Behind the Scenes of How Operation Blackout Went Down
Dark Reading ·
Today, page 35
AI
Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see
The Register Security ·
Threat Intel
Fashion retailer Resolve says hackers stole payment card information
The company, billing itself as “the next-generation fashion retailer for Millennial and Generation Z consumers,” said a recent hack exposed customer payment card numbers.
The Record ·
$6.3 Billion Stolen from Binance in Attack Attributed to North Korea
Binance links a $6.3 billion crypto theft to a compromised DevOps laptop, with North Korean hackers blamed by blockchain analysts. Binance was investigating suspicious transfers that early estimates put at up to $5.8 billion.
Security Affairs ·
Vulnerabilities
Ivanti security advisory (AV26-1035) - Update 2
Serial number: AV26-1035 Date: October 13, 2026 Updated: October 30, 2026 As of October 13, 2026, Ivanti is affected by vulnerabilities in the following products: Ivanti Connect Secure Versions prior to 25.1.1.3 Versions prior to 25.1.3.1 Versions prior to…
Canadian Centre for Cyber Security ·
Vulnerabilities
4 real? Tracking exploitation and patching of eMudhra’s weak keys
Cloudflare Blog (Security) ·
Threat Intel
Apple notifications alert victims in 99 countries about mercenary spyware infections
The notifications come shortly before the Pall Mall Process is nearing final negotiations on guidelines for the use of commercial hacking tools.
CyberScoop + 1 outlet ·
GM cracks the petty cash box for multistate driver tracking settlement
The Register Security ·
Identity
From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerberos.
Microsoft Security Blog ·
VulnerabilitiesKEV
Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support (CVE-2026-102764)
Rapid7 Blog ·
California officials confirm grand jury subpoenas as states, civil groups brace to protect elections from federal encroachment
Los Angeles County officials told CyberScoop they received multiple grand jury subpoenas investigating alleged election fraud. States and civil groups call it a federal power play.
CyberScoop ·
AI
Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach
The state’s Department of Education (FLDOE) said on Thursday it became aware of a data breach involving the Florida Student Financial Aid website on October 19.
The Record + 1 outlet ·
Vulnerabilities
MongoDB security advisory (AV26-1107)
Serial Number: AV26-1107 Date: October 30, 2026 As of October 28, 2026, MongoDB is affected by vulnerabilities in the following product: Laravel MongoDB Prior to 5.12.0 The Cyber Centre encourages users and administrators to review the provided web links and…
Canadian Centre for Cyber Security ·
AI
New Framework Puts Ransomware Resilience for AI Systems in Focus
RAID-AI aims to help organizations assess their security preparation for ransomware attacks targeting AI systems
Infosecurity Magazine ·
Vulnerabilities
HashiCorp security advisory (AV26-1106)
Serial Number: AV26-1106 Date: October 30, 2026 As of October 29, 2026, HashiCorp is affected by vulnerabilities in the following products: Nomad Prior to 2.1.0 Nomad Enterprise Prior to 2.1.0 Prior to 1.11.12 Prior to 1.10.18 Boundary Prior to 1.0.2 Boundary…
Canadian Centre for Cyber Security ·
VulnerabilitiesReport
Drupal Warns Attackers Are Exploiting Commerce Core Access Flaw in Online Stores
Serial number: AV26-1105 Date: October 30, 2026 As of October 28, 2026, Drupal is affected by a vulnerability in the following product: Commerce Core Versions prior to 2.41 and 3.0.0 versions prior to 3.3.13 Open-source reporting indicates that…
4 outlets · latest: Canadian Centre for Cyber Security ·
Endpoint
Bloatware in Aftermarket Auto Parts
This story is interesting: One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing about.
Schneier on Security ·