Cyber Daily News

Cyber Daily News for November 3rd, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk
https://www.securityweek.com/florida-student-aid-website-hack-puts-data-of-4-9-million-people-at-risk/
- Over 100 European Stores Hit as Supermarket Fridge Attacks Return
https://www.securityweek.com/over-100-european-stores-hit-as-supermarket-fridge-attacks-resume/
- VOLTA, the infostealer that asks an AI which victims are worth the effort
https://securityaffairs.com/202281/malware/volta-the-infostealer-that-asks-an-ai-which-victims-are-worth-the-effort.html
- Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward
https://www.securityweek.com/google-introduces-250000-root-in-cloud-bug-bounty-reward/
- UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028
https://www.securityweek.com/uk-cyber-chief-says-the-uk-will-face-ai-cyberattacks-on-critical-infrastructure-by-2028/

Cyber Daily News for November 2nd, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- FBI Attributes Binance Heist to North Korea’s TraderTraitor
https://www.infosecurity-magazine.com/news/fbi-attributes-binance-north/
- FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
https://www.securityweek.com/fbi-flags-over-600-addresses-tied-to-north-koreas-binance-heist/
- Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens
https://securityaffairs.com/202248/security/hackers-send-fake-nuclear-threat-alerts-to-ukrainian-and-russian-citizens.html
- Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques
https://securityaffairs.com/202241/ai/chainalysis-investigates-security-incident-involving-ai-driven-attack-techniques.html
- SMS of Death: Android under attack, an invisible SMS can block calls and emergency services
https://securityaffairs.com/202184/security/sms-of-death-android-under-attack-an-invisible-sms-can-block-calls-and-emergency-services.html

Cyber Daily News for November 1st, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
https://www.securityweek.com/max-severity-gitlab-vulnerability-exploited-against-alpine-linux/
- U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog
https://securityaffairs.com/202175/security/u-s-cisa-adds-ivanti-connect-secure-flaws-to-its-known-exploited-vulnerabilities-catalog.html
- NIK C2 Malware Can Use Victims' OpenAI Keys for AI Queries
https://www.infosecurity-magazine.com/news/nik-c2-malware-victims-openai-keys/
- 484,142 Exposed Cloud Buckets Contain 18 Billion Files
https://securityaffairs.com/202055/security/484142-exposed-cloud-buckets-contain-18-billion-files.html
- Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
https://www.securityweek.com/syrian-hacker-gets-prison-time-in-us-after-over-a-decade-on-the-run/

Cyber Daily News for October 31st, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- Fresh WordPress Vulnerability in Attackers’ Crosshairs
https://www.securityweek.com/fresh-wordpress-vulnerability-in-attackers-crosshairs/
- Attackers Exploit Critical Drupal Commerce Core Vulnerability
https://securityaffairs.com/202162/security/attackers-exploit-critical-drupal-commerce-core-vulnerability-cve-2026-118539.html
- Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries
https://securityaffairs.com/202149/malware/yoba-malware-hides-a-crypto-miner-behind-legitimate-openai-and-anthropic-binaries.html
- Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
https://www.securityweek.com/bulletproof-host-virtualine-loses-its-domain-to-fbi-seizure/

Cyber Daily News for October 30th, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor
https://www.securityweek.com/6-billion-binance-hack-bears-hallmarks-of-north-koreas-tradertraitor/
- $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
https://www.securityweek.com/2-million-drained-from-polymarket-traders-in-new-supply-chain-attack/
- US Probes Suspected Hack Behind Military Base Freezer Failures
https://securityaffairs.com/202073/hacking/us-probes-suspected-hack-behind-military-base-freezer-failures.html
- Hacker leaks data on more than 40,000 Homeland Security employees
https://securityaffairs.com/202103/data-breach/hacker-leaks-data-on-more-than-40000-homeland-security-employees.html
- TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
https://www.securityweek.com/teamviewer-flaw-could-let-malicious-hosts-take-over-support-technicians-machines/

Cyber Daily News for October 29th, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
https://www.securityweek.com/attackers-exploit-second-cisco-firewall-vpn-zero-day-since-august/
- CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers
https://securityaffairs.com/201928/security/cve-2026-97631-16-year-old-uefi-flaw-threatens-servers.html
- China-Linked Hackers Exploit PHP2Shell to Root Firewalls
https://www.securityweek.com/china-linked-hackers-exploit-php2shell-to-root-firewalls/
- HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
https://www.securityweek.com/hhs-filing-puts-irhythm-data-breach-toll-at-8-2-million/

Cyber Daily News for October 28th, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- Hackers Start Probing Fresh Oracle EBS Vulnerability
https://www.securityweek.com/hackers-start-probing-fresh-oracle-ebs-vulnerability/
- CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
https://www.securityweek.com/cisa-warns-of-node2shell-exploitation-as-honeypots-log-attack-attempts/
- Tailscale Rushes Patches After Uncoordinated Disclosure of 'Tailworm' Flaws
https://www.securityweek.com/tailscale-rushes-patches-after-uncoordinated-disclosure-of-tailworm-flaws/
- Italy's Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters
https://securityaffairs.com/201867/hacking/italys-parliament-under-cyber-pressure-why-the-attack-on-the-chamber-matters.html

Cyber Daily News for October 27th, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- Linux Flaws Exposed Before Fixes as Root Exploit Goes Public
https://www.infosecurity-magazine.com/news/linux-flaws-exposed-before-fixes/
- Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw
https://www.infosecurity-magazine.com/news/microsoft-patch-update-net-flaw/
- Magento Campaign Infects 953 Online Stores Across Five Domains
https://securityaffairs.com/201795/malware/magento-campaign-infects-953-online-stores-across-five-domains.html
- AI-Generated Fake Bank Calls and NFC App Enabled €380,000 Fraud, Dutch Police Say
https://securityaffairs.com/201786/cyber-crime/ai-generated-fake-bank-calls-and-nfc-app-enabled-e380000-fraud-dutch-police-say.html

Cyber Daily News for October 26th, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- Anthropic reveals how Claude Mythos 5 crossed security testing boundaries
https://securityaffairs.com/201729/ai/anthropic-reveals-how-claude-mythos-5-crossed-security-testing-boundaries.html
- AI coding agents hijacked using AGENTS.md file in Downloads folder
https://www.bleepingcomputer.com/news/security/ai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder/
- Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
https://thehackernews.com/2026/10/gheist-uses-stolen-github-tokens-to.html
- BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
https://www.bleepingcomputer.com/news/security/blackx-uefi-bootkit-exploits-baton-drop-flaw-to-bypass-secure-boot/

Cyber Daily News for October 25th, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- OpenAI Paused Frontier AI Training After a Security Incident
https://securityaffairs.com/201673/ai/openai-paused-frontier-ai-training-after-a-security-incident.html
- U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog
https://securityaffairs.com/201652/security/u-s-cisa-adds-collabora-online-flaw-to-its-known-exploited-vulnerabilities-catalog.html
- Token-Spraying Attacks Target Microsoft 365
https://www.infosecurity-magazine.com/news/tokenspraying-attacks-target/

Cyber Daily News for October 24th, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog
https://securityaffairs.com/201609/hacking/u-s-cisa-adds-arista-velocloud-orchestrator-flaw-to-its-known-exploited-vulnerabilities-catalog.html
- Meta Faces $25 Billion Penalty Linked to Cambridge Analytica Scandal
https://securityaffairs.com/201582/laws-and-regulations/meta-faces-25-billion-penalty-linked-to-cambridge-analytica-scandal.html
- Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
https://www.securityweek.com/mirai-botnet-operators-join-php2shell-attacks-as-aslr-bypass-exploits-emerge/
- The Cyber Express Weekly Roundup: ASD Retires the Essential Eight and More
https://thecyberexpress.com/weekly-roundup-php2shell-serengeti-iii/

Cyber Daily News for October 23rd, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- INTERPOL Operation Serengeti III Nets 1,462 Arrests and Recovers $105 Million in Cybercrime Crackdown
https://securityaffairs.com/201500/cyber-crime/interpol-operation-serengeti-iii-nets-1462-arrests-and-recovers-105-million.html
- Microsoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEX
https://securityaffairs.com/201501/apt/microsoft-links-connectwise-breach-to-china-linked-group-using-ai-pentesting-tool-artex.html
- Signal Vulnerability Could Keep Calls Alive After Users Hang Up
https://securityaffairs.com/201490/security/signal-vulnerability-could-keep-calls-alive-after-users-hang-up.html
- 11 Million Impacted by Capcom Data Breach
https://www.securityweek.com/11-million-impacted-by-capcom-data-breach/
- Quest Diagnostics Reports Cyber Breach Affecting 'Certain Patient Records'
https://www.securityweek.com/quest-diagnostics-reports-cyber-breach-affecting-certain-patient-records/

Cyber Daily News for October 22nd, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations
https://securityaffairs.com/201464/cyber-crime/fbi-and-cisa-warn-of-safepay-ransomware-attacks-on-600-organizations.html
- Symantec Uncovers AI Agent Hijacking Models for Autonomous Cyber-Attacks
https://www.infosecurity-magazine.com/news/symantec-ai-agent-llmjacking/
- New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity
https://www.infosecurity-magazine.com/news/new-phaas-uses-ai-phishing-lures/
- US Government Orders DeepSeek Out of Federal Civilian Systems
https://securityaffairs.com/201417/ai/us-government-orders-deepseek-out-of-federal-civilian-systems.html
- Russian Satellite Makes a Close Approach To A Commercial Radar Satellite Used by Ukraine
https://securityaffairs.com/201446/breaking-news/russian-satellite-makes-a-close-approach-to-a-commercial-radar-satellite-used-by-ukraine.html

Cyber Daily News for October 21st, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
https://www.securityweek.com/php2shell-mass-exploitation-looms-for-leaked-critical-php-flaws/
- Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI
https://www.securityweek.com/hijacked-developer-account-used-to-plant-stealer-in-ovhcloud-cli/
- NSO Spyware Pegasus Hit a Serbian University Rector Six Days Before Snap Elections
https://securityaffairs.com/201389/intelligence/nso-spyware-pegasus-hit-a-serbian-university-rector-six-days-before-snap-elections.html
- Nikkei data breach affected over 1.8 million records
https://securityaffairs.com/201369/data-breach/nikkei-data-breach-affected-over-1-8-million-records.html
- Accenture, Dragos, SANS Launch $10M Initiative to Defend Small US Utilities
https://www.securityweek.com/accenture-dragos-sans-launch-10m-initiative-to-defend-small-us-utilities/

Cyber Daily News for October 20th, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners
https://securityaffairs.com/201324/hacking/plex2shell-exploit-used-to-turn-vulnerable-plex-servers-into-crypto-miners.html
- Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks
https://www.securityweek.com/siemens-software-center-vulnerability-exploited-in-clickfix-malware-attacks/
- Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw
https://www.securityweek.com/drupal-warns-of-fast-exploitation-risk-for-critical-core-rce-flaw/
- Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack
https://www.securityweek.com/rank-math-pro-wordpress-plugin-compromised-in-supply-chain-attack/
- Microsoft Treats AI Agents as Insider Threats in New Security Framework
https://securityaffairs.com/201336/ai/microsoft-treats-ai-agents-as-insider-threats-in-new-security-framework.html

Cyber Daily News for October 19th, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- Japan's SiteGuard WAF flaw is already being exploited
https://securityaffairs.com/201258/security/japans-siteguard-waf-flaw-cve-2026-106931-is-already-being-exploited.html
- 16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password
https://securityaffairs.com/201268/iot/16-year-old-broadcom-wi-fi-bug-lets-attackers-take-over-routers-without-a-password.html
- MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks
https://www.securityweek.com/mitre-attck-v20-catalogs-ai-abuse-mfa-bypass-water-utility-attacks/
- Rust-Based CikaBika Bot Turns Discord into a Command Center
https://securityaffairs.com/201210/security/rust-based-cikabika-bot-turns-discord-into-a-command-center.html
- Anthropic Acquires Confidential AI Startup Opaque Systems
https://www.securityweek.com/anthropic-acquires-confidential-ai-startup-opaque-systems/

Cyber Daily News for October 18th, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns
https://www.infosecurity-magazine.com/news/china-actor-beyondtrust-flaw-google/
- France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack
https://www.infosecurity-magazine.com/news/france-expose-danfoss-controllers/
- North Korean IT Workers Used Stolen US Identities to Earn $3 Million
https://securityaffairs.com/201193/intelligence/north-korean-it-workers-used-stolen-us-identities-to-earn-3-million.html

Cyber Daily News for October 17th, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments
https://www.infosecurity-magazine.com/news/ransomware-threats-physical/
- AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns
https://securityaffairs.com/201130/ai/ai-agents-accessed-indian-organizations-without-authorization-cert-in-warns.html
- Burger King Japan Data Breach Impacted 11 Million Customers
https://securityaffairs.com/201119/security/burger-king-japan-data-breach-impacted-11-million-customers.html
- F5 addressed critical RCE flaws in NGINX
https://securityaffairs.com/201106/security/f5-addressed-critical-rce-flaws-in-nginx.html
- In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
https://www.securityweek.com/in-other-news-ics-sniper-attack-hacking-xworm-malware-operators-250k-chrome-exploit/

Cyber Daily News for October 16th, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- Cyber Incident at BAE Systems Disrupts US Federal Bankruptcy Noticing
https://www.infosecurity-magazine.com/news/cyber-incident-bae-us-bankruptcy/
- New Aoki Infostealer Targets AI Coding Assistant Credentials
https://www.infosecurity-magazine.com/news/aoki-infostealer-ai-coding/
- Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool
https://www.infosecurity-magazine.com/news/high-risk-vulnerabilities-llm-tool/
- CenterPoint Energy Data Breach: More Than 1 Million Texans Affected
https://securityaffairs.com/201054/cyber-crime/centerpoint-energy-data-breach-more-than-1-million-texans-affected.html
- Silent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and Government
https://securityaffairs.com/201003/apt/silent-lynx-kazakhstan-linked-hackers-target-russian-refinery-and-government.html

Cyber Daily News for October 15th, 2026

Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news

Stories mentioned in today's briefing:

- Microsoft Disrupts Global Yam Store Network Behind One Billion Phishing Messages
https://www.infosecurity-magazine.com/news/microsoft-yam-store-one-billion/
- Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise
https://securityaffairs.com/200985/security/cisco-urges-customers-to-patch-email-gateway-flaw-and-check-for-compromise.html
- ROMULUS Malware Server Leverages ClickFix to Deliver Multiple Payloads
https://www.infosecurity-magazine.com/news/romulus-malware-clickfix-deliver/
- Microsoft Patch Tuesday Sets New Record with 1,415 CVEs in October 2026 Updates
https://securityaffairs.com/200953/security/microsoft-patch-tuesday-sets-new-record-with-1415-cves-in-october-2026-updates.html
- Hidden Audio Recorder Found at OpenAI as Employee Faces Federal Charges
https://securityaffairs.com/200933/cyber-crime/hidden-audio-recorder-found-at-openai-as-employee-faces-federal-charges.html