|
Article: Token thieves costing companies $100K+ per day in illicit LLM charges - published 5 days ago. Content: Victim organizations are losing millions of dollars in token charges as criminals hijack their corporate LLM access to steal expensive computing resources and AI services. These fraudulent charges from resource consumption can exceed $100,000 a day, according to a Monday report by Google's Mandiant incident responders, who saw cumulative charges at some org... https://www.theregister.com/security/2026/11/02/token-thieves-costing-companies-100k-per-day-in-illicit-llm-charges/5306967 Published: 2026 11 02 16:00:00 Received: 2026 11 05 17:19:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access - published 5 days ago. Content: https://thehackernews.com/2026/11/google-disrupts-13-million-device.html Published: 2026 11 02 15:50:26 Received: 2026 11 05 17:16:34 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Independent Digital Media Is Not a Privilege Governments Can Revoke: The Fight to Save Egypt’s Mada Masr - published 5 days ago. Content: https://www.eff.org/deeplinks/2026/11/independent-digital-media-not-privilege-governments-can-revoke-fight-save-egypts Published: 2026 11 02 15:10:22 Received: 2026 11 05 17:19:26 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: Mutipath TCP: Use and Detection, (Mon, Nov 2nd) - published 5 days ago. Content: Last week, an often-ignored TCP option, introduced in 2020, made the news due to a new vulnerability in Linux's implementation (RFC 8684, CVE-2026-98432) https://isc.sans.edu/diary/rss/33482 Published: 2026 11 02 14:52:05 Received: 2026 11 05 17:12:30 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment - published 5 days ago. Content: https://thehackernews.com/2026/11/darkblinders-compromises-israeli-target.html Published: 2026 11 02 14:46:05 Received: 2026 11 05 17:16:34 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps - published 5 days ago. Content: Cyberattacks on both Russia’s and Ukraine’s emergency alert apps resulted in fake messages about missile and nuclear strikes broadcast to the public. Officials from both countries confirmed the attacks, which occurred at similar times, on Sunday evening. According to public statements and messages sent via social media, Ukraine’s alert app was hit first, wi... https://www.theregister.com/security/2026/11/02/nuclear-threats-and-street-brawls-russia-ukraine-report-attacks-on-their-emergency-alert-apps/5306901 Published: 2026 11 02 14:45:00 Received: 2026 11 05 17:19:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Apktool – Decompile, Edit and Rebuild Android APKs - published 5 days ago. Content: https://www.darknet.org.uk/2026/11/apktool-decompile-edit-rebuild-android-apk/ Published: 2026 11 02 13:46:09 Received: 2026 11 05 17:15:22 Feed: Darknet - The Darkside Source: Darknet - The Darkside Category: Cyber Security Topic: Cyber Security |
|
|
Article: Frozen part II: Hackers remotely defrost produce in Euro supermarkets ... again - published 5 days ago. Content: The cyberattacks on commercial refrigerators and freezers in Europe continue, as a slew of grocery stores in Belgium, Ireland, Luxembourg, and Sweden report widespread food wastage as a result of miscreants raising the temperatures to highs of 50ºC (122°F). In Belgium, around 40 Delhaize stores were affected after the attackers reportedly switched fridges a... https://www.theregister.com/cyber-crime/2026/11/02/frozen-part-ii-hackers-remotely-defrost-produce-in-euro-supermarkets-again/5306924 Published: 2026 11 02 13:15:00 Received: 2026 11 05 17:19:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Election Season Is Phishing Season — And Attackers Know It - published 5 days ago. Content: Election season runs on trust, and attackers know it. https://www.securitymagazine.com/blogs/14-security-blog/post/102691-election-season-is-phishing-season-and-attackers-know-it Published: 2026 11 02 13:00:00 Received: 2026 11 05 17:01:49 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
|
Article: AI Vulnerability Finding - published 5 days ago. Content: A comment: 3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total Do you realize how fucking insane that is? Yes. It is a new world out there. ... https://www.schneier.com/blog/archives/2026/11/ai-vulnerability-finding-2.html Published: 2026 11 02 12:02:34 Received: 2026 11 05 17:18:09 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers - published 5 days ago. Content: https://thehackernews.com/2026/11/critical-langflow-flaws-could-let.html Published: 2026 11 02 11:50:00 Received: 2026 11 05 17:16:34 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: FBI pins $6.3B Binance crypto heist on North Korean hackers - published 5 days ago. Content: The FBI has blamed North Korean hackers for the record-breaking $6.3 billion theft from cryptocurrency exchange Binance, pointing the finger at the notorious Lazarus Group as the exchange scrambles to replace stolen funds and reassure customers. In an alert published