access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
Mit KI-Agenten: OpenAI will in Linux-System fast 1.000 Root-Lücken gefunden haben
Laut OpenAI haben KI-Agenten bei internen Tests 948 Root-Lücken in einem Linux-System aufgedeckt – und obendrein passende Patches entwickelt. First seen on golem.de Jump to article: www.golem.de/news/mit-ki-agenten-openai-will-in-linux-system-fast-1-000-root-luecken-gefunden-haben-2611-214884.html also interesting: AI Finds What Humans Missed: OpenAI’s o3 Spots Linux Zero-Day First AI-Powered Ransomware PromptLock Targets Windows, Linux and macOS Claude Mythos ist der Hype gerechtfertigt? OpenAI’s…
-
Standard auf Entra-Rechnern, Opt-out per Gruppenrichtlinie – Windows 11 aktiviert die Einstellungssicherung selbst
Tags: windowsFirst seen on security-insider.de Jump to article: www.security-insider.de/windows-11-aktiviert-die-einstellungssicherung-selbst-a-15208b998953a6a696744c2710646a46/ also interesting: Microsoft kündigt Patches für kritische IE- und Windows-Lücken an Facebook ads for Windows desktop themes push info-stealing malware Neue VanHelsing-Ransomware breitet sich rasant aus WinRAR MotW bypass flaw fixed, update ASAP (CVE-2025-31334)
-
GhostMap Bug Leaves Android Phones Stuck in Reboot Loop
Bitdefender warns that unfixed GhostMap bug could force users to factory reset their device First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ghostmap-bug-android-phones-stuck/ also interesting: Amnesty Finds Cellebrite’s Zero-Day Used to Unlock Serbian Activist’s Android Phone Serbian student’s Android phone compromised by exploit from Cellebrite LANDFALL Spyware Targeted Samsung Galaxy Phones via Malicious Images Google expands…
-
5 Active Cyber Threats That Put US Enterprises at Risk in October 2026
Tags: authentication, breach, business, cyber, data, exploit, finance, risk, security-incident, threatOctober 2026 brought another wave of cyber threats targeting US businesses, with attackers exploiting trusted platforms, legitimate authentication processes, and everyday business workflows. For enterprises, these campaigns raise the stakes beyond individual security incidents, increasing the risk of financial losses, data breaches, and costly operational disruption.Below, we examine five First seen on thehackernews.com Jump to…
-
Why waiting for quantum computers to arrive could leave your security exposed
By Tim Hudson, President, OpenSSL Corporation For organisations preparing for post-quantum cryptography, one of the biggest risks is assuming they can wait until a sufficiently powerful quantum computer arrives before taking action. Whilst it’s understandable to focus on the point when quantum computers might be able to break today’s cryptography, nobody can predict exactly when…
-
Google puts new limits on AI agents that hunt threats and fix vulnerabilities
Google Cloud is adding new controls to CodeMender, its AI tool for finding and fixing software vulnerabilities, allowing businesses to isolate attack simulations and target … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/google-cloud-ai-agents-security-controls/ also interesting: Applying Tenable’s Risk-based Vulnerability Management to the Australian Cyber Security Centre’s Essential Eight What to look for in a…
-
Ukraine fires two senior security officials amid corruption probe into scam call centers
Ukraine’s security service has fired two senior officials amid a corruption investigation into an alleged criminal network that bribed law enforcement officers to protect fraudulent call centers and other illegal operations. First seen on therecord.media Jump to article: therecord.media/ukraine-fires-senior-security-officials-amid-scam-center-corruption-investigation also interesting: Top 10 Cybersecurity Predictions for 2026 9 things CISOs need know about the dark…
-
(g+) KI in der Softwareentwicklung: Warum Prompts Coding-Agenten nicht absichern
KI-Agenten können Code ändern und Systeme aufrufen. Warum Verbote im Prompt nicht reichen und welche technischen Grenzen ihren Zugriff absichern. First seen on golem.de Jump to article: www.golem.de/news/ki-in-der-softwareentwicklung-warum-prompts-coding-agenten-nicht-absichern-2611-214799.html also interesting: Privacy Roundup: Week 3 of Year 2025 7 top cybersecurity projects for 2025 What is SIEM? Improving security posture through event log data Cybersecurity Snapshot:…
-
Mitarbeitende nutzen KI an der IT vorbei – Shadow-AI bringt Software unter Zugzwang
