Cyber Security News

OpenAI has built Pando, a new Git backend, with Codex agents in just 10 weeks, replacing the system behind its main shared code repository without stopping engineering work. The company says agents now run around the clock to red-team both Git and Pando, testing the software that supports its growing AI-driven development workload. In its […]

The post OpenAI Builds Pando Git Infrastructure Using AI Agents and Deploys Continuous Security Testing appeared first on Cyber Security News.

North Korean hackers used a fake job interview, a poisoned coding task, and a hijacked internal AI tool to reach Binance’s wallet systems. The FBI says the North Korean group it calls “TraderTraitor” stole more than $6 billion in digital assets on 29 October 2026. Binance puts the impacted value at about USD 6.34 billion. […]

The post North Korean Hackers Abuse Internal AI Tool and Fake Job Interviews in $6.34 Billion Binance Heist appeared first on Cyber Security News.

Password manager mSecure has urged current and former customers to immediately protect passwords and other confidential information stored in its application after its maker, mSeven Software, detected suspicious activity. The warning also covers two-factor authentication methods and existing passkeys, making it broader than a routine password reset notice. In its customer email, mSeven said it […]

The post Password Manager mSecure Urges Users to Secure Logins and Confidential Data Stored appeared first on Cyber Security News.

A ransomware affiliate has hit a group of UK schools with a mix of human control and AI-style automation. The attackers used built-in Windows tools, stolen backup passwords and fake admin accounts to spread across the school network, then encrypted about 37 machines. The group behind the encryptor is 3AM, also written ThreeAM. It sells […]

