Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps
Within minutes of a ceasefire lifting in Kherson, Ukraine’s citizens were pummelled with threatening notifications
Latest
Vulnerabilities
Red Hat security advisory (AV26-1111)
Serial number: AV26-1111Date: November 2, 2026 As of October 30, 2026, Red Hat is affected by vulnerabilities in the following products: Red Hat Build of Keycloak All version Red Hat Enterprise Linux 10 All version Red…
Vulnerabilities
Dell security advisory (AV26-1110)
Serial number: AV26-1110Date: November 2, 2026 As of October 30, 2026, Dell is affected by vulnerabilities in the following products: OpenManage Enterprise Prior to 4.8.0 PowerProtect Data Domain Prior to 7.13.1.90…
ICS / OT
Cold chain cyber attacks highlight lack of OT security in retail
A series of cyber attacks targeting supermarket cold chain equipment has highlighted a lack of attention paid to the resilience of operational technology
Vulnerabilities
Google security advisory (AV26-1109)
Serial number: AV26-1109Date: November 2, 2026 As of October 29, 2026, Google is affected by vulnerabilities in the following product: Stable Channel Chrome for Desktop Versions prior to 156.0.8078.79/.80 (Windows/Mac)…
A fresh wave of cyberattacks has hit Europe’s supermarket refrigerators, destroying food across countries
This is the second wave of cyberattacks to hit supermarket refrigerators in a month, spoiling food and disrupting supplies.
APT & Nation-state
PapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South Asia
Organizations in the region face growing cyberattacks from the known India-linked threat group, which leverages legitimate Windows functionality in three distinct attack chains.
Frozen part II: Hackers remotely defrost produce in Euro supermarkets ... again
Let it go (bad): Dozens of stores report mass food wastage as managers start their week in puddles
Vulnerabilities
Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week. Langflow is an open-source tool for building AI agents and workflows, and its…
FBI pins $6.3B Binance crypto heist on North Korean hackers
Exchange scrambles to replace stolen funds as customers withdraw billions and hackers get busy laundering their haul
Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy
Forty percent of security teams now use AI every day, and another 56% are testing it. Only 4% have no plans to adopt it, according to Prophet Security's State of AI in Security Operations 2026 survey of more than 250…
Europe’s supermarkets hit by new wave of cyberattacks targeting fridges
Dozens of store refrigerators across five countries saw their temperature raised remotely, following similar attacks that hit France last month.
Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certificate Services (AD CS) settings to obtain login…
APT & Nation-state
Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
Cybersecurity researchers have disclosed details of a cyber espionage campaign specifically targeting Linux infrastructure associated with government entities and state-affiliated infrastructure. The activity, observed…
When confusion reigns, trusted vendors must guide their SMB customers
SMBs need guided onboarding and supervised protection to optimize their investments
Binance users withdraw $3.6bn after largest-ever crypto hack
The exchange froze transactions following the incident which has been linked to a North Korean group.
Belfast journalists subjected to unlawful spying cannot claim costs over PSNI failures
The Court of Appeal finds that the Investigatory Powers Tribunal has no power to award costs against Northern Ireland police despite ‘unreasonable conduct’ by the force
Malware
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim's stolen data by their monetization value…
ISC Stormcast For Monday, November 2nd, 2026 https://isc.sans.edu/podcastdetail/10160, (Mon, Nov 2nd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
OneNote File Extraction, (Sun, Nov 1st)
Recently, I had to extract embedded files from a set of OneNote files (extension .one).
Vulnerabilities
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker had to reach their HTTPS API over the network and have the…
Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
Malicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded…
FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist
The U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets from Binance to TraderTraitor, a North Korea-aligned elite hacking group also tracked as Jade…
Malware
NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
Cybersecurity researchers have disclosed details of what has been described as a "highly sophisticated infection chain" targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted…
Cloud & Identity
A gift to scammers: why you should probably keep your birthday a secret
Using a fake DOB or leaving the field blank when making an online account can offer protection from identity theftYou get a call from your bank saying there has been suspicious activity on your account. They read out…
How Binance’s $6.3 Billion Hack Went Down
A war room. A global conference call. A founder who live-posted about the largest crypto heist in history. Inside a frantic 24 hours at the world’s biggest crypto exchange.