First seen on security-insider.de Jump to article: www.security-insider.de/shadow-ai-schutzfunktionen-software-a-05934e6b3eb963acef9013721b71de31/ also interesting: AI supply chain threats loom, as security practices lag Google Launches Gemini 3.5 Flash Cyber to Find, Validate, and Patch Critical Vulnerabilities LibreOffice says ‘no AI’ is now a software feature Anthropic AI Model Attempts to Inject Malicious Code Into Software
-
NATS Air Traffic Control Failure Cost UK Economy £33m
Cyber Monitoring Centre report claims an IT failure at the UK’s NATS air traffic services provider cost over £30m First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/nats-air-traffic-control-fail-cost/ also interesting: Cybersecurity Snapshot: CISA Hands Down Cloud Security Directive, While Threat from North Korean IT Workers Gets the Spotlight Cybersecurity Snapshot: CISA Hands Down Cloud Security Directive,…
-
CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access
The Indian Computer Emergency Response Team (CERT-In) has disclosed that an artificial intelligence (AI)-assisted threat actor it tracks as Crafty Falcon is targeting organizations in the Banking, Financial Services, and Insurance (BFSI) sectors in the country.Describing the threat as active and ongoing, the activity involves the use of publicly-available AI-driven offensive security tools First seen…
-
Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content
Apple has revealed that it plans to start checking public iCloud links for harmful content starting with iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3.The change specifically applies to scenarios where users share iCloud content, such as photos in iCloud Photos or files in iCloud Drive, by sharing a link and making it accessible…
-
Hackers Spread Marsalek Infostealer Through Fake Game Downloads to Steal Browser Passwords and Cookies
Marsalek, a free malware-as-a-service (MaaS) platform that disguised infostealers as game cheats and utilities for Roblox, Fortnite, Counter-Strike 2, Minecraft, and Grim Dawn. It was active from mid-December 2025 to late May 2026. Researchers counted more than 1,560 registered accounts, over 400 malicious files and more than 29 distribution URLs. Its dashboard let users build…
-
Hackers Spread Marsalek Infostealer Through Fake Game Downloads to Steal Browser Passwords and Cookies
Marsalek, a free malware-as-a-service (MaaS) platform that disguised infostealers as game cheats and utilities for Roblox, Fortnite, Counter-Strike 2, Minecraft, and Grim Dawn. It was active from mid-December 2025 to late May 2026. Researchers counted more than 1,560 registered accounts, over 400 malicious files and more than 29 distribution URLs. Its dashboard let users build…
-
GhostMap Android flaw lets malicious app trigger persistent boot loop
Attackers can force Android devices into a continuous boot loop using a specially crafted app that requires no permissions and only needs to be installed. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ghostmap-android-flaw-lets-malicious-app-trigger-persistent-boot-loop/ also interesting: Privacy Roundup: Week 11 of Year 2025 Microsoft’s November 2025 Patch Tuesday Addresses 63 CVEs (CVE-2025-62215) UXSS Vulnerability in DuckDuckGo…
-
Russian APT29 Targets Mobile Users with Watering Hole Attacks
Russia-linked group APT29 targeted iOS and Android users through hijacked websites and a compromised analytics service. Sekoia says a large-scale watering hole campaign is going after iOS and Android users, and it links the campaign to APT29 (aka SVR group, Cozy Bear, Nobelium, BlueBravo, Midnight Blizzard, and The Dukes), the Russian group tied to the SVR foreign intelligence service. A watering hole…
-
The Smartest Part of a Home Camera Is Moving Off the Cloud
For most of the decade gone by, the >>smart<< aspect of smart camera systems resided on external hardware… First seen on hackread.com Jump to article: hackread.com/smartest-home-camera-moving-off-cloud/ also interesting: Verkada Agrees to $2.95M Civil Penalty With US FTC Cybersecurity Snapshot: Tenable Highlights Risks of AI Use in the Cloud, as UK’s NCSC Offers Tips for Post-Quantum…
-
Chainalysis warns all users hit in cyber breach involving ‘agentic’ techniques
Chainalysis, the blockchain analytics company, said Wednesday night that some information belonging to all its users, which its website says include those in the law enforcement and national security sectors, had been exposed in a cyberattack. First seen on therecord.media Jump to article: therecord.media/chainalysis-all-users-hit-by-agentic-cyberattack also interesting: 9 things CISOs need know about the dark web…
-
Hacker manipulieren Kühlanlagen: Warum veraltete OT-Systeme zum Sicherheitsrisiko werden
