05.11.2026

The Hacker News 05.11.2026 04:31
OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2 million in API costs.

"Our prototype identified and analyzed 2,308 candidate Linux kernel findings, dynamically reproduced 1,724 vulnerabilities, and produced 948 local privilege escalation (LPE)

CSO Online 05.11.2026 03:03
The kinks in the software supply chain are once again being exposed, with attackers now targeting OpsShield’s update process.
This week, threat actors used compromised credentials to push malicious updates out to cPGuard customers. They then accessed data stored on the vendor’s servers and in its billing portal accounts, and made copies of at least three of OpsShield’s cloud servers.

The Hacker News 04.11.2026 17:00
A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own.

The attacker's code then runs as root, according to advisories that Debian, Ubuntu, and APT's developers published on November 4. The attack needs APT to retry failed downloads, which it does by default from Debian 12 and

The Hacker News 04.11.2026 14:27
The Russia-linked threat actor known as APT29 is presumed to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker.

"The injected JavaScript code collects browser and device attributes," Sekoia researchers Amaury-Jacques Garçon and

Infosecurity Magazine 04.11.2026 14:00
APT29 compromised Ukrainian analytics tracker Plerdy to serve n-day exploits to mobile users

Infosecurity Magazine 04.11.2026 12:52
A supplier of the French National Blood Service was hit by a cyber-attack in which hackers turned cold rooms hosting blood samples up to 110°C (230°F)

Infosecurity Magazine 04.11.2026 11:02
A German-led coalition of law enforcers has intensified efforts to strike at a €4m investment fraud scheme

Spiegel Online 04.11.2026 10:45
Cyberattacken legen überall in Europa Kühlschränke lahm. Supermärkte mussten Ware entsorgen, der Schaden geht in die Millionen. In Frankreich hat es nun auch Kühlanlagen für Blutkonserven getroffen.

Heise Security 04.11.2026 09:28
Wenn die Voraussetzungen stimmen, können Angreifer etwa Barracuda Email Security Gateway attackieren und sich Root-Rechte verschaffen.

Infosecurity Magazine 04.11.2026 09:25
Binance has revealed details of how North Korean hackers stole $6.4bn theft of crypto assets

Heise Security 04.11.2026 08:39
In einer von Europol koordinierten Operation haben Strafverfolger am Dienstag mehr als 100 Server beschlagnahmt und Verdächtige verhaftet.

Golem 04.11.2026 08:20
Anlagebetrüger lockten Opfer mit dem Versprechen hoher Renditen auf ihre Plattform. Strafverfolger haben jetzt die Infrastruktur dahinter zerschlagen. (Cybercrime, Server)

The Hacker News 04.11.2026 07:46
A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin.

The flaw, CVE-2026-58868, affects Android 14 through 17. Phones get the fix with security patch level 2026-11-01 or later, which phone makers and carriers send on their own schedules.

As of November 4, Google's bulletin did not report

Heise Security 04.11.2026 06:57
Der milliardenschwere Diebstahl bei Binance wurde nicht nur durch einen kompromittierten Laptop ermöglicht. Die Verantwortlichen haben Monate daran gearbeitet.

The Hacker News 04.11.2026 05:43
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

The high-severity vulnerability, tracked as CVE-2026-119977 (CVSS score: 8.1), is a case of Time-of-check Time-of-use (TOCTOU) race condition that could be exploited to achieve arbitrary code

Spiegel Online 03.11.2026 17:26
Mehr als sechs Milliarden US-Dollar erbeuteten Hacker von der Kryptobörse Binance. Das Unternehmen spricht von einer »ausgeklügelten, mehrstufigen Kampagne«. Zum Verhängnis wurde ihm auch ein Mitarbeiter auf Jobsuche.