Today, page 30
Largest crypto exchange in Brazil confirms cyberattack as millions flow out of platform
Blockchain security companies said more than $46 million left the Mercado Bitcoin platform.
The Record ·
AI
Chinese hackers use ARTEX AI in automated attacks against 200 orgs
Chinese hackers used ARTEX, an open-source, multi-agent AI penetration-testing framework, in attacks against more than 200 organizations across 14 countries. [...]
BleepingComputer ·
Threat Intel
Business groups mount fresh campaign for long-term renewal of information sharing law
Their target for extending CISA 2015 is the annual “must-pass” defense authorization bill, but a more than year-long standoff persists.
CyberScoop ·
Vulnerabilities
What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks
Real-world exploitation concentrates in a small, high-impact subset of CVEs. Learn how defenders can prioritize vulnerabilities based on exploitation likelihood, exposure, and potential blast radius.
Microsoft Security Blog ·
Endpoint
Michigan State cyber incident claimed by ransomware gang behind recent hospital attack
A recent post by the BYOD gang appears to line up with a security incident that prompted campus-wide action at Michigan State University. BYOD drew attention in October for an attack on the University of New Mexico.
The Record ·
Fintech platform Sageworks taken offline after suspected cyberattack
Financial technology company Abrigo has restored its Sageworks risk management application, except for borrower-facing capabilities, following an outage triggered by "irregular activity" in its environment. [...]
BleepingComputer ·
Vulnerabilities
SUSE Linux security advisory (AV26-1113)
Serial Number: AV26-1113 Date: November 2, 2026 As of November 2, 2026, SUSE is affected by a vulnerability in the following product: Rancher Prior to 2.11.19 Prior to 2.12.15 Prior to 2.13.11 Prior to 2.14.7 Prior to 2.15.3 The Cyber Centre encourages users…
Canadian Centre for Cyber Security ·
Beyond DKIM key rotation: understanding email replay attacks
As the email administrator for your organization’s domain, you receive a Domain-based Message Authentication, Reporting, and Conformance (DMARC) aggregate report showing email passing DomainKeys Identified Mail (DKIM) verification as though it came from your…
AWS Security Blog ·
AI
Preparing our next security sprint to harden OpenAI
OpenAI is preparing its next internal security sprint with Cathedral Systems to test and strengthen its defenses using AI.
OpenAI News ·
Polymarket pledges to give $3.9 million back to victims after site compromise
In a post-mortem about an October 29 incident, prediction market Polymarket said it will pay people back what they lost, as well as compensate them for the site's downtime.
The Record ·
Vulnerabilities
⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
The Hacker News ·
Threat Intel
Russia's statistics agency confirms cyberattack claimed by Belarusian and Ukrainian hackers
An alliance of Belarusian and pro-Ukrainian hackers claimed to have taken out Russia's federal statistics agency, Rosstat, and stolen vast amounts of sensitive government data in a cyberattack.
The Record ·
2nd November – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 2nd November, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Binance, a global cryptocurrency exchange, has suffered a cyberattack resulting in the theft of approximately…
Check Point Research ·
EndpointReport
Google Dismantles XCPE Botnet Built Into Android TV Boxes
Google shut down the servers behind XCPE, a backdoor hidden in the firmware of Android TV set-top boxes. Google’s Threat Intelligence Group attributes the operation with high confidence to Videostrong Technology, the company that manufactured many of those…
2 outlets · latest: Help Net Security ·
EndpointReport
Google Disrupts x.cpe Botnet Built Into 1.3 Million Android TV Boxes
6 outlets · latest: The Hacker News ·