US gov IT worker pleads guilty to sending Top Secret files to Ethiopia
Help desk technician agrees to minimum 10-year jail term after being caught copying files for more than 2 years
Latest
Vulnerabilities
Zyxel security advisory (AV26-1114) – Update 1
Serial number: AV26-1114Date: November 3, 2026Updated: November 4, 2026 As of November 3, 2026, Zyxel is affected by vulnerabilities in the following products: Zyxel GS1900 series switches Multiple versions and models…
Vulnerabilities
HPE security advisory (AV26-1119)
Serial number: AV26-1119Date: November 4, 2026 As of November 3, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following products: HPE Networking Fabric Composer (AFC) Prior to 7.3.5 Prior…
Vulnerabilities
Google security advisory (AV26-1118)
Serial number: AV26-1118Date: November 4, 2026 As of November 3, 2026, Google is affected by vulnerabilities in the following product: Stable Channel Chrome for Desktop Versions prior to 157.0.8103.38/.39 (Windows/Mac)…
APT & Nation-state
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
The Russia-linked threat actor known as APT29 is presumed to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving…
Incidents Move Too Fast for Pen & Paper
Organizations may not be ready for completely autonomous communication processes, but there are places where automating information updates would alleviate pressure.
Fridge hacks also hit French blood banks
The incident appears to be connected to a recent wave of cyberattacks on supermarket refrigerators across Europe.
Vulnerabilities
The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)
One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. This was a simple vulnerability in a CGI-bin script used to send e-mail. The vulnerability was pretty straightforward: Adding…
Vulnerabilities
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app's server by uploading a crafted file if the app processes uploads using ImageMagick. The Rails project…
Zero-day
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2024-27834 Apple Multiple Products Improper Authentication Vulnerability This type…
Mastercard meets ‘responsibility’ through SME cyber security training
Card giant is offering free cyber security training to millions of SMEs in the UK through its SME Academy
Cyberattack on French plasma stores is enough to make your blood boil
Attackers reportedly set cold-room controls to 110°C, but safeguards prevented stock losses
Vulnerabilities
Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory
Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including dom0. Dom0 is the VM that, by default, has full permissions and manages…
Malware
China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method as part of a…
Malware
SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware
ESET Research analyzes a DNS hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method
Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure
Russian authorities have arrested three suspected members of a threat group known as VasyGrek and dismantled its criminal infrastructure. Also known as Fluffy Wolf, the threat actor has a history of targeting Russian…
Vulnerabilities
Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin. The flaw, CVE-2026-58868, affects Android 14 through 17. Phones get…
Zero-day
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The…
ISC Stormcast For Wednesday, November 4th, 2026 https://isc.sans.edu/podcastdetail/10164, (Wed, Nov 4th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Data Breaches
Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach
An unknown operator appears to have exfiltrated SQL Server backups from the Philippine Overseas Employment Administration in under a half hour.
Phishing
Phishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification Gap
The new YubiID service bridges identity verification with credential enrollment and recovery across existing identity platforms, closing a phishing-resistant authentication gap. Plus: post-quantum YubiKey beta.
Fresh European Fridge Attacks Put Cold-Chain Security in Focus
Beyond food storage, the same combination of Internet connectivity, remote access, and inadequate security practices can put temperature-controlled infrastructure across other critical sectors at risk.
