|
Article: Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access - published 4 days ago. Content: https://thehackernews.com/2026/11/google-disrupts-13-million-device.html Published: 2026 11 02 15:50:26 Received: 2026 11 05 17:16:34 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Independent Digital Media Is Not a Privilege Governments Can Revoke: The Fight to Save Egypt’s Mada Masr - published 4 days ago. Content: https://www.eff.org/deeplinks/2026/11/independent-digital-media-not-privilege-governments-can-revoke-fight-save-egypts Published: 2026 11 02 15:10:22 Received: 2026 11 05 17:19:26 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: Mutipath TCP: Use and Detection, (Mon, Nov 2nd) - published 4 days ago. Content: Last week, an often-ignored TCP option, introduced in 2020, made the news due to a new vulnerability in Linux's implementation (RFC 8684, CVE-2026-98432) https://isc.sans.edu/diary/rss/33482 Published: 2026 11 02 14:52:05 Received: 2026 11 05 17:12:30 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
Article: DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment - published 4 days ago. Content: https://thehackernews.com/2026/11/darkblinders-compromises-israeli-target.html Published: 2026 11 02 14:46:05 Received: 2026 11 05 17:16:34 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps - published 4 days ago. Content: Cyberattacks on both Russia’s and Ukraine’s emergency alert apps resulted in fake messages about missile and nuclear strikes broadcast to the public. Officials from both countries confirmed the attacks, which occurred at similar times, on Sunday evening. According to public statements and messages sent via social media, Ukraine’s alert app was hit first, wi... https://www.theregister.com/security/2026/11/02/nuclear-threats-and-street-brawls-russia-ukraine-report-attacks-on-their-emergency-alert-apps/5306901 Published: 2026 11 02 14:45:00 Received: 2026 11 05 17:19:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Apktool – Decompile, Edit and Rebuild Android APKs - published 4 days ago. Content: https://www.darknet.org.uk/2026/11/apktool-decompile-edit-rebuild-android-apk/ Published: 2026 11 02 13:46:09 Received: 2026 11 05 17:15:22 Feed: Darknet - The Darkside Source: Darknet - The Darkside Category: Cyber Security Topic: Cyber Security |
|
|
Article: Frozen part II: Hackers remotely defrost produce in Euro supermarkets ... again - published 4 days ago. Content: The cyberattacks on commercial refrigerators and freezers in Europe continue, as a slew of grocery stores in Belgium, Ireland, Luxembourg, and Sweden report widespread food wastage as a result of miscreants raising the temperatures to highs of 50ºC (122°F). In Belgium, around 40 Delhaize stores were affected after the attackers reportedly switched fridges a... https://www.theregister.com/cyber-crime/2026/11/02/frozen-part-ii-hackers-remotely-defrost-produce-in-euro-supermarkets-again/5306924 Published: 2026 11 02 13:15:00 Received: 2026 11 05 17:19:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Election Season Is Phishing Season — And Attackers Know It - published 4 days ago. Content: Election season runs on trust, and attackers know it. https://www.securitymagazine.com/blogs/14-security-blog/post/102691-election-season-is-phishing-season-and-attackers-know-it Published: 2026 11 02 13:00:00 Received: 2026 11 05 17:01:49 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
|
Article: AI Vulnerability Finding - published 4 days ago. Content: A comment: 3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total Do you realize how fucking insane that is? Yes. It is a new world out there. ... https://www.schneier.com/blog/archives/2026/11/ai-vulnerability-finding-2.html Published: 2026 11 02 12:02:34 Received: 2026 11 05 17:18:09 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
Article: Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers - published 4 days ago. Content: https://thehackernews.com/2026/11/critical-langflow-flaws-could-let.html Published: 2026 11 02 11:50:00 Received: 2026 11 05 17:16:34 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: FBI pins $6.3B Binance crypto heist on North Korean hackers - published 4 days ago. Content: The FBI has blamed North Korean hackers for the record-breaking $6.3 billion theft from cryptocurrency exchange Binance, pointing the finger at the notorious Lazarus Group as the exchange scrambles to replace stolen funds and reassure customers. In an alert published Saturday, the agency attributed the October 29 attack to TraderTraitor, a North Korean hack... https://www.theregister.com/security/2026/11/02/fbi-pins-63b-binance-crypto-heist-on-north-korean-hackers/5306889 Published: 2026 11 02 11:45:00 Received: 2026 11 05 17:19:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy - published 4 days ago. Content: https://thehackernews.com/2026/11/is-your-soc-ready-for-ai-agents.html Published: 2026 11 02 11:30:00 Received: 2026 11 05 17:16:34 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data - published 4 days ago. Content: https://thehackernews.com/2026/11/attackers-pose-as-it-support-on.html Published: 2026 11 02 11:08:45 Received: 2026 11 05 17:16:34 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: My Journey to the Center of America’s Political Spam Text Hell - published 4 days ago. Content: https://www.wired.com/story/my-journey-to-the-center-of-americas-political-spam-text-hell/ Published: 2026 11 02 11:00:00 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
