IT Security News: Afternoon roundup, 2026-11-02 Summary This period is characterized by the escalating intersection of artificial intelligence and cybercrime, ranging from automated espionage tools to AI-driven data valuation. State-sponsored tensions are prominently reflected in tit-for-tat attacks on critical emergency…
Google disrupts million-device XCPE Android malware botnet, bans TV box maker
Google and industry partners have dismantled the XCPE malware botnet consisting of more than 1.3 million Android TV streaming TV boxes that Google says…
Mercado Bitcoin Suffers Cyberattack as Researchers Flag $40 Million in Suspicious Crypto Transfers
Brazilian cryptocurrency exchange Mercado Bitcoin suspended deposits and withdrawals on November 2, 2026, after detecting a security incident in one of…
⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
Some attacks this week didn’t need much of a trick. A fake support call, a trusted extension, a shared link, or a device with no password. Small things…
IT Security News Hourly Summary 2026-11-02 20h : 5 posts
5 posts published in the last hour 18:31PapRAT Cyber-Espionage Campaign Leaves a ‘Bitter’ Taste in South Asia 18:31Beyond DKIM key rotation: understanding email replay attacks 18:02Keeping pace with e-evidence: New report examines Europe’s digital forensic capabilities 18:02CVE-2026-119085 – Template injection…
PapRAT Cyber-Espionage Campaign Leaves a ‘Bitter’ Taste in South Asia
Organizations in the region face growing cyberattacks from the known India-linked threat group, which leverages legitimate Windows functionality in three…
Beyond DKIM key rotation: understanding email replay attacks
As the email administrator for your organization’s domain, you receive a Domain-based Message Authentication, Reporting, and Conformance (DMARC) aggregate…
Keeping pace with e-evidence: New report examines Europe’s digital forensic capabilities
Coordinated by the European Commission in cooperation with Europol, the analysis draws on stakeholder consultations, dedicated meetings, surveys and…
CVE-2026-119085 – Template injection in the publishing component of Virtual Engineering Workbench
Bulletin ID: 2026-162-AWS Publication Date: 11/02/2026 09:30 AM PST Description: Virtual Engineering Workbench (VEW) is an open-source platform where…
IT Security News Hourly Summary 2026-11-02 19h : 12 posts
12 posts published in the last hour 17:32Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes 17:31Polymarket pledges to give $3.9 million back to victims after site compromise 17:31CISA Kicks Off Critical Infrastructure Security and Resilience Month…
Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes
The Capytistas, a secretive group claiming more than $1.2 million in backing, started with Elon Musk and Tesla’s board. Members argue that those who buy…
Polymarket pledges to give $3.9 million back to victims after site compromise
In a post-mortem on an October 29 incident, prediction market Polymarket said it will pay people back what they lost, as well as compensate them for the…
CISA Kicks Off Critical Infrastructure Security and Resilience Month 2026
This post has no text preview — click the link below to read the original article. This article has been indexed from CISA News Read the original article: CISA Kicks Off Critical Infrastructure Security and Resilience Month 2026
Storm Ransomware Is Scaling Fast and Selling an AI Powered Image
A new ransomware operation appeared in August 2026 with an ambitious pitch: sophisticated infrastructure, aggressive affiliate payouts, global ambitions,…
CVE-2026-119301 – Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
Bulletin ID: 2026-161-AWS Publication Date: 11/02/2026 08:30 AM PST Description: We are aware of CVE-2026-119301 in the Apache Iceberg write component,…
BTCPay Server warns of hot wallet crypto thefts on outdated instances
The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been…
Russia’s statistics agency confirms cyberattack claimed by Belarusian and Ukrainian hackers
An alliance of Belarusian and pro-Ukrainian hackers claimed to have taken out Russia’s federal statistics agency, Rosstat, and stolen vast amounts of…
PapRAT Cyber Espionage Campaign Leaves a ‘Bitter’ Taste in South Asia
Organizations in the region face growing cyberattacks from the known India-linked threat group, which leverages legitimate Windows functionality in three…
Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
A botnet of more than 1.3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led by Google.…
Thieves pilfer environment variables from Trigger AI workflow tool
So, who’s ready to clear the dust out of that server closet and move things back on-prem?
IT Security News Hourly Summary 2026-11-02 18h : 11 posts
11 posts published in the last hour 16:32Could Nick Andersen’s leadership outlast the clock on his acting role? 16:32Agentic pen-testing tool employed in multiple espionage campaigns around the globe 16:31Token thieves costing companies $100K+ per day in illicit LLM charges…
Could Nick Andersen’s leadership outlast the clock on his acting role?
He has won praise for his leadership of CISA as acting director, and there’s talk of keeping him in the role beyond his current deadline. With no nominee…
Agentic pen-testing tool employed in multiple espionage campaigns around the globe
Researchers have tracked the increased use of Artex and other frameworks in order to automate and speed up attack methods.
Token thieves costing companies $100K+ per day in illicit LLM charges
Don’t let the LLMjackers hit you
As the White House touts its AI task force, CISA is conspicuously missing
Without the cybersecurity agency, experts said, the new group could stumble as it tries to work with critical infrastructure operators on AI security.