards and claim it was “far too easy”", "link": "https://malwarebytes.com/blog/bugs/2026/11/hackers-put-porn-on-public-billboards-and-claim-it-was-far-too-easy", "canonical_url": "https://malwarebytes.com/blog/bugs/2026/11/hackers-put-porn-on-public-billboards-and-claim-it-was-far-too-easy", "date": "2026-11-03T12:01:55Z", "source": "Malwarebytes", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Revolve card breach: 1.5 million people may be affected", "link": "https://malwarebytes.com/blog/data-breaches/2026/11/revolve-card-breach-1-5-million-people-may-be-affected", "canonical_url": "https://malwarebytes.com/blog/data-breaches/2026/11/revolve-card-breach-1-5-million-people-may-be-affected", "date": "2026-11-03T11:26:44Z", "source": "Malwarebytes", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing", "link": "https://thehackernews.com/2026/11/red-hat-patches-98-rated-linux-tcp-rce.html", "canonical_url": "https://thehackernews.com/2026/11/red-hat-patches-98-rated-linux-tcp-rce.html", "date": "2026-11-03T11:23:53Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware", "link": "https://thehackernews.com/2026/11/russia-aligned-gorbag-hackers-exploit.html", "canonical_url": "https://thehackernews.com/2026/11/russia-aligned-gorbag-hackers-exploit.html", "date": "2026-11-03T11:00:45Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Google Dismantles XCPE Botnet of 1.3 Million Android Devices", "link": "https://securityweek.com/google-dismantles-xcpe-botnet-of-1-3-million-android-devices", "canonical_url": "https://securityweek.com/google-dismantles-xcpe-botnet-of-1-3-million-android-devices", "date": "2026-11-03T09:22:09Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets", "link": "https://thehackernews.com/2026/11/hackers-exploit-btcpay-server-flaw-to.html", "canonical_url": "https://thehackernews.com/2026/11/hackers-exploit-btcpay-server-flaw-to.html", "date": "2026-11-03T08:31:48Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw", "link": "https://thehackernews.com/2026/11/synology-nas-devices-targeted-in.html", "canonical_url": "https://thehackernews.com/2026/11/synology-nas-devices-targeted-in.html", "date": "2026-11-03T07:43:07Z", "source": "The Hacker News", "cves": [ ], "tags": [ "ransomware" ], "actors": [ ] }, { "title": "Critical Authentication Bypass in Barracuda Email Security Gateway (CVE-2026-116606, CVE-2026-111560)", "link": "https://labs.beazley.security/advisories/BSL-A1240", "canonical_url": "https://labs.beazley.security/advisories/BSL-A1240", "date": "2026-11-03T07:00:00Z", "source": "Beazley Security Labs Advisories", "cves": [ "CVE-2026-116606", "CVE-2026-111560" ], "tags": [ "cve" ], "actors": [ { "name": "Barracuda", "url": "/barracuda", "matched_alias": "barracuda" } ] }, { "title": "Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors", "link": "https://thehackernews.com/2026/11/attackers-exploit-critical-siemens.html", "canonical_url": "https://thehackernews.com/2026/11/attackers-exploit-critical-siemens.html", "date": "2026-11-03T05:34:41Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies", "link": "https://krebsonsecurity.com/2026/11/tech-firms-dismantle-botnet-that-turned-1-3m-tv-boxes-into-proxies", "canonical_url": "https://krebsonsecurity.com/2026/11/tech-firms-dismantle-botnet-that-turned-1-3m-tv-boxes-into-proxies", "date": "2026-11-03T02:24:31Z", "source": "KrebsOnSecurity", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Unit 42 Threat Intelligence Highlights - Nov. 2, 2026", "link": "https://unit42.paloaltonetworks.com/u42-threat-intelligence-highlights-oct-2026", "canonical_url": "https://unit42.paloaltonetworks.com/u42-threat-intelligence-highlights-oct-2026", "date": "2026-11-02T23:00:45Z", "source": "Unit 42", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning", "link": "https://darkreading.com/cyberattacks-data-breaches/binance-hack-test-attack-paths", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/binance-hack-test-attack-paths", "date": "2026-11-02T22:27:24Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Largest crypto exchange in Brazil confirms cyberattack as millions flow out of platform", "link": "https://therecord.media/mercado-bitcoin-brazil-cryptocurrency-heist", "canonical_url": "https://therecord.media/mercado-bitcoin-brazil-cryptocurrency-heist", "date": "2026-11-02T21:42:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks", "link": "https://microsoft.com/en-us/security/blog/2026/11/02/exploited-vulnerabilities-common-data-driven-analysis-real-world-attacks", "canonical_url": "https://microsoft.com/en-us/security/blog/2026/11/02/exploited-vulnerabilities-common-data-driven-analysis-real-world-attacks", "date": "2026-11-02T20:20:59Z", "source": "Microsoft