Major Security Breach Exposes Sensitive Data in Public GitHub Repositories
PremiumAnthropic's Claude Code 'Don't Ask Again' saved commands containing secrets to project files, exposing 1,122 public GitHub copies with credentials.
Monday, November 9
UK Government Sounds Alarm Over Cyber Threats to Critical Infrastructure
PremiumUK government warns of grave AI-driven and cyber risks to national critical infrastructure and urges preemptive measures.
Critical OpenSSH Flaw Affects Alpine Linux and OpenWRT
PremiumOpenSSH authentication bypass affecting musl libc combinations allows acceptance of certain long passwords, impacting Alpine and OpenWRT builds.
French Bank Suffers Massive $133 Million Cyber Heist
PremiumAttackers exploited a service provider to commit fraudulent transactions, resulting in up to $133 million theft from Crédit Mutuel Arkéa.
Urgent Call for Security Enhancements in Industrial Refrigeration Systems
PremiumFederal agencies and security researchers warn of refrigeration controller attacks impacting supermarkets and blood banks and publish hardening guidance.
SonicWall Fixes Critical SSL VPN Vulnerability Amid Exploitation Concerns
PremiumSonicWall patched SonicOS SSLVPN MFA bypass vulnerability (CVE-2026-19868) and strongly urged immediate upgrades.
OpenAI's GPT-6 Cyber Revolutionizes Vulnerability Detection
PremiumOpenAI's GPT-6 Cyber reportedly discovered 81 Firefox flaws and produced exploit code for hundreds of Linux bugs, raising dual-use concerns.
Chainalysis Cyber Breach: Customer Credentials Exposed in Multi-Front Attack
PremiumChainalysis reports a multifront attack exposed usernames, password hashes, and live tokens, disrupting services and forcing shutdowns.
Friday, November 6
Chainalysis Reports Data Breach Affecting All Users
PremiumChainalysis says user information for all customers was exposed after an attack employing agentic techniques, impacting law enforcement clients.
GhostMap Android Vulnerability Exploited to Trigger Device Boot Loops
PremiumGhostMap Android bug allows a crafted app to force devices into persistent boot loops without permissions or being opened.
CERT-In Uncovers AI-Driven Cyber Threats Compromising BFSI Sector
PremiumCERT-In warns AI-assisted Crafty Falcon attacks targeting BFSI and exposed ARTEX tools giving root-access to consoles.
OpsShield Breach: Malicious cPGuard Updates Impact Thousands of Servers
PremiumOpsShield disclosed malicious cPGuard updates distributed through a supply-chain compromise that backdoored customer systems.
Critical Flaws in Xen Hypervisor Demand Immediate Attention
PremiumTwo Xen hypervisor flaws allow a malicious guest VM to read and write other VMs' memory including dom0, requiring urgent patching.
Zero-Click Attacks Target iOS and Android Devices Using N-Day Exploits
PremiumReport details zero-click attacks leveraging n-day exploits to compromise iOS and Android devices without user interaction.
Binance Heist Exposes Vulnerability in Employee Security Protocols
PremiumBinance attributes its $6.4bn heist to months-long planning including fake interviews, compromised tooling and laptop infections.
Cyber Attack Alters French Blood Plasma Freezer Temperatures
PremiumAttackers altered temperature controls on blood plasma freezers via a cooling service provider, threatening stored transfusion products.
White House IP Addresses Misused for Anonymized Traffic Rental
PremiumResearchers found White House network IP addresses used as residential-proxy exits, enabling anonymized traffic rental and abuse.
Sogou Input Method Exploited by SlippyNunchucks in Cyberespionage Campaign
PremiumChina-aligned SlippyNunchucks abused Sogou Input Method to deploy DarkVigil backdoor to Windows victims across Asia.
IT Outage at NATS Disrupts Air Traffic, Costs Millions
PremiumIT failure at NATS air traffic services caused major disruption and an estimated 3m economic impact across UK transportation.
Cyber Heist at French Bank Highlights Vulnerability in Financial Systems
PremiumAttackers stole 33m from Credit Mutuel Arke9a by compromising an authorized third party and moving funds into crypto.
Get these articles delivered to your inbox.
Subscribe free