Vulnerabilities
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
UEFI bootkit BlackX exploits Microsoft's lack of clarity around Secure Boot protections.
Latest
Vulnerabilities
Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access
Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization controls and gain root access to a susceptible device. The…
CrowdStrike moves to acquire Fiddler and Dreadnode, adding AI observability and testing to its security platform
CrowdStrike is extending its platform to watch, test and explain autonomous AI agents, as enterprises face behavior-based risks that conventional security tools cannot catch.
Cloud & Identity
Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges
Google on Monday warned that threat actors are hijacking enterprise access to Large Language Models (LLMs) to fraudulently leverage expensive computing resources and AI services. The tactic is called LLMjacking, a form…
9 Cyber Awareness Tips That Actually Match Today's Maze of Threats
Practical guidance on safer search, stronger login security, better executive protection, and other habits can reduce enterprise risk.
Cloud & Identity
LLMjacking Emerges as Thriving Cybercriminal Enterprise
Cybercriminals have turned reselling cloud access to LLMs into a lucrative business model, with some victims paying as much as $1 million in resource consumption before access was revoked.
Malware
cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
An attacker broke into the update system of the cPGuard security tool on November 2 and used it to send a malicious script to customers' Linux servers. The script installed a backdoor and collected password hashes and…
Vulnerabilities
Progress Software security advisory (AV26-1116)
Serial number: AV26-1116Date: November 3, 2026 As of October 29, 2026, Progress Software is affected by a vulnerability in the following product: WS_FTP Server Prior to 2024.0.6 Prior to 2025.0.3 The Cyber Centre…
Vulnerabilities
[Control systems] Siemens security advisory (AV26-802) – Update 1
Serial Number: AV26-802Date: August 11, 2026Updated: November 3, 2026 As of August 11, 2026, Siemens is affected by vulnerabilities in the following products: Desigo DXR2 Prior to V01.21.233.16-7862 Desigo PXC3 Prior to…
Vulnerabilities
PostgreSQL security advisory (AV26-1115)
Serial number: AV26-1115Date: November 3, 2026 As of November 2, 2026, PostgreSQL is affected by vulnerabilities in the following product: psqlODBC Prior to 18.00.0006 The Cyber Centre encourages users and…
Ransomware
3AM Affiliate Embraces AI-Like Loops in European School Attack
Evidence suggests a model may have generated and revised commands during the ransom gang's breach, though researchers stopped short of claiming full automation.
UK meat industry hit by cyber-attack which targeted European supermarket freezers
Supermarkets in countries including Ireland, Sweden and Belgium reported fridges being hiked in temperature on Monday.
Ransomware
Britain on notice: AI-powered ransomware attacks to arrive by 2028
Cyber agency warns critical infrastructure is a likely target as chief urges bosses to stop doing 'tech on the cheap'
UK abattoirs caught up in cyber attack against European supermarkets
Refrigerators at three meat processors in the UK were hit by cyber attacks amid warnings from the UK’s National Cyber Security Centre to protect internet-facing industrial devices
Zero-day
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-119977 WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition…
Vulnerabilities
Subnet Solutions PowerSYSTEM Center
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute unauthorized SQL commands and gain access to unauthorized resources. The following versions of Subnet Solutions…
Data Breaches
Cyber chief: UK facing AI-powered attacks on critical infrastructure within two years
The NCSC warns that ‘tech on the cheap’ has left UK organisations exposed to AI uncovering and exploiting longstanding cyber security weaknesses and calls for urgent investment in resilience.
Artificial intelligence and cyber intrusion
An NCSC assessment that examines current AI-enabled threat trends and projections of the threat landscape to 2028.
Vulnerabilities
Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
Fixed kernels for a use-after-free vulnerability in the Linux kernel's IPv4 TCP code are now available for Red Hat Enterprise Linux 8, 9, and 10, while Ubuntu's fixes for its three newest long-term-support releases…
Malware
Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware
A Russia-aligned threat actor known as Gorbag has been observed using simple information stealer malware in attacks targeting Ukrainian organizations. "Active since at least February 2025, the group has focused…
Malware
Gorbag: Orcs at the border harvesting intelligence from Ukraine
ESET researchers uncover Gorbag, a Russia-aligned group using simple infostealers to harvest data from Ukrainian organizations near the front line
Vulnerabilities
Are Freezers Being Hacked? Europe and the U.S. Military Investigate.
A wave of disruptions at grocery stores, which some officials blame on cyberattacks, highlights the vulnerability of supply chains. Shops across Europe were affected again on Monday.
North Korea denies being behind record $6.3bn Binance hack
US government agencies and cyber analysts have blamed Pyongyang for the record-breaking heist.
Vulnerabilities
Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets
BTCPay Server, a self-hosted, open-source cryptocurrency payment processor, has urged users to install the latest version of its software in response to reports of Bitcoin and Litecoin being stolen from hot wallets on…
Ransomware
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
Synology is urging customers to update the DiskStation Manager (DSM) software powering its Network Attached Storage (NAS) devices following ransomware attacks. The Taiwanese vendor said it observed threat actors…
New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food
Attackers remotely changed the settings on refrigeration controls at supermarkets in Belgium, Sweden, Estonia and other European countries overnight into Monday, November 2, warming fridges and freezers. No chain…