Security", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Michigan State cyber incident claimed by ransomware gang behind recent hospital attack", "link": "https://therecord.media/michigan-state-university-byod-gang-cyber-incident", "canonical_url": "https://therecord.media/michigan-state-university-byod-gang-cyber-incident", "date": "2026-11-02T19:54:00Z", "source": "The Record", "cves": [ ], "tags": [ "ransomware" ], "actors": [ ] }, { "title": "Storm Ransomware Is Scaling Fast and Selling an AI Powered Image", "link": "https://blog.checkpoint.com/exposure-management/storm-ransomware-is-scaling-fast-and-selling-an-ai-powered-image", "canonical_url": "https://blog.checkpoint.com/exposure-management/storm-ransomware-is-scaling-fast-and-selling-an-ai-powered-image", "date": "2026-11-02T17:09:29Z", "source": "Check Point", "cves": [ ], "tags": [ "ransomware" ], "actors": [ ] }, { "title": "Guiding Customers Through Critical PHP Vulnerabilities", "link": "https://paloaltonetworks.com/blog/2026/11/guiding-customers-through-critical-php-vulnerabilities", "canonical_url": "https://paloaltonetworks.com/blog/2026/11/guiding-customers-through-critical-php-vulnerabilities", "date": "2026-11-02T16:59:18Z", "source": "Palo Alto Networks", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Russia's statistics agency confirms cyberattack claimed by Belarusian and Ukrainian hackers", "link": "https://therecord.media/hackers-ukraine-belarus-russia", "canonical_url": "https://therecord.media/hackers-ukraine-belarus-russia", "date": "2026-11-02T16:30:00Z", "source": "The Record", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access", "link": "https://thehackernews.com/2026/11/google-disrupts-13-million-device.html", "canonical_url": "https://thehackernews.com/2026/11/google-disrupts-13-million-device.html", "date": "2026-11-02T15:50:26Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Cybersecurity M&A Roundup: 37 Deals Announced in October 2026", "link": "https://securityweek.com/cybersecurity-ma-roundup-37-deals-announced-in-october-2026", "canonical_url": "https://securityweek.com/cybersecurity-ma-roundup-37-deals-announced-in-october-2026", "date": "2026-11-02T15:01:11Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Revolve Data Breach Impacts at Least 200,000 People", "link": "https://securityweek.com/revolve-data-breach-impacts-at-least-180000-people", "canonical_url": "https://securityweek.com/revolve-data-breach-impacts-at-least-180000-people", "date": "2026-11-02T13:35:21Z", "source": "SecurityWeek", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Malicious Claude Code Extension Served in Cursor Supply Chain Attack", "link": "https://securityweek.com/malicious-claude-code-extension-served-in-cursor-supply-chain-attack", "canonical_url": "https://securityweek.com/malicious-claude-code-extension-served-in-cursor-supply-chain-attack", "date": "2026-11-02T11:29:39Z", "source": "SecurityWeek", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)", "link": "https://rapid7.com/blog/post/etr-additional-ivanti-connect-secure-zero-days-exploited-in-the-wild-cve-2026-111357-cve-2026-118527", "canonical_url": "https://rapid7.com/blog/post/etr-additional-ivanti-connect-secure-zero-days-exploited-in-the-wild-cve-2026-111357-cve-2026-118527", "date": "2026-11-02T11:04:08Z", "source": "Rapid7", "cves": [ "CVE-2026-111357", "CVE-2026-118527" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Chainalysis Discloses Data Breach Following AI-Driven Cyberattack", "link": "https://securityweek.com/chainalysis-discloses-data-breach-following-ai-driven-cyberattack", "canonical_url": "https://securityweek.com/chainalysis-discloses-data-breach-following-ai-driven-cyberattack", "date": "2026-11-02T10:27:49Z", "source": "SecurityWeek", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value", "link": "https://thehackernews.com/2026/11/new-volta-infostealer-uses-claude.html", "canonical_url": "https://thehackernews.com/2026/11/new-volta-infostealer-uses-claude.html", "date": "2026-11-02T05:51:07Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script", "link": "https://thehackernews.com/2026/11/hackers-steal-about-27-million-from.html", "canonical_url": "https://thehackernews.com/2026/11/hackers-steal-about-27-million-from.html", "date": "2026-11-01T07:25:40Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection", "link": "https://thehackernews.com/2026/11/netamloader-malware-targets-government.html", "canonical_url": "https://thehackernews.com/2026/11/netamloader-malware-targets-government.html", "date": "2026-11-01T07:02:58Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] } ] }