US Probes Suspected Hack Behind Military Base Freezer Failures
The Pentagon treats August freezer failures at US military bases as a suspected hack and is working with French investigators after a supermarket attack.
Security Affairs ·
Today, page 38
Polymarket halts trading after crypto-draining script breach, $2.5M traced
Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript, with approximately $2.5 million in assets traced to a suspected attacker wallet.
BleepingComputer ·
Leaked DHS employee archive, Icepick, faces challenges to stay online
A DHS contractor requested its removal, while a social media site blocked links to it. It was offline for a spell before finding a new home. The post Leaked DHS employee archive, Icepick, faces challenges to stay online appeared first on CyberScoop .
CyberScoop ·
Vulnerabilities
Cisco security advisory (AV26-1102) - Update 1
Serial number: AV26-1102 Date: October 29, 2026 As of October 28, 2026, Cisco is affected by a vulnerability in the following products: Cisco Secure Firewall Adaptive Security Appliance (ASA) Versions prior to 9.16.4.104, 9.18.4.96, 9.20.4.50, 9.22.3.200…
Canadian Centre for Cyber Security ·
Why CTF Competitions May Be More Important Than Ever
Dark Reading ·
GM settles with 36 states for selling driver data, agrees to $220 million fine and reforms
General Motors agreed to pay $220 million to settle a lawsuit filed by a coalition of 36 state attorneys general who alleged the company unlawfully sold information about driver behavior to outside parties.
The Record ·
Endpoint
Fake crypto app on Apple App Store linked to $23K wallet theft
A fake cryptocurrency trading app called Padre Terminal, previously available on the Apple App Store for iOS devices, has been linked to the theft of approximately $23,000 from 27 Solana wallets. [...]
BleepingComputer ·
Vulnerabilities
ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
The Hacker News ·
Cloud
484,142 Exposed Cloud Buckets Contain 18 Billion Files
42 publicly listable cloud buckets containing 18 billion files, including exposed credentials, database dumps and backups. The Ransomnews research team counted 484,142 publicly listable cloud storage buckets in October 2026, holding 18.05 billion files.
Security Affairs ·
A quiet week in infosec <.<
Cisco Talos ·
When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
SecurityWeek ·
AI
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user who reported a loophole in its free AI usage limits became the target of harassment, including comments encouraging suicide, from people who blamed the disclosure for cutting off their supply of free AI.
Socket Blog ·
Threat Intel
Federal bankruptcy courts contractor says no data stolen during cyber intrusion
"No data was extracted,” a spokesperson for BAE Systems, a federal contractor, told Recorded Future News about its probe into a cyberattack against its systems for federal bankruptcy courts.
The Record ·
Chrome extensions with 13.4 million installs caught hijacking searches
A massive search-hijacking campaign involving 319 Chrome extensions with a combined 13.4 million reported installations redirected users' searches through tracking servers to generate advertising revenue from Bing and Yahoo. [...]
BleepingComputer ·
AI
Tracking AI adoption in North Korean threat actor tradecraft
As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and efficiency of attacks, we’ve identified North Korean threat actors expanding their use of AI with varying levels of adoption.
Microsoft Security Blog ·
Governance
Cloud CISO Perspectives: Introducing new $250,000 tier for Google Cloud VRP (Q&A)
Google Cloud Security ·
Threat Modeling With 4 Simple Questions on a White Board
Dark Reading ·