Saturday, the agency attributed the October 29 attack to TraderTraitor, a North Korean hack... https://www.theregister.com/security/2026/11/02/fbi-pins-63b-binance-crypto-heist-on-north-korean-hackers/5306889 Published: 2026 11 02 11:45:00 Received: 2026 11 05 17:19:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy - published 5 days ago. Content: https://thehackernews.com/2026/11/is-your-soc-ready-for-ai-agents.html Published: 2026 11 02 11:30:00 Received: 2026 11 05 17:16:34 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data - published 5 days ago. Content: https://thehackernews.com/2026/11/attackers-pose-as-it-support-on.html Published: 2026 11 02 11:08:45 Received: 2026 11 05 17:16:34 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: My Journey to the Center of America’s Political Spam Text Hell - published 5 days ago. Content: https://www.wired.com/story/my-journey-to-the-center-of-americas-political-spam-text-hell/ Published: 2026 11 02 11:00:00 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts - published 5 days ago. Content: https://thehackernews.com/2026/11/government-linux-servers-targeted-with.html Published: 2026 11 02 10:49:59 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Phishing-resistant MFA where it matters most, and finding the privileged identities your role report misses - published 5 days ago. Content: https://www.darkoperator.com/blog/2026/11/2/cwdl3e3gk4d6uiyor7ack9sdzvqvjj Published: 2026 11 02 10:00:00 Received: 2026 11 05 17:16:55 Feed: Blog Source: Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Breach of Confidence: 02 November 2026 - published 5 days ago. Content: Spent Sunday assembling a bookshelf and finished with one screw left over. I’ve decided it’s decorative. Security teams will recognise the approach. Here’s what caught my eye this week. Staffordshire Police Deliver Post to the Wrong Person Staffordshire Police have been reprimanded (no fine, just a stern word) by the ICO after putting a domesti... https://javvadmalik.com/2026/11/02/breach-of-confidence-02-november-2026/ Published: 2026 11 02 10:00:00 Received: 2026 11 05 17:15:38 Feed: J4vv4D Source: J4vv4D Category: Cyber Security Topic: Cyber Security |
|
Article: Hundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake Features - published 5 days ago. Content: https://www.wired.com/story/hundreds-of-mundane-ai-apps-are-hiding-abusive-deepfake-features/ Published: 2026 11 02 10:00:00 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: Securing Internet-Critical Software: How We Could Have Backdoored Bash - published 5 days ago. Content: (May 2026) TL;DR: an email address like atouch${IFS}/tmp/savane-rce-proof@attacker.example gave any registered user code execution on its backend. From there, we made our account a superuser, impersonated Bash’s maintainer, and confirmed we could add an SSH key with push access to the upstream Bash repository. An unpatched kernel gave us root access and acc... https://www.reddit.com/r/netsec/comments/1xlsxqk/securing_internetcritical_software_how_we_could/ Published: 2026 11 02 09:43:15 Received: 2026 11 05 17:18:08 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: Remote code execution on Linux systems with multipath TCP - published 5 days ago. Content: submitted by /u/lucidsparrow982 [link] [comments] https://www.reddit.com/r/netsec/comments/1xlsqor/remote_code_execution_on_linux_systems_with/ Published: 2026 11 02 09:30:42 Received: 2026 11 05 17:18:08 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: WordPress pingback and Brotli RCE - published 5 days ago. Content: submitted by /u/adrian_rt [link] [comments] https://www.reddit.com/r/netsec/comments/1xlsgc8/wordpress_pingback_and_brotli_rce/ Published: 2026 11 02 09:11:50 Received: 2026 11 05 17:18:08 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: US Military Probes Freezer Failures, After French Hack - published 5 days ago. Content: https://www.silicon.co.uk/cybersecurity/military-freezer-probe-632115 Published: 2026 11 02 08:30:19 Received: 2026 11 05 17:01:05 Feed: Silicon UK – Security Source: Silicon UK Category: News Topic: Cyber Security |
|
|
Article: Apache Struts2 Core Arbitrary Code Execution via OGNL Sandbox Escape - published 6 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/7 Published: 2026 11 02 06:10:55 Received: 2026 11 05 17:12:34 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
Article: Apache Struts2 Core TokenHelper Token Cryptographic Timing Side-Channel - published 6 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/6 Published: 2026 11 02 06:10:54 Received: 2026 11 05 17:12:34 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: Apache Struts2 Spring Plugin Uses a Previously Closed Resource - published 6 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/5 Published: 2026 11 02 06:10:52 Received: 2026 11 05 17:12:34 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: Apache Struts2 Core Integer Overflow - published 6 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/4 Published: 2026 11 02 06:10:51 Received: 2026 11 05 17:12:34 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