Cyberangriffe auf Supermärkte zeigen gravierende OT-Sicherheitslücken. Wie Netzwerksegmentierung, Virtual Patching und sichere Fernwartung schützen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/hacker-manipulieren-kuehlanlagen-warum-veraltete-ot-systeme-zum-sicherheitsrisiko-werden/a47006/ also interesting: WazirX Confirms INR Funds Secure Despite $230 Million Cyberattack Rhode Island suffers major cyberattack, exposing personal data of thousands Invisible C2″Š”, “Šthanks to AI-powered techniques Cybercrime Inc.: When hackers are better…
-
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
Zyxel GS1900 network switches that received the vendor’s earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found.The exploit lets anyone who can reach a switch’s web management interface run commands on it without logging in. Zyxel has released new firmware for 10 GS1900 models that…
-
Critical Citrix XenServer Flaw Allows Unauthenticated Attackers to Take Control of Virtualization Hosts
Citrix has released security updates for XenServer versions 8.4 and 9 to address a critical vulnerability. This flaw could allow an unauthenticated attacker on the management network to compromise virtualization hosts. The Cloud Software Group published a bulletin (CTX697256) on November 3, 2026, classifying the issue as Critical. The bulletin covers nine CVEs. Citrix XenServer…
-
Critical Citrix XenServer Flaw Allows Unauthenticated Attackers to Take Control of Virtualization Hosts
Citrix has released security updates for XenServer versions 8.4 and 9 to address a critical vulnerability. This flaw could allow an unauthenticated attacker on the management network to compromise virtualization hosts. The Cloud Software Group published a bulletin (CTX697256) on November 3, 2026, classifying the issue as Critical. The bulletin covers nine CVEs. Citrix XenServer…
-
Apple is bringing harmful content checks to iCloud link sharing with potential account penalties
Apple will begin checking iCloud content shared using the “Anyone with the link” option for harmful material in iOS, iPadOS, macOS, and visionOS 27.3 or later. When sharing … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/apple-icloud-link-sharing-checks/ also interesting: Apple to unveil new ‘Passwords’ password manager app for iPhones, Macs How to setup passkeys in…
-
A banking malware sample led researchers to an Android bug that can loop-crash phones
Bitdefender Labs researchers built an Android app that contains no executable code and requests no permissions, and installing it leaves a Pixel 10 in a crash loop that can … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/ghostmap-android-bug-research/ also interesting: New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds New Rokarolla Android…
-
OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run
An automated system running on an upcoming AI model turned hundreds of Linux kernel bugs into working exploits that give an ordinary user root access, and wrote a patch for … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/openai-linux-kernel-root-exploits/ also interesting: What to Know About CyberAv3ngers: The IRGC-Linked Group Targeting Critical Infrastructure 6 ways hackers…
-
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog
Tags: attack, cisa, cve, cyber, cybersecurity, exploit, infrastructure, kev, malicious, vulnerabilityU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Apple flaw, tracked as CVE-2024-27834 (CVSS score of 5.5), to its Known Exploited Vulnerabilities (KEV) catalog. >>This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant…
-
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog
Tags: attack, cisa, cve, cyber, cybersecurity, exploit, infrastructure, kev, malicious, vulnerabilityU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Apple flaw, tracked as CVE-2024-27834 (CVSS score of 5.5), to its Known Exploited Vulnerabilities (KEV) catalog. >>This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant…
-
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog
Tags: attack, cisa, cve, cyber, cybersecurity, exploit, infrastructure, kev, malicious, vulnerabilityU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Apple flaw, tracked as CVE-2024-27834 (CVSS score of 5.5), to its Known Exploited Vulnerabilities (KEV) catalog. >>This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant…
-
Airline Data Breach Widens as Singapore Airlines Reports 46,000 Affected Records
Singapore Airlines (SIA) is the newest name on a growing list of carriers affected by the Amadeus cybersecurity incident, confirming that Amadeus IT Group, the global travel technology provider, accessed roughly 46,000 of its booking records through its systems. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/amadeus-cybersecurity-incident/ also interesting: Future of proposed US cybersecurity healthcare…
-
Airline Data Breach Widens as Singapore Airlines Reports 46,000 Affected Records
Singapore Airlines (SIA) is the newest name on a growing list of carriers affected by the Amadeus cybersecurity incident, confirming that Amadeus IT Group, the global travel technology provider, accessed roughly 46,000 of its booking records through its systems. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/amadeus-cybersecurity-incident/ also interesting: Future of proposed US cybersecurity healthcare…
-
Schadcode-Attacken möglich: In Microsoft Paint klafft eine Zero-Click-Lücke
Angreifer können über Microsoft Paint Schadcode auf Windows-11-Systeme schleusen. Es gibt zwar einen Patch, aber der kommt bei vielen noch nicht an. First seen on golem.de Jump to article: www.golem.de/news/schadcode-attacken-moeglich-in-microsoft-paint-klafft-eine-zero-click-luecke-2611-214873.html also interesting: Cybersecurity Snapshot: AI Will Take Center Stage in Cyber in 2026, Google Says, as MITRE Revamps ATTCK Framework U.S. CISA adds a flaw…
-
Cyberangriff: Kühlanlagen französischer Blutbank manipuliert
Tags: cyberattackDie französische Blutbank EFS meldet einen Hackerangriff auf ihre Kühltechnik. In den betroffenen Räumen lagern Blutprodukte und Proben. First seen on golem.de Jump to article: www.golem.de/news/cyberangriff-kuehlanlagen-franzoesischer-blutbank-manipuliert-2611-214875.html also interesting: 3 Gründe, warum Ransomware-Angriffe heute noch gefährlicher sind From Exposure to Action: How Proactive Identity Monitoring Turns Breached Data into Defense Nicht gehackt, aber angreifbar: Wo reale…
-
Offline-Schutzebene auf Basis synthetischer DNA – Biomemory startet Early Access für ‘DNA Shield”
Tags: accessFirst seen on security-insider.de Jump to article: www.security-insider.de/biomemory-startet-early-access-fuer-dna-shield-a-e5afd78c3a054cc4d4b290f07bcf6818/ also interesting: Study Finds Excessive Use of Remote Access Tools in OT Environments Chrome extension privacy promises undone by hardcoded secrets, leaky HTTP Microsoft Teams Abused in Cyberattack Delivering PowerShell-Based Remote Access Malware Shai-Hulud & Co.: The software supply chain as Achilles’ heel
-
11 Digital Forensics Tools: The 2026 Buyer’s Verdict Guide
Forensic tooling is bought under two pressures that pull apart: caseload arithmetic (mostly mobile, always backlogged) and courtroom survival (every finding must outlive cross-examination). This verdict guide judges eleven tools commercial suites, frontline kiosks, and the open-source pillars every lab quietly depends on by lane, because “best” in forensics means best for the evidence type…
-
11 GRC Platforms: The 2026 Buyer’s Verdict Guide
GRC platforms fail one way above all: bought heavier than the team that must feed them, until the risk register quietly stops reflecting reality. This verdict guide therefore classes eleven platforms by the staffing they genuinely require workflow giants, configurable heavyweights, adoption-speed challengers, and no-code builders because in governance tooling, the platform your control owners…
-
11 Cyber Risk Quantification Tools: The 2026 Buyer’s Verdict Guide
Cyber risk quantification turns posture into currency expected annual loss with a confidence interval and its credibility lives entirely in the assumptions. This verdict guide judges eleven options on model honesty (can they decompose a scenario under questioning?), data grounding (live signals versus annual questionnaires), and decision fit, from boardroom steering to insurance limits. CRQ…
-
AI-Powered BOSSAI Attacks Expose Patient Records and Emergency Dispatch Data in Taiwan
BOSSAI, an agentic attack platform run by one operator that exposed emergency medical and dispatch data in Taipei. The campaign targeted hundreds of organizations in eleven countries, including emergency services, banks, universities, military systems and e-commerce sites. Confirmed breaches hit universities and emergency providers, with medical data and PII exfiltrated. A Taipei fire department patient-care…
-
11 Compliance Automation Software (SOC 2 / ISO 27001): The 2026 Buyer’s Verdict Guide
Compliance automation collapsed the SOC 2 timeline from consulting-year to integration-quarter: connectors pull evidence from your cloud, HR, and device stacks continuously, and the audit becomes a review of live data rather than a screenshot hunt. The 2026 differentiators are framework breadth after the first cert, evidence-automation depth (what percentage needs no human), and auditor-network…
-
10 Third-Party / Vendor Risk Management (TPRM) Tools: The 2026 Buyer’s Verdict Guide
Third-party risk management is where questionnaires go to die or get automated: the modern platforms fuse assessment workflow, outside-in ratings, and continuous monitoring so vendor risk stops being an annual PDF exchange. One honest count note up front: our source roster listed CyberGRX and ProcessUnity separately, but ProcessUnity acquired CyberGRX so this guide judges ten…
-
10 Third-Party / Vendor Risk Management (TPRM) Tools: The 2026 Buyer’s Verdict Guide
Third-party risk management is where questionnaires go to die or get automated: the modern platforms fuse assessment workflow, outside-in ratings, and continuous monitoring so vendor risk stops being an annual PDF exchange. One honest count note up front: our source roster listed CyberGRX and ProcessUnity separately, but ProcessUnity acquired CyberGRX so this guide judges ten…
-
10 Third-Party / Vendor Risk Management (TPRM) Tools: The 2026 Buyer’s Verdict Guide
Third-party risk management is where questionnaires go to die or get automated: the modern platforms fuse assessment workflow, outside-in ratings, and continuous monitoring so vendor risk stops being an annual PDF exchange. One honest count note up front: our source roster listed CyberGRX and ProcessUnity separately, but ProcessUnity acquired CyberGRX so this guide judges ten…
-
10 Third-Party / Vendor Risk Management (TPRM) Tools: The 2026 Buyer’s Verdict Guide
Third-party risk management is where questionnaires go to die or get automated: the modern platforms fuse assessment workflow, outside-in ratings, and continuous monitoring so vendor risk stops being an annual PDF exchange. One honest count note up front: our source roster listed CyberGRX and ProcessUnity separately, but ProcessUnity acquired CyberGRX so this guide judges ten…
-
Migration auf Post-Quanten-Kryptografie – Wer auf den Quantencomputer wartet, migriert zu spät
Tags: unclassifiedFirst seen on security-insider.de Jump to article: www.security-insider.de/pqc-migration-hardware-erneuerung-a-66107b6a1cc453808230302d7fc2d214/ also interesting: New variant of Mac Trojan discovered, targeting Tibet Bitcoin2024-Konferenz: Edward Snowden zu Stimmenfang und Datenschutz RSAC 2026: What to Expect from Bitdefender UK wants to know if banning under-16s from social media does anything useful
-
OpenAI’s New Cyber AI Model Finds 948 Linux Privilege Escalation Vulnerabilities in Just 10 Days
OpenAI has developed an autonomous pipeline that discovers, validates, exploits, and patches flaws in the Linux kernel. In a single run in mid-October 2026, an upcoming cybersecurity model generated 948 working local privilege escalation (LPE) exploits for a widely used Linux distribution. The total cost for this process was $1,213,430, which breaks down to approximately…
-
OpenAI’s New Cyber AI Model Finds 948 Linux Privilege Escalation Vulnerabilities in Just 10 Days
OpenAI has developed an autonomous pipeline that discovers, validates, exploits, and patches flaws in the Linux kernel. In a single run in mid-October 2026, an upcoming cybersecurity model generated 948 working local privilege escalation (LPE) exploits for a widely used Linux distribution. The total cost for this process was $1,213,430, which breaks down to approximately…
-
OpenAI’s New Cyber AI Model Finds 948 Linux Privilege Escalation Vulnerabilities in Just 10 Days
OpenAI has developed an autonomous pipeline that discovers, validates, exploits, and patches flaws in the Linux kernel. In a single run in mid-October 2026, an upcoming cybersecurity model generated 948 working local privilege escalation (LPE) exploits for a widely used Linux distribution. The total cost for this process was $1,213,430, which breaks down to approximately…
-
Healthcare can’t govern the AI tools it hasn’t found yet
Nearly nine in ten healthcare leaders say security or compliance staff always or usually review AI-written code that touches patient data before it goes live, and seven in ten … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/healthcare-ai-governance-patient-data/ also interesting: 12 most innovative launches at RSA 2025 From Risk to ROI: How Security Maturity Drives…
-
AI agent detection signals that still work when agents look human
Bots follow a script. AI agents work toward a goal and choose their own steps, which makes them harder to catch. In this Help Net Security interview, Zohaib Ahmed, CEO of … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/zohaib-ahmed-resemble-ai-detecting-ai-agent-traffic/ also interesting: What Tackling the SaaS Security Problem Means to Me MCP security: How to…