IT Security News: Overnight roundup, 2026-11-02 Summary This period is marked by a high concentration of state-sponsored threats and critical system vulnerabilities, particularly concerning North Korean financial heists and Linux host security. A recurring theme is the dual nature of…
Reddit Plans Mandatory Logins to Block AI Bots From Scraping User Data
Reddit plans to make its platform a primarily logged-in service, tightening access to public discussions as it seeks to curb unauthorized data scraping.…
Hackers Use ARTEX AI Agents to Automate Active Directory Attacks, Kerberoasting, and Lateral Movement
Hackers are now using an open-source AI tool called ARTEX to run large parts of a network break-in on their own. The tool can map a Windows network, steal…
Hackers Claim to Have Stolen 30GB of Data From Frooti Maker Parle Agro
A dark web forum post claims 30GB of data linked to Parle Agro, the company behind Frooti, Appy Fizz, Bailley and Hippo, has been leaked. Dark Web…
FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
The FBI has officially pinned the $6 billion Binance hack on North Korea’s TraderTraitor as the attackers launder the stolen crypto.
VOLTA Malware Steals Gmail and Discord Sessions, Then Uses AI to Build Detailed Victim Profiles
A new Windows infostealer called VOLTA does more than steal passwords. After it grabs Gmail, Discord and other logins, it asks an AI model to study the…
FBI blames N. Korea’s TraderTraitor for Binance theft, urges crypto industry to block transactions
The FBI and U.S. Secret Service alleged this weekend that North Korean hackers were responsible for stealing more than $6.3 billion from cryptocurrency…
Critical BeyondTrust Vulnerability Faces Fresh Exploitation Probes as Hackers Prepare for Mass Scanning
Fresh probes targeting CVE-2026-102764 have raised concerns that attacks against BeyondTrust Remote Support could spread beyond targeted espionage.…
IT Security News Hourly Summary 2026-11-02 10h : 5 posts
5 posts published in the last hour 08:32A week in security (October 26 – November 1) 08:31CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations 08:31Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for…
A week in security (October 26 – November 1)
A list of topics we covered in the week of October 26 to November 1 of 2026
CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
We analyze a series of attacks on educational institutions that were fully automated during the post-exploitation phase using the CyberStrikeAI…
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
Attackers are impersonating trusted AI bots to scan enterprise websites for exposed passwords, API keys, and cloud credentials. The company tracked a…
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks.
IT Security News Hourly Summary 2026-11-02 09h : 4 posts
4 posts published in the last hour 07:31DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work 07:31DHS data leak, Northflank suffers breach, Russian Poryadok cyberattack 07:02The first ten lines of a command policy for AI coding agents…
DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work
Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for work The agent…
DHS data leak, Northflank suffers breach, Russian Poryadok cyberattack
NetamLoader malware targets government Windows systems in Asia https://thehackernews.com/2026/11/netamloader-malware-targets-government.html Northflank…
The first ten lines of a command policy for AI coding agents
In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI agents. He…
IT Security News Hourly Summary 2026-11-02 08h : 7 posts
7 posts published in the last hour 06:32Hackers Gain Unauthorized Access to WS Audiology CRM Environment and Operational IT Systems 06:31Byoky: Open-source wallet for AI API keys 06:31New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by…
Hackers Gain Unauthorized Access to WS Audiology CRM Environment and Operational IT Systems
WS Audiology (WSA), the parent company of Widex and Signia, is investigating unauthorized access to its internal IT infrastructure after taking selected…
Byoky: Open-source wallet for AI API keys
Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their keys for…
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model…
Malicious Claude Code Extensions in Cursor Marketplace Install Persistent SSH Backdoors on Windows and macOS
Malicious Claude Code extensions distributed through Cursor’s VS Code The Extension Marketplace tried to create persistent SSH backdoors on Windows and…
Product showcase: Trust Onion uses rotating codewords to verify callers
Trust Onion is a free app that gives trusted groups three rotating codewords to check who they are communicating with. It also includes signed selfies,…
Hackers Weaponize ARTEX AI Agents to Automate Network Intrusions and Steal Sensitive Data
Threat actors are weaponizing ARTEX, an autonomous penetration-testing framework, to accelerate network intrusions, escalate privileges, and steal…
IT Security News Hourly Summary 2026-11-02 07h : 10 posts
10 posts published in the last hour 05:32FBI Confirms North Korean Hackers Stole Over $6 Billion From Binance in Massive Crypto Attack 05:32New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Profile Victims and Rank Stolen Data 05:32Ransomware gang…