via SpecterOps
Mi Scusi, My SCSI: Abusing iSCSI Target Server
TL;DR – Enumerating the right connection strings lets you impersonate an iSCSI initiator and access whatever is stored on a…
1 min Open reportThreat Intelligence
via BleepingComputer
NIKKE PC game launcher hacked to spread remote access, data-stealing malware
The developers of Goddess of Victory: NIKKE have confirmed that hackers tampered with the game's PC launcher scripts in a…
1 min Open report
via ransomware.live
🏴☠️ Rhysida has just published a new victim : El Cajon, CA
El Cajon, CA LOT DESCRIPTION (brief) - U.S. municipal dump: police + 911 + production SQLWhat is for sale. Municipal government…
1 min Open report
via GuidePoint Security
The Third-Party Integrator Risk: OT’s Most Overlooked Attack Surface
The Third-Party Integrator Risk: OT’s Most Overlooked Attack Surface November 4, 2026 Austin Turecek BLOG 5 min. Industrial…
1 min Open report
via Dark Reading
Google, Partners Disrupts 1.3 Million-Device-Strong XCPE Botnet
Google alleges that Android device manufacturer Videostrong ran the operation, which infected set-top boxes and IoT devices with…
1 min Open report
via The Record
Ukrainian news outlet Kyiv Independent hit by suspected Russian cyberattack
A suspected Russian cyberattack disrupted the website of The Kyiv Independent, one of Ukraine’s leading English-language news…
1 min Open report
via Ars Technica
Binance says hackers who stole billions in crypto spent months planning heist
The hackers who stole billions of dollars in cryptocurrency from the Binance exchange spent months working on the theft and used…
1 min Open report
via BleepingComputer
mSecure password manager hack prompts password reset warnings
mSeven Software is warning current and former mSecure password manager customers to change passwords, reset two-factor…
1 min Open report
via Ubuntu Security
USN-8999-1: Pillow vulnerabilities
It was discovered that Pillow incorrectly handled map stride values when loading certain McIdas AREA images. An attacker could…
1 min Open report
via Canadian Centre for Cyber Security
[Control Systems] Phoenix Contact security advisory (AV26-1121)
Serial number: AV26-1121 Date: November 4, 2026 As of November 4, 2026, Phoenix Contact is affected by vulnerabilities in the…
1 min Open report
via BleepingComputer
Google Calendar phishing campaign hijacks sessions, bypasses MFA
A phishing campaign used Google Calendar invites, trusted redirects, and fake login pages to hijack corporate Google sessions and…
1 min Open report
via Infosecurity Magazine
China-Aligned Group Abuses Sogou Input Method to Deliver Malware
SlippyNunchucks used DNS hijacking to turn Sogou brand promotions into a malware channel
1 min Open report
via Canadian Centre for Cyber Security
HPE security advisory (AV26-1119)
Serial number: AV26-1119 Date: November 4, 2026 As of November 3, 2026, Hewlett Packard Enterprise (HPE) is affected by…
1 min Open report
via Help Net Security
Cycurion Habit verifies threats and validates fixes before closing cases
Cycurion has launched Habit, an AI-driven security operations center (SOC) built to identify threats before they disrupt…
1 min Open report
via Canadian Centre for Cyber Security
Google security advisory (AV26-1118)
Serial number: AV26-1118 Date: November 4, 2026 As of November 3, 2026, Google is affected by vulnerabilities in the following…
1 min Open report
via Help Net Security
Russian hackers target iOS and Android users with n-day exploits
Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and…
1 min Open report
via The Hacker News
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android…
1 min Open report
via Help Net Security
Live Q&A: CISSP exam prep with ISC2 experts
Join ISC2 on November 6, 2026 at 7:00pm CET for a live Q&A about the CISSP exam. A panel of experts will answer your questions…
1 min Open report
via SentinelLABS
VerifiedIDA | Making LLM-Driven Reverse Engineering Inspectable, Continuable and Reusable
Executive SummarySentinelLABS evaluated how frontier models reverse engineer binaries and annotate disassembler databases…
1 min Open report
via The Record
Cyberattack wipes cloud data at major Russian hosting provider Beget
A major Russian web hosting provider is struggling to restore its services after a cyberattack destroyed data across its cloud…
1 min Open report