Article: Apache Struts2 Core Cross-Origin Protection Exemption Miskeyed to a Deployment-Wide Path - published 6 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/3 Published: 2026 11 02 06:10:50 Received: 2026 11 05 17:12:34 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: Apache Struts2 REST Plugin Fails to Properly Parse Chunked Requests - published 6 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/2 Published: 2026 11 02 06:10:48 Received: 2026 11 05 17:12:34 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: Apache Struts2 REST Plugin Untrimmed `Accept` Header Tokens Break Content Negation Fallback - published 6 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/1 Published: 2026 11 02 06:10:47 Received: 2026 11 05 17:12:35 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
Article: Apache Struts2 JSON Plugin Insecure Deserialisation -- Object Deserialisation Element-Count Limit Bypass - published 6 days ago. Content: https://seclists.org/fulldisclosure/2026/Nov/0 Published: 2026 11 02 06:10:46 Received: 2026 11 05 17:12:35 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: How Digital Mapping Supports Operations, Safety and ROI - published 6 days ago. Content: How digital mapping supports operations, safety and ROI across large facilities — beyond security. https://www.securitymagazine.com/articles/102639-how-digital-mapping-supports-operations-safety-and-roi Published: 2026 11 02 06:00:00 Received: 2026 11 05 17:01:49 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
|
Article: New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value - published 6 days ago. Content: https://thehackernews.com/2026/11/new-volta-infostealer-uses-claude.html Published: 2026 11 02 05:51:07 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Investigating three incidents in our evaluations - published 6 days ago. Content: submitted by /u/fagnerbrack [link] [comments] https://www.reddit.com/r/netsec/comments/1xlnvfe/investigating_three_incidents_in_our_evaluations/ Published: 2026 11 02 04:32:13 Received: 2026 11 05 17:18:08 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: ISC Stormcast For Monday, November 2nd, 2026 https://isc.sans.edu/podcastdetail/10160, (Mon, Nov 2nd) - published 6 days ago. Content: https://isc.sans.edu/diary/rss/33480 Published: 2026 11 02 02:00:03 Received: 2026 11 05 17:12:30 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
Article: /r/netsec's Q4 2026 Information Security Hiring Thread - published 6 days ago. Content: Overview If you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company. We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing thei... https://www.reddit.com/r/netsec/comments/1xl8pd3/rnetsecs_q4_2026_information_security_hiring/ Published: 2026 11 01 17:19:31 Received: 2026 11 05 17:18:07 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: r/netsec monthly discussion & tool thread - published 6 days ago. Content: Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links. Rules & Guidelines Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary. Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will... https://www.reddit.com/r/netsec/comments/1xl4ghe/rnetsec_monthly_discussion_tool_thread/ Published: 2026 11 01 14:29:24 Received: 2026 11 05 17:18:06 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: Mirage2FA stole 4,561 M365 session cookies despite MFA via AiTM proxy (CVE-2026-69836 CVSS 10.0) : detection rules and WHfB/Cloud Kerberos Trust hardening guide - published 6 days ago. Content: submitted by /u/doit4everyone [link] [comments] https://www.reddit.com/r/netsec/comments/1xkzjb0/mirage2fa_stole_4561_m365_session_cookies_despite/ Published: 2026 11 01 10:15:16 Received: 2026 11 05 17:18:09 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: OneNote File Extraction, (Sun, Nov 1st) - published 6 days ago. Content: Recently, I had to extract embedded files from a set of OneNote files (extension .one). https://isc.sans.edu/diary/rss/33478 Published: 2026 11 01 09:12:23 Received: 2026 11 05 17:12:31 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key - published 6 days ago. Content: https://thehackernews.com/2026/11/critical-lxd-and-microcloud-flaw-cvss.html Published: 2026 11 01 08:51:31 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Weekly Update 528: Reading AI-generated Code & the Economics of Solar - published 6 days ago. Content: Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSiteBy pure timing coincidence, the Proton CEO's AI @ Proton, Engineering Manifesto made headlines around the same time as this week's video. The guy's management style and choice of language have really rubbed a lot... https://www.troyhunt.com/weekly-update-528/ Published: 2026 11 01 07:35:23 Received: 2026 11 05 17:15:52 Feed: Troy Hunt's Blog Source: Troy Hunt's Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script - published 7 days ago. Content: https://thehackernews.com/2026/11/hackers-steal-about-27-million-from.html Published: 2026 11 01 07:25:40 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist - published 7 days ago. Content: https://thehackernews.com/2026/11/fbi-links-north-koreas-tradertraitor-to.html Published: 2026 11 01 07:03:00 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection - published 7 days ago. Content: https://thehackernews.com/2026/11/netamloader-malware-targets-government.html Published: 2026 11 01 07:02:58 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Overview of Content Published in October - published 7 days ago. Content: Here is an overview of content I published in October: Blog posts: Update: onedump.py Version 0.0.3 Quickpost: Uranium Glass A Ring Tone That I Cannot Hear – Twenty Years Later Quickpost: Ghost USB-C Quickpost: WT20 Welding Electrodes & Radiation SANS ISC Diary entries: YARA-X 1.21.0 Release User Agent Strings Curiosities Orphaned VBA Projects In... https://blog.didierstevens.com/2026/11/01/overview-of-content-published-in-october-12/ Published: 2026 11 01 00:00:00 Received: 2026 11 05 17:15:10 Feed: Didier Stevens Source: Didier Stevens Category: Cyber Security Topic: Cyber Security |
|
|
Article: Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data - published 7 days ago. Content: https://thehackernews.com/2026/10/chainalysis-confirms-intrusion-into.html Published: 2026 10 31 12:01:56 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims - published 7 days ago. Content: https://www.wired.com/story/kernel-panic-volta-autodoxer-ai-infostealer-malware/ Published: 2026 10 31 12:00:00 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
|
Article: Quickpost: WT20 Welding Electrodes & Radiation - published 7 days ago. Content: I found another material that I can buy freely and test with my Radiacode 103 radiation detector: WT20 Welding Electrodes. These are tungsten welding electrodes with 2% thorium. Thorium is a little bit radioactive and shows up in the spectrum that I measured over a period of 3 hours with a Radiacode 103 device: Quickpost info ... https://blog.didierstevens.com/2026/10/31/quickpost-wt20-welding-electrodes-radiation/ Published: 2026 10 31 11:31:22 Received: 2026 11 05 17:15:10 Feed: Didier Stevens Source: Didier Stevens Category: Cyber Security Topic: Cyber Security |
|
Article: Wireshark 5.0.0rc1 Release, (Sat, Oct 31st) - published 7 days ago. Content: Wireshark Release Candidate 5.0.0 was published: soon we can expect a new major version of Wireshark. https://isc.sans.edu/diary/rss/33476 Published: 2026 10 31 10:52:53 Received: 2026 11 05 17:12:31 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: YARA-X 1.22.1 Release, (Sat, Oct 31st) - published 7 days ago. Content: YARA-X's 1.22.1 is a bugfix version, it brings 2 bugfixes. https://isc.sans.edu/diary/rss/33474 Published: 2026 10 31 10:48:17 Received: 2026 11 05 17:12:31 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access - published 7 days ago. Content: https://thehackernews.com/2026/10/attackers-chain-three-ivanti-connect.html Published: 2026 10 31 08:27:43 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats - published 8 days ago. Content: https://thehackernews.com/2026/10/a-shared-chatgpt-link-could-run.html Published: 2026 10 31 05:33:41 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38% - published 8 days ago. Content: https://thehackernews.com/2026/10/cloudflare-reports-182-million-network.html Published: 2026 10 31 04:56:12 Received: 2026 11 05 17:16:35 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Quickpost: Ghost USB-C - published 8 days ago. Content: You’ve probably encountered devices that are powered via a USB-C connector, but that don’t work when you connect them to a USB-C charger or powerbank. They only work with a USB-A to USB-C cable, not with a USB-C to USB-C cable. I used to encounter such devices regularly a couple of years ago, but far less nowadays. Until we went on holiday this summer, a... https://blog.didierstevens.com/2026/10/31/quickpost-ghost-usb-c/ Published: 2026 10 31 00:00:00 Received: 2026 11 05 17:15:10 Feed: Didier Stevens Source: Didier Stevens Category: Cyber Security Topic: Cyber Security |
|
Article: Rewriting Copyright Law for Generative AI Would Hurt Everyone - published 8 days ago. Content: https://www.eff.org/deeplinks/2026/10/rewriting-copyright-law-generative-ai-would-hurt-everyone Published: 2026 10 30 23:42:45 Received: 2026 11 05 17:19:26 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: My Fugly TV - published 8 days ago. Content: Innovation is great, things get better, smarter, sleeker, cleaner, and overall improve your experience until they don’t. When I was a young lad, we had a TV (a colour one mind you, before you make some jokes about my age which is increasingly becoming a sensitive topic for me), but it had big ugly chunky buttons on it. I’m sure some hipster will say it’... https://javvadmalik.com/2026/10/30/my-fugly-tv/ Published: 2026 10 30 23:05:53 Received: 2026 11 05 17:15:38 Feed: J4vv4D Source: J4vv4D Category: Cyber Security Topic: Cyber Security |