Article: Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts - published 4 days ago. Content: https://thehackernews.com/2026/11/government-linux-servers-targeted-with.html Published: 2026 11 02 10:49:59 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Phishing-resistant MFA where it matters most, and finding the privileged identities your role report misses - published 4 days ago. Content: https://www.darkoperator.com/blog/2026/11/2/cwdl3e3gk4d6uiyor7ack9sdzvqvjj Published: 2026 11 02 10:00:00 Received: 2026 11 05 17:16:55 Feed: Blog Source: Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Breach of Confidence: 02 November 2026 - published 4 days ago. Content: Spent Sunday assembling a bookshelf and finished with one screw left over. I’ve decided it’s decorative. Security teams will recognise the approach. Here’s what caught my eye this week. Staffordshire Police Deliver Post to the Wrong Person Staffordshire Police have been reprimanded (no fine, just a stern word) by the ICO after putting a domesti... https://javvadmalik.com/2026/11/02/breach-of-confidence-02-november-2026/ Published: 2026 11 02 10:00:00 Received: 2026 11 05 17:15:38 Feed: J4vv4D Source: J4vv4D Category: Cyber Security Topic: Cyber Security |
|
|
Article: Hundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake Features - published 4 days ago. Content: https://www.wired.com/story/hundreds-of-mundane-ai-apps-are-hiding-abusive-deepfake-features/ Published: 2026 11 02 10:00:00 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: Securing Internet-Critical Software: How We Could Have Backdoored Bash - published 4 days ago. Content: (May 2026) TL;DR: an email address like atouch${IFS}/tmp/savane-rce-proof@attacker.example gave any registered user code execution on its backend. From there, we made our account a superuser, impersonated Bash’s maintainer, and confirmed we could add an SSH key with push access to the upstream Bash repository. An unpatched kernel gave us root access and acc... https://www.reddit.com/r/netsec/comments/1xlsxqk/securing_internetcritical_software_how_we_could/ Published: 2026 11 02 09:43:15 Received: 2026 11 05 17:18:08 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: Remote code execution on Linux systems with multipath TCP - published 4 days ago. Content: submitted by /u/lucidsparrow982 [link] [comments] https://www.reddit.com/r/netsec/comments/1xlsqor/remote_code_execution_on_linux_systems_with/ Published: 2026 11 02 09:30:42 Received: 2026 11 05 17:18:08 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: WordPress pingback and Brotli RCE - published 4 days ago. Content: submitted by /u/adrian_rt [link] [comments] https://www.reddit.com/r/netsec/comments/1xlsgc8/wordpress_pingback_and_brotli_rce/ Published: 2026 11 02 09:11:50 Received: 2026 11 05 17:18:08 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: US Military Probes Freezer Failures, After French Hack - published 4 days ago. Content: https://www.silicon.co.uk/cybersecurity/military-freezer-probe-632115 Published: 2026 11 02 08:30:19 Received: 2026 11 05 17:01:05 Feed: Silicon UK – Security Source: Silicon UK Category: News Topic: Cyber Security |
|
Article: Apache Struts2 Core Arbitrary Code Execution via OGNL Sandbox Escape - published 4 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/7 Published: 2026 11 02 06:10:55 Received: 2026 11 05 17:12:34 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: Apache Struts2 Core TokenHelper Token Cryptographic Timing Side-Channel - published 4 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/6 Published: 2026 11 02 06:10:54 Received: 2026 11 05 17:12:34 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: Apache Struts2 Spring Plugin Uses a Previously Closed Resource - published 4 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/5 Published: 2026 11 02 06:10:52 Received: 2026 11 05 17:12:34 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
Article: Apache Struts2 Core Integer Overflow - published 4 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/4 Published: 2026 11 02 06:10:51 Received: 2026 11 05 17:12:34 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: Apache Struts2 Core Cross-Origin Protection Exemption Miskeyed to a Deployment-Wide Path - published 4 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/3 Published: 2026 11 02 06:10:50 Received: 2026 11 05 17:12:34 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: Apache Struts2 REST Plugin Fails to Properly Parse Chunked Requests - published 4 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/2 Published: 2026 11 02 06:10:48 Received: 2026 11 05 17:12:34 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
