Norway's aid agency pwned and all users' data is stolen
Norad said it cannot be sure that the details of those in 'conflict areas and authoritarian states' are safe or not
Latest
Cloud & Identity
The Agent Smith Dilemma: Governing Agentic Identities
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
CISO Conversations: Ryan Davis – The Unknown Is Where Security Meets Reality
Ryan Davis went from hacking his school’s network to running security at New Charter Technologies. What worries him now is shadow AI.
Zero-day
Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day
Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests.
Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes
The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine.
5 Active Cyber Threats That Put US Enterprises at Risk in October 2026
October 2026 brought another wave of cyber threats targeting US businesses, with attackers exploiting trusted platforms, legitimate authentication processes, and everyday business workflows. For enterprises, these…
OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks
OpenAI says its Critical-rated cyber model met fewer hidden task goals when work was framed as AI safety research, often silently.
Vulnerabilities
GhostMap Android flaw lets malicious app trigger persistent boot loop
Attackers can force Android devices into a continuous boot loop using a specially crafted app that requires no permissions and only needs to be installed. [...]
Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content
Apple has revealed that it plans to start checking public iCloud links for harmful content starting with iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3. The change specifically applies to scenarios where users…
Malware
CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access
The Indian Computer Emergency Response Team (CERT-In) has disclosed that an artificial intelligence (AI)-assisted threat actor it tracks as Crafty Falcon is targeting organizations in the Banking, Financial Services…
Zero-day
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found. The exploit lets anyone who can reach a…
Zero-day
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog…
Want to Rent an Internet Address at the White House?
Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today. One of…
Cloud & Identity
SailPoint: Anarchy reigns over enterprise agentic AI
SailPoint research has found 89% of EMEA enterprises deploy AI agents, but 99% lack the identity security tools to govern them
What Democratic control of Congress means for cybersecurity
There’s a lame-duck session before Dems take over, but the leaders of the homeland security panels are already teeing up their agendas.
Vulnerabilities
Hackers exploited iOS and Android flaws to infect phones
Researchers say group may have been Kremlin-sponsored in search of diplomatic targets.
Cloud & Identity
Apple turns iCloud into spy cloud, will start looking at public share links
Content shared with anyone who has the URL will be scanned for 'harmful content,' though the iMaker hasn't defined that term
Vulnerabilities
Critical Rails Bug Threatens to Derail Vulnerable Servers
An attacker could write arbitrary files and read sensitive files via images uploaded to the Rails Active Storage ImageMagick integration, possibly positioning a threat actor for lateral movement.
Malware
Vercel rolls out new protection against stolen session cookie attacks
Vercel is gradually rolling out Device Bound Session Credentials (DBSC) on its platform as a key defense against information stealer malware. [...]
Zero-day
Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials. [...]
Vulnerabilities
Hackers stole DreamHost customer files and inboxes during months-long attack
The web host said hackers exploited a vulnerability to access customer emails and files during a "deliberate attack."
Vulnerabilities
Android security advisory – November 2026 monthly rollup (AV26-1128)
Serial number: AV26-1128Date: Novembre 4, 2026 As of November 2, 2026, Android published a security bulletin to address vulnerabilities affecting Android devices. The Cyber Centre encourages users and administrators to…
Officials extradite Canadian man to US for alleged cryptomining spree
Ryan Roach and his alleged co-conspirator, Mathiew Stubbings, are accused of compromising U.S. universities’ computers and taking over processing power to mine for cryptocurrency.
Vulnerabilities
Cisco security advisory (AV26-1127)
Serial number: AV26-1127Date: November 4, 2026 As of November 4, 2026, Cisco is affected by vulnerabilities in the following product: Cisco Unified Computing System (USC) Central Software Prior to 2.1(2c) The Cyber…
Vulnerabilities
GitHub security advisory (AV26-1126)
Serial number: AV26-1126Date: November 4, 2026 As of November 3, 2026, GitHub is affected by vulnerabilities in the following product: Enterprise Server 3.19.0 Prior to 3.19.14 3.20.0 Prior to 3.20.10 3.21.0 Prior to…
Vulnerabilities
WatchGuard security advisory (AV26-1125)
Serial number: AV26-1125Date: November 4, 2026 As of November 4, 2026, WatchGuard is affected by vulnerabilities in the following product: AuthPoint Authentication Gateway Prior to 7.6.0 The Cyber Centre encourages…
Vulnerabilities
SolarWinds security advisory (AV26-1124)
Serial number: AV26-1124Date: November 4, 2026 As of November 3, 2026, SolarWinds is affected by vulnerabilities in the following product: Dameware Prior to or equal to 2026.3 The Cyber Centre encourages users and…
Vulnerabilities
Docker security advisory (AV26-1123)
Serial number: AV26-1123Date: November 4, 2026 As of November 3, 2026, Docker is affected by vulnerabilities in the following products: Docker Buildx Prior to 0.37.2 Docker Desktop Prior to 4.98.0 The Cyber Centre…
Vulnerabilities
MongoDB security advisory (AV26-1122)
Serial number: AV26-1122Date: November 4, 2026 As of November 3, 2026, MongoDB is affected by vulnerabilities in the following product: C Driver Prior to 1.30.15 Prior to 2.5.8 The Cyber Centre encourages users and…