IT Security News: Morning roundup, 2026-11-02 Summary This morning's news is dominated by a massive $6.3 billion cryptocurrency heist attributed to North Korean state-sponsored actors. A recurring theme is the dual-edged nature of artificial intelligence, appearing both as a tool…
US Military Probes Freezer Failures, After French Hack
Pentagon investigators look into at least six simultaneous freezer failures at US military bases, after French supermarket fridges hacked
Hackers Weaponize Open-Source CyberStrikeAI Framework to Launch AI-Powered Network Intrusions
Hackers are abusing CyberStrikeAI, an open-source penetration-testing framework, to orchestrate network intrusions against educational organizations…
Chainalysis Discloses Data Breach Following AI-Driven Cyberattack
The attackers used offensive agentic techniques to access the company’s systems and internal tools.
Researchers Discover High-Severity ChatGPT Flaw That Exposed Private Conversations to Attackers
Researchers found a chain of flaws that turned an ordinary public ChatGPT share link into attacker-controlled JavaScript running inside the victim’s…
IT Security News Hourly Summary 2026-11-02 12h : 19 posts
19 posts published in the last hour 10:33FBI pins $6.3 billion Binance crypto heist on North Korea while scammers circle anxious users 10:33Seven egregious failures of modern web tech 10:33Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens…
FBI pins $6.3 billion Binance crypto heist on North Korea while scammers circle anxious users
North Korea was behind the theft of more than $6 billion in cryptocurrency from Binance, the FBI has confirmed. “The Federal Bureau of Investigation (FBI)…
Seven egregious failures of modern web tech
The modern web is a miracle of engineering, but its history is littered with brilliant concepts that flamed out in execution. For every innovation that…
Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens
Hackers reportedly hit Ukraine ‘s and Russia ‘s emergency alert apps, sending fake nuclear and attack warnings and raising concerns over public safety.…
Hundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake Features
WIRED uncovered some 400 apps and websites linked to Chinese-language developers that look like regular AI tools but had secret features that let users…
Apple Issues Urgent Security Alerts Over Mercenary Spyware Attacks in 99 Countries
Apple has started sending a new round of threat notifications to users across 99 countries, warning them about targeted mercenary spyware attacks,…
3 questions for securing AI agents
Are your AI agents leaking sensitive data? Ask these three essential questions.
FBI Attributes Binance Heist to North Korea’s TraderTraitor
The FBI has blamed North Korean APT group TraderTraitor for the world’s biggest cyber heist
How fixing our data infrastructure before it broke us gave back 6,200 engineering hours
Just about every CTO at a growth-stage company that I know is carrying an infrastructure problem they are quietly deciding not to look at. The system…
Chainalysis Confirms Cyberattack as Hackers Exploit Vulnerabilities to Access Internal Tools
Chainalysis has confirmed a cybersecurity incident in which an external actor gained unauthorized access to the company’s systems and internal tools…
Protecting OT, IoT and medical devices without disrupting operations
A smarter OT security strategy starts with visibility, context and prioritization.
Are AI certifications still worth it? What changed in 2026
Same question, a different answer Earlier this year, in Are AI certifications worth the investment? , I argued that AI certifications ranked among the…
11 Breach & Attack Simulation Tools: The 2026 Buyer’s Verdict Guide
Breach and attack simulation tools answer the question audits can’t: would the controls you pay for actually stop the techniques attackers use this…
Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was targeted.
11 Security Data Lake Platforms: The 2026 Buyer’s Verdict Guide
The security data lake decision is a custody decision: who owns your telemetry bytes, in what format, queryable by whose engines, at whose prices. This…
Ivanti patches two more Connect Secure zero-days chained in attacks
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at…
11 Security Log Management Tools: The 2026 Buyer’s Verdict Guide
Security log management is bought three times transit, storage, query and most buyers price only one. This verdict guide judges eleven tools on pricing…
Chainalysis Warns Customers After “Offensive Agentic” Security Incident
Chainalysis reveals AI-driven attack that led to unauthorized activity
11 Threat Hunting Services: The 2026 Buyer’s Verdict Guide
Threat hunting services sell what alert pipelines can’t produce: hypotheses about the attacker your detections never anticipated. The buyer’s trap is…