Article: Apache Struts2 REST Plugin Untrimmed `Accept` Header Tokens Break Content Negation Fallback - published 4 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/1 Published: 2026 11 02 06:10:47 Received: 2026 11 05 17:12:35 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: Apache Struts2 JSON Plugin Insecure Deserialisation -- Object Deserialisation Element-Count Limit Bypass - published 4 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/0 Published: 2026 11 02 06:10:46 Received: 2026 11 05 17:12:35 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: How Digital Mapping Supports Operations, Safety and ROI - published 4 days ago. Content: How digital mapping supports operations, safety and ROI across large facilities — beyond security. https://www.securitymagazine.com/articles/102639-how-digital-mapping-supports-operations-safety-and-roi Published: 2026 11 02 06:00:00 Received: 2026 11 05 17:01:49 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
Article: New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value - published 4 days ago. Content: https://thehackernews.com/2026/11/new-volta-infostealer-uses-claude.html Published: 2026 11 02 05:51:07 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Investigating three incidents in our evaluations - published 4 days ago. Content: submitted by /u/fagnerbrack [link] [comments] https://www.reddit.com/r/netsec/comments/1xlnvfe/investigating_three_incidents_in_our_evaluations/ Published: 2026 11 02 04:32:13 Received: 2026 11 05 17:18:08 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: ISC Stormcast For Monday, November 2nd, 2026 https://isc.sans.edu/podcastdetail/10160, (Mon, Nov 2nd) - published 5 days ago. Content: https://isc.sans.edu/diary/rss/33480 Published: 2026 11 02 02:00:03 Received: 2026 11 05 17:12:30 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: /r/netsec's Q4 2026 Information Security Hiring Thread - published 5 days ago. Content: Overview If you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company. We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing thei... https://www.reddit.com/r/netsec/comments/1xl8pd3/rnetsecs_q4_2026_information_security_hiring/ Published: 2026 11 01 17:19:31 Received: 2026 11 05 17:18:07 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: r/netsec monthly discussion & tool thread - published 5 days ago. Content: Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links. Rules & Guidelines Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary. Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will... https://www.reddit.com/r/netsec/comments/1xl4ghe/rnetsec_monthly_discussion_tool_thread/ Published: 2026 11 01 14:29:24 Received: 2026 11 05 17:18:06 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: Mirage2FA stole 4,561 M365 session cookies despite MFA via AiTM proxy (CVE-2026-69836 CVSS 10.0) : detection rules and WHfB/Cloud Kerberos Trust hardening guide - published 5 days ago. Content: submitted by /u/doit4everyone [link] [comments] https://www.reddit.com/r/netsec/comments/1xkzjb0/mirage2fa_stole_4561_m365_session_cookies_despite/ Published: 2026 11 01 10:15:16 Received: 2026 11 05 17:18:09 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: OneNote File Extraction, (Sun, Nov 1st) - published 5 days ago. Content: Recently, I had to extract embedded files from a set of OneNote files (extension .one). https://isc.sans.edu/diary/rss/33478 Published: 2026 11 01 09:12:23 Received: 2026 11 05 17:12:31 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key - published 5 days ago. Content: https://thehackernews.com/2026/11/critical-lxd-and-microcloud-flaw-cvss.html Published: 2026 11 01 08:51:31 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Weekly Update 528: Reading AI-generated Code & the Economics of Solar - published 5 days ago. Content: Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSiteBy pure timing coincidence, the Proton CEO's AI @ Proton, Engineering Manifesto made headlines around the same time as this week's video. The guy's management style and choice of language have really rubbed a lot... https://www.troyhunt.com/weekly-update-528/ Published: 2026 11 01 07:35:23 Received: 2026 11 05 17:15:52 Feed: Troy Hunt's Blog Source: Troy Hunt's Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script - published 5 days ago. Content: https://thehackernews.com/2026/11/hackers-steal-about-27-million-from.html Published: 2026 11 01 07:25:40 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist - published 5 days ago. Content: https://thehackernews.com/2026/11/fbi-links-north-koreas-tradertraitor-to.html Published: 2026 11 01 07:03:00 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection - published 5 days ago. Content: https://thehackernews.com/2026/11/netamloader-malware-targets-government.html Published: 2026 11 01 07:02:58 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Overview of Content Published in October - published 6 days ago. Content: Here is an overview of content I published in October: Blog posts: Update: onedump.py Version 0.0.3 Quickpost: Uranium Glass A Ring Tone That I Cannot Hear – Twenty Years Later Quickpost: Ghost USB-C Quickpost: WT20 Welding Electrodes & Radiation SANS ISC Diary entries: YARA-X 1.21.0 Release User Agent Strings Curiosities Orphaned VBA Projects In... https://blog.didierstevens.com/2026/11/01/overview-of-content-published-in-october-12/ Published: 2026 11 01 00:00:00 Received: 2026 11 05 17:15:10 Feed: Didier Stevens Source: Didier Stevens Category: Cyber Security Topic: Cyber Security |
Click to Open Code Editor