EndpointReport
Sekoia Links Mobile Watering Hole Campaign to Russia-Linked APT29
APT29 compromised Ukrainian analytics tracker Plerdy to serve n-day exploits to mobile users
9 outlets · latest: Infosecurity Magazine ·
Today, page 24
AI
See the agents, set the terms: New visibility and control for personal agents
Cloudflare Blog (Security) ·
French blood service hit by Europe-wide cyberattacks on refrigeration
Temperature controls were altered at three of France’s national blood service sites this week amid a wave of cyberattacks affecting refrigeration systems across Europe.
The Record ·
Vulnerabilities
The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)
One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. This was a simple vulnerability in a CGI-bin script used to send e-mail.
US-CERT / SANS Internet Storm Center ·
US charges two Canadians accused of hacking US universities
A federal grand jury indicted two Canadians suspected of hacking multiple US universities and using the compromised systems to mine for cryptocurrency. [...]
BleepingComputer ·
France Blood Service Cyber-Attack Sends Blood Storage Temperatures to 110°C
A supplier of the French National Blood Service was hit by a cyber-attack in which hackers turned cold rooms hosting blood samples up to 110°C (230°F)
Infosecurity Magazine ·
Vulnerabilities
Impart uses AI to build virtual patches without putting models in the traffic path
Impart Security has launched the Runtime Defense Harness, a controlled environment where AI agents write and test virtual patches for new vulnerabilities without putting AI in the traffic path. The launch comes as exploits increasingly outpace fixes.
Help Net Security ·
AI
Modernising threat hunting: Using Semantic Search to Find Risky AI Agent Behavior
Elastic Security Labs ·
AI
AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks
Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks. The post AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks appeared first on SecurityWeek .
SecurityWeek ·
Canadian Extradited to US Over Cryptomining Hacks on University Supercomputers
A federal grand jury indicted two Canadian men for hijacking university supercomputers to secretly mine Electroneum cryptocurrency. The post Canadian Extradited to US Over Cryptomining Hacks on University Supercomputers appeared first on SecurityWeek .
SecurityWeek + 1 outlet ·
VulnerabilitiesReport
Rails fixes critical file-write flaw in Active Storage uploads
3 outlets · latest: The Hacker News ·
Cyberattack on French plasma stores is enough to make your blood boil
The Register Security ·
Vulnerabilities
Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory
The Hacker News ·
Poisoned cPGuard update hits thousands of web hosting servers
An attacker has compromised the update infrastructure of cPGuard, a security suite for Linux web hosting servers, and pushed out a malicious update to nearly 3,000 customer servers.
Help Net Security ·
AppSec
Malicious cPGuard Updates Served in OpsShield Supply Chain Attack
Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions. The post Malicious cPGuard Updates Served in OpsShield Supply Chain Attack appeared first on SecurityWeek .
SecurityWeek ·
Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical
The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues. The post Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical appeared first on SecurityWeek .
SecurityWeek ·
AI
Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist
Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers. The post Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist appeared first on SecurityWeek .
SecurityWeek ·
VulnerabilitiesCriticalCVSS 9.8
CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code
Critical Android flaw CVE-2026-58868 could allow remote code execution without user interaction on devices running Android 14 through 17. Google has fixed CVE-2026-58868, a critical Android vulnerability affecting versions 14 through 17.
Security Affairs ·
EndpointReport
ESET: China-Aligned SlippyNunchucks Hijacks Sogou Input Method Traffic to Spread Backdoor
ESET Research analyzes a DNS hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method
3 outlets · latest: ESET WeLiveSecurity ·