Attacks, investigations and decisions shaping the industry.
SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. [...]
BleepingComputer
WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing environment and unintentionally attacked the company. [...]
BleepingComputer
The UK is betting on domestic AI and cyber investment to reduce reliance on US tech — but security leaders question whether the funding is too fragmented and too late.
Dark Reading
The case, brought by AGs in Connecticut, New Jersey, New York and Michigan, targeted the medical transcription, coding and imaging subsidiaries of the Nevada-based Perry Johnson Companies.
The Record
Cybersecurity professionals are being targeted with infected security projects on GitHub that deploy a backdoor and information stealer malware. [...]
BleepingComputer
The NIKKE PC launcher has loaded a1900 from the CDN of Level Infinite: remote control, theft of secrets and cryptos. Here's what we need to check. The NIKKE post: the PC version of the game trapped to install a formidable personal,194 has been published on IT-Connect.
IT-Connect
The emergency package comes after dozens of companies and government agencies were hit by unauthorized access to their systems and leaks of client data, prompting uneasiness across Japan. The post Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks appeared first on SecurityWeek.
SecurityWeek
Security records are increasingly being used by vendors to train their models, creating new risks for enterprises.
Dark Reading
QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center, as hackers are exploiting the Plex2Shell vulnerability chain. [...]
BleepingComputer
Patrick Steven Yaroch, 37, is facing up to 20 years in prison on wire fraud and money laundering charges after admitting to using his position on an FBI investigative squad to steal more than $2.4 million in cryptocurrency to cover his debts.
The Record
A week of "Black November" behind us, and already some nice business at Amazon, the Fnac, Boulanger or Darty. We've sorted out, and this live is enriched every day with our new finds.
Numerama Tech
Some WordPress sites can still be attacked while they install the fix for an actively exploited flaw, according to Umut Bayram, the Picus Security researcher who found it. The update that installs the fix still unpacks its files using the site's old, unpatched code, so an attacker who strikes at the right moment can run code on the server. The researcher advises blocking web access to the
The Hacker News
Veeam warned customers about boot failures affecting Software Appliance virtual machines (VMs) on hosts with AMD EPYC processors. [...]
BleepingComputer
IMSI and IMEI are IDs your phone shares with networks. Learn how they differ, how attackers get them, and why rotating your IMSI blunts tracking. [...]
BleepingComputer
Deep-Live-Cam is an open source tool that can replace a face live during a video (Tilles, Zoom, etc.) from a single photo. The post deep-Live-Cam: this open source tool from deepfake changes your face from a photo has been published on IT-Connect.
IT-Connect
OpenAI on Thursday unveiled GPT‑6 Cyber, which it described as a major step forward in security research that brings together stronger cybersecurity capabilities with a step-change improvement in model alignment. The new model is "more capable at finding and fixing vulnerabilities, and far more reliable staying within the boundaries researchers set," OpenAI said. It has classified the model as
The Hacker News
Noteworthy stories that might have slipped under the radar: Synology warns about NAS ransomware attacks, Flowise ‘hello’ attacks, Chainalysis breach impact expands. The post In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days appeared first on SecurityWeek.
SecurityWeek
The U.S. is working on extraditing three suspects from Europe in a case involving more than $100 million in fraud from CEO impersonations.
The Record
Europe's supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale.
Dark Reading
Launched on November 1, the Singles Day 2026 continues until November 18, with a new opportunity to take advantage of discounts on thousands of products, especially in high-tech. Smartphones, consoles, audio headsets, connected objects or accessories: there are many promotions, but not all are worth it. Numerama selects the good plans that really deserve the detour, a
Numerama Tech
[Deal of the Day] Apple's first-ever Apple p-session iPhone Duo is already cheaper at Amazon. The 1TB version is up to €2,780.10, compared to €3,089 usually, saving €308.90.
Numerama Tech
Rated Critical for cybersecurity, OpenAI’s new model beats GPT-5.6 Cyber at exploitation while staying in scope more reliably. The post OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line appeared first on SecurityWeek.
SecurityWeek
The recommendations come amid attacks targeting fridges and freezers in supermarkets and blood banks in Europe. The post US Agencies Urge Organizations to Harden Refrigeration Controllers appeared first on SecurityWeek.
SecurityWeek
The October incident will cut fourth-quarter sales by up to €250 million and has led Ahold Delhaize to lower its 2026 outlook. The post Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack appeared first on SecurityWeek.
SecurityWeek
D-Link shared mitigation measures for multiple unpatched security flaws affecting DGS-3130 series managed Gigabit stackable switches. [...]
BleepingComputer
