IT Security News: Morning roundup, 2026-11-04 Summary This period is marked by the escalating role of artificial intelligence in both offensive cyberattacks and defensive strategies, as seen in massive crypto heists and new security platforms. A recurring focus on mobile…
AI Vulnerability Finding
A comment : 3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another…
Canadian Extradited to US Over Cryptomining Hacks on University Supercomputers
A federal grand jury indicted two Canadian men for hijacking university supercomputers to secretly mine Electroneum cryptocurrency.
Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM’s Memory
Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including dom0.…
AI Scams: How Criminals Use Deepfakes, Fake Websites and Voice Cloning to Target Consumers
As criminals use Artificial Intelligence (AI) to help produce realistic scams such as fake online shopping sites, cloned voices and realistic fake videos,…
Attacks On European Supermarkets: Manipulation over Internet Turns Freezers into Heated Cabinets
This post has no text preview — click the link below to read the original article. This article has been indexed from Security Blog G Data Software AG Read the original article: Attacks On European Supermarkets: Manipulation over Internet Turns…
Backporting security fixes at scale with Codex
Stable Linux releases lack existing security fixes because backporting them is time-consuming and often thankless work. We’re using Codex to reduce the…
Google Patches Critical Android RCE Flaws That Let Attackers Execute Code Without User Interaction
Google released its November 2026 Android Security Bulletin, which addresses critical vulnerabilities that could allow remote code execution without user…
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app’s server by uploading a crafted file if the…
Russia Takes Down VasyGrek Cybercrime Network After Years of Phishing Attacks
Russian authorities have arrested three suspected members of the cybercrime group VasyGrek, also known as Fluffy Wolf, and dismantled the infrastructure…
Radio With No Radar: Why Agent Runtime Security Fails Without the Layers Beneath It
Nearly every agent security pitch now ends on the same promise: the product stops the bad action in real time. The promise holds for one kind of agent,…
Europol Dismantles Global Investment Scam, Seizes 100+ Servers
A major international operation has disrupted an investment-fraud network that may have targeted victims in at least 50 countries. Coordinated by Europol…
China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP…
Cloudflare Launches Zero Wire to Track Critical Vulnerabilities and Active Exploitation Across the Internet
Cloudflare launched Zero Wire, a public vulnerability intelligence hub that helps security teams investigate critical internet threats, assess…
Apple Warns Of Sophisticated iPhone Hacks
Government-level spyware is targeting iPhones, warns alert to users in 99 countries, as Germany urges targeted lawmakers to take action
3AM Ransomware Used Human-AI Hybrid Tactics in UK School Estate Compromise
Bitdefender highlighted a unique human-AI approach during a September attack on a UK school estate, which resulted in financial data being exfiltrated
Cursor removes malicious Claude Code extension after SSH backdoor attempt
A malicious version of Anthropic’s Claude Code extension distributed through the Cursor marketplace attempted to install a persistent Secure Shell (SSH)…
FBI pins $6.3B Binance crypto heist on North Korean hackers
Exchange scrambles to replace stolen funds as customers withdraw billions and hackers get busy laundering their haul
Hackers Use Stolen Microsoft Entra ID App Credentials to Breach 27 Organizations and Steal Sensitive Data
Hackers are exploiting stolen Microsoft Entra ID application credentials to infiltrate Microsoft 365 and Azure environments, impacting 27 organizations…
Israeli Start-Up Says Human Error Led To AI Hacks
Tel Aviv-based start-up Irregular Security says human error, time pressures allowed AI models to escape isolation and carry out hacks in testing
Cyberattack on French plasma stores is enough to make your blood boil
Attackers reportedly set cold-room controls to 110°C, but safeguards prevented stock losses
CISA Warns of Active Attacks Exploiting WordPress Core Code Execution Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included a WordPress Core vulnerability in its Known Exploited Vulnerabilities…
IT Security News Hourly Summary 2026-11-04 13h : 26 posts
26 posts published in the last hour 11:32Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527) 11:32Poisoned cPGuard update hits thousands of web hosting servers 11:323AM Ransomware Hackers Use AI-Assisted Attacks to Breach UK Schools and Spread Across…
Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
Overview On October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released…
Poisoned cPGuard update hits thousands of web hosting servers
An attacker has compromised the update infrastructure of cPGuard, a security suite for Linux web hosting servers, and pushed out a malicious update to…