|
|
Article: Oracle Security Alert for CVE-2026-114820
- published 8 days ago. Content: https://www.oracle.com/security-alerts/alert-cve-2026-114820.html Published: 2026 10 30 23:00:00 Received: 2026 11 05 17:13:59 Feed: Oracle Security Alerts Source: Oracle Security Alerts Category: Alerts Topic: Vulnerabilities |
|
Article: Friday Squid Blogging: Bigfin Squid Off California Coast - published 8 days ago. Content: Neat video: The sighting, announced September 2, marks the first time anyone has spotted a live bigfin squid, which belongs to the Magnapinna genus, in the northeastern Pacific Ocean. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy. ... https://www.schneier.com/blog/archives/2026/10/friday-squid-blogging-bigfin-squid-off-california-coast.html Published: 2026 10 30 21:04:36 Received: 2026 11 05 17:18:10 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Why VPNs Are Worth Defending - published 8 days ago. Content: https://www.eff.org/deeplinks/2026/10/why-vpns-are-worth-defending Published: 2026 10 30 20:55:24 Received: 2026 11 05 17:19:26 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices - published 8 days ago. Content: https://www.wired.com/story/trojan-malware-targets-thousands-of-anthropic-claude-developer-systems/ Published: 2026 10 30 20:38:46 Received: 2026 11 05 17:00:33 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
Article: Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see - published 8 days ago. Content: A n0n ransomware operator tried to break into 23 organizations across 14 countries, but couldn't secure its own front door, leaving its server exposed with all of its methods on view. The criminals used a mix of new (AI) and old (stolen credentials) tooling during their data-theft spree, and in some cases not only stole and encrypted files, but also deleted... https://www.theregister.com/security/2026/10/30/crim-spent-7k-on-ai-services-in-extortion-attacks-then-left-evidence-for-all-to-see/5306754 Published: 2026 10 30 19:37:12 Received: 2026 11 05 17:19:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Vulnerabilities in PHP Affecting Cisco Products: October 2026 - published 8 days ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Vulnerabilities%20in%20PHP%20Affecting%20Cisco%20Products:%20%20October%202026%26vs_k=1 Published: 2026 10 30 19:24:31 Received: 2026 11 05 17:12:49 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
Article: North Korea May Be Behind the $6.3B Binance Hack - published 8 days ago. Content: Security expert insight on the $6.3 billion cryptocurrency heist. https://www.securitymagazine.com/articles/102719-north-korea-may-be-behind-the-63b-binance-hack Published: 2026 10 30 18:32:00 Received: 2026 11 05 17:01:49 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
|
Article: Train for the Gray Zone: Security Awareness Needs a Simulator - published 8 days ago. Content: Policies tell employees what the rules are. Scenarios and near misses teach them what the rules are for. https://www.securitymagazine.com/articles/102707-train-for-the-gray-zone-security-awareness-needs-a-simulator Published: 2026 10 30 17:00:00 Received: 2026 11 05 17:01:49 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
Article: Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide - published 8 days ago. Content: https://thehackernews.com/2026/10/chinese-hackers-use-ai-powered-artex-to.html Published: 2026 10 30 16:58:44 Received: 2026 11 05 17:16:36 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: GM cracks the petty cash box for multistate driver tracking settlement - published 8 days ago. Content: General Motors is taking what looks like a light slap on the wrist from a coalition of 35 states and the District of Columbia after agreeing to settle allegations that it collected drivers' data without proper consent and sold it to data brokers that supplied insurance companies. The Washington state AG's office said on Thursday that GM had reached a $220 m... https://www.theregister.com/security/2026/10/30/gm-cracks-the-petty-cash-box-for-multistate-driver-tracking-settlement/5306721 Published: 2026 10 30 16:48:37 Received: 2026 11 05 17:19:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Anthropic: That Claude Code extension compromise… couldn't be us - published 8 days ago. Content: Anthropic has denied allegations that a malicious version of the official Claude Code extension published to Cursor’s marketplace was linked to any kind of compromise of its own systems. The company was forced to issue a statement after prominent figures in the cybersecurity industry alleged that the extension, which infected up to 5,000 developers, was upl... https://www.theregister.com/cyber-crime/2026/10/30/anthropic-that-claude-code-extension-compromise-couldnt-be-us/5306682 Published: 2026 10 30 16:27:00 Received: 2026 11 05 17:19:16 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Click to Open Code Editor