Daily curated cyber threat intelligence for security professionals.
Sourcewww.bleepingcomputer.com
Curated
Google has added a new top-tier reward of $250,000 to its Cloud Vulnerability Reward Program for high-impact architectural flaws it calls Root-in-Cloud bugs, BleepingComputer reports. The category covers flaws in the core architecture of Google Cloud.
Sourcewww.helpnetsecurity.com
Curated
The rsync project has released version 3.5.2, fixing a flaw that let a connecting client exhaust a server’s CPU with checksum work, Help Net Security reports. rsync is a widely used open-source utility for copying files locally and across networks.
Sourcewww.helpnetsecurity.com
Curated
NIST has published cybersecurity guidance for businesses with no paid employees other than their owners, including freelancers, sole proprietors and independent contractors, Help Net Security reports. About 82 percent of the 34.8 million small businesses in the United States fall into that category, according to the Small Business Administration.
Sourcewww.securityweek.com
Curated
Meta has shared top findings from its Muse bug bounty program, which has paid out $1.2 million, SecurityWeek reports. A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test virtual machines used by Meta staff.
Sourcewww.microsoft.com
Curated
Microsoft Threat Intelligence is tracking a fake-download campaign that uses trojanized Inno Setup installers to deliver monetization payloads, Microsoft says. The campaign delivers multiple unwanted offers during a single installer session, and Microsoft has published detection and investigation guidance for it.
Sourcecyberscoop.com
Curated
ILC Dover, a defense and aerospace supplier, has agreed to pay $13 million to settle US allegations that it failed to meet cybersecurity requirements under its government contracts, CyberScoop reports. The False Claims Act settlement includes no admission of liability, and the company said the issues had been resolved before settling.
Sourcehackread.com
Curated
A 3AM ransomware affiliate breached a UK school estate and encrypted about 37 machines in an attack Bitdefender believes involved suspected AI-driven command retries, Hackread reports. Bitdefender could not confirm whether a model ran the loop automatically or an operator copied commands between a terminal and an AI tool.
Sourcewww.securityweek.com
Curated
Frontline Education is notifying more than 1.3 million people after state attorney general filings put the count for its August data breach at 1,298,917, SecurityWeek reports. Attackers exploited a third-party software flaw to steal data from the Frontline Central and School Health Management products, including Social Security numbers and student IDs.
Sourcewww.bleepingcomputer.com
Curated
Have I Been Pwned has confirmed that data stolen from Harvard University’s alumni and fundraising systems exposed 850,500 accounts, BleepingComputer reports. The ShinyHunters gang breached the systems in November 2025 and leaked the data after Harvard refused to pay a ransom.
Sourcedatabreaches.net
Curated
South Korea’s presidential office held an emergency meeting on Tuesday over the leak of personal data of President Lee Jae Myung and his entourage from a June overseas trip, DataBreaches.net reports, citing Yonhap. A file containing the entourage’s personal data had been uploaded to a publicly accessible website in June.
Sourcedatabreaches.net
Curated
At least nine US health systems, including Mayo Clinic and UW Medicine, have been identified as affected by a data breach at healthcare AI company Xsolis, DataBreaches.net reports. Xsolis told US regulators in June that a January phishing attack affected 1.4 million individuals.
Sourcecryptobriefing.com
Curated
Blockchain investigator ZachXBT says French banking group Crédit Mutuel Arkéa is the institution behind a crypto theft now estimated at more than $133 million, Crypto Briefing reports. The bank has not confirmed the claim and had issued no statement as of November 4.
Sourcecryptobriefing.com
Curated
BitMart founder Sheldon Xia has confirmed the crypto exchange suffered a breach, after an on-chain analyst linked funds from the incident to the same wallets used in the Mercado Bitcoin attack, Crypto Briefing reports. Xia said the amount stolen from BitMart was small and gave no figure.
Sourcethehackernews.com
Curated
Password manager mSecure has emailed current and former customers urging them to consider changing passwords, resetting two-factor authentication and removing passkeys after it learned of suspicious activity linked to the app, The Hacker News reports. Developer mSeven Software has not said what happened or whether any stored data was exposed.
Sourcewww.bleepingcomputer.com
Curated
WorkOS says an attacker using the ARTEX AI offensive security framework breached an internal sales application on October 30 and accessed business contact records and summaries of customer communications, BleepingComputer reports. The company says no production services or platform data were affected.
Sourcethehackernews.com
Curated
Blockchain infrastructure provider Chainstack has disclosed that an attacker accessed parts of its production environment through a third-party component and reached a database containing customer account information and password hashes, The Hacker News reports. The intrusion, detected on October 31, is assessed to overlap with a China-linked campaign using the ARTEX AI framework, and customers have been told to rotate node credentials and API keys.
Sourcewww.bleepingcomputer.com
Curated
A large-scale watering-hole campaign attributed by Sekoia to Russia’s APT29 has used n-day exploit chains to attack iOS and Android users with no user interaction, BleepingComputer reports. Compromised and lookalike sites profiled visitors and delivered platform-specific exploits to steal cookies, messaging app databases and credentials, and Apple and Google have patched the flaws used.
Sourcethehackernews.com
Curated
CISA has added a WordPress Core flaw, CVE-2026-119977, to its Known Exploited Vulnerabilities catalog, confirming active exploitation, The Hacker News reports. The time-of-check time-of-use race condition can let an unauthenticated attacker run code during a full core upgrade, and federal agencies have until November 6, 2026 to apply the fixes.
Sourcethehackernews.com
Curated
Google has issued patches for a critical Android flaw, CVE-2026-58868, that could allow an attacker to run code remotely without any user interaction, The Hacker News reports. The flaw affects Android 14 through 17, and fixes are included in devices with the 2026-11-01 security patch level or later.
Sourcethehackernews.com
Curated
Russian authorities have arrested three suspected members of the VasyGrek threat group, also known as Fluffy Wolf, and dismantled its criminal infrastructure, The Hacker News reports. The group, active since 2016, is suspected of embezzling funds from organisations and distributing malware through phishing campaigns, according to Russia’s Ministry of Internal Affairs.
Sourcedatabreaches.net
Curated
A major cyber breach has been declared at NSW Health, and a criminal investigation is under way, DataBreaches reports. Officials say the breach hit an isolated server within NSW Health and that patient data has not been affected.
Sourcewww.darkreading.com
Curated
An unknown operator appears to have exfiltrated SQL Server backups from the Philippine Overseas Employment Administration in under half an hour, Dark Reading reports. The roughly 69GB of data likely leaked concerns Philippine migrant workers.
Sourcedatabreaches.net
Curated
Cold-storage facilities used by France’s national blood service were targeted in a cyberattack, DataBreaches reports, citing Le Canard enchaîné. Units containing blood samples were reportedly programmed to reach 110 degrees Celsius; the attack took place overnight from Sunday to Monday.
Sourcenews.risky.biz
Curated
Hackers have been locking Li Auto electric vehicle owners in Russia out of their cars and extorting them, the Risky Bulletin reports. The attacks target owners of the Chinese maker’s smart cars.
Sourcesecurityonline.info
Curated
The CVE-2026-112487 macOS revisiond vulnerability allows a standard user to gain root access through a local privilege escalation exploit. Users should immediately update to the latest macOS Golden Gate version to patch this security flaw.