AI
Opal’s agent.ID virtual event: Top security leaders on governing Al agents
Opal Security will host agent.ID, a free virtual event focused on adapting identity and access management (IAM) to AI agents, on November 5, 2026.
Help Net Security ·
Today, page 29
AI
NATO’s Crossed Swords Exercise Brings AI Agents Into Cyber Operations Training
The NATO CCDCOE exercise in Estonia introduces AI agents and OpenAI Daybreak into joint cyber and kinetic operations training. The post NATO’s Crossed Swords Exercise Brings AI Agents Into Cyber Operations Training appeared first on SecurityWeek .
SecurityWeek ·
Over 100 European Stores Hit as Supermarket Fridge Attacks Return
Attackers again tampered with internet-exposed refrigeration controllers, this time at stores in Belgium, Sweden, Ireland and beyond. The post Over 100 European Stores Hit as Supermarket Fridge Attacks Return appeared first on SecurityWeek .
SecurityWeek ·
Governance
NIS2 Makes Board Members Personally Liable for Access Control Decisions
NIS2 Article 20 makes management bodies answerable for the access controls they approve, and boards are starting to ask for proof that those controls work. NIS2 board accountability gives directors a more direct role in cybersecurity.
Security Affairs ·
Vulnerabilities
What human hackers still do better than AI, according to HackerOne’s CEO
AI can find vulnerabilities in minutes, but people still hold the edge in judging what a flaw means for a business. In this Help Net Security interview, Kara Sprague, CEO of HackerOne, talks about business logic bugs, what AI does to the crowd model, and why…
Help Net Security ·
Endpoint
Apple’s spyware notifications reach the Bundestag: what the BSI says to do now
Apple warns German Bundestag lawmakers of mercenary spyware attacks; BSI urges victims to assume compromise. The German government is warning politicians and public figures that they were targeted by government-backed spyware.
Security Affairs ·
VulnerabilitiesReportKEV
Brotli Decompression Flaw in Node.js and Other Software Under Attack
HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more.
7 outlets · latest: Help Net Security ·
Vulnerabilities
AI coding agents are installing MCP servers that will never be patched
When a developer tells an AI coding agent to “set up a GitHub MCP,” the agent has to pick a package. New research from Glow Labs documents sessions where it picked one out of an archived repository that will never be patched again.
Help Net Security ·
VulnerabilitiesReportCriticalCVSS 10.0
Attackers exploit maximum-severity flaw in Siemens IoT2050 devices
2 outlets · latest: The Hacker News ·
VulnerabilitiesCriticalCVSS 10.0
Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
The Hacker News ·
Network
Fireperf: Open-source network testing tool for firewalls and routers
The IPFire project has released fireperf, an open-source measurement tool that opens connections at a fixed rate and reports what the device in the middle did with each one.
Help Net Security ·
Cybersecurity jobs available right now: November 3, 2026
Cyber Security Architect Planck Technologies | Portugal | Remote – View job details As a Cyber Security Architect, you will design security architectures for telecommunications networks, platforms, and cloud environments.
Help Net Security ·
AI
AI-Powered Penetration Testing: How Autonomous Offensive Security Works
Your Environment Changes Every Day. Can Your Penetration Testing Keep Up? Traditional penetration tests provide valuable insights, but their findings reflect a moment in time.
Horizon3.ai ·
Composer 2.11 Adds Dependency Cooldowns
Composer 2.11 has introduced dependency cooldowns, giving PHP developers a native way to delay newly published package versions before they become eligible for installation.
Socket Blog ·
Endpoint
Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user's Internet connection out to strangers and conducts advertising…
Krebs on Security ·
ISC Stormcast For Tuesday, November 3rd, 2026 https://isc.sans.edu/podcastdetail/10162, (Tue, Nov 3rd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
US-CERT / SANS Internet Storm Center ·
UK faces ‘unprecedented rise’ in cyberattacks in coming months, warns cyber chief
"[V]ulnerabilities that have been tolerated for far too long can now be discovered and exploited at a scale that was once unimaginable," the NCSC's chief will warn in releasing the agency's annual report.
The Record ·
Unit 42 Threat Intelligence Highlights - Nov. 2, 2026
Palo Alto Unit 42 ·
Vulnerabilities
Max-severity bug in widely used OT programming tool exploited to deliver Linux malware
The Register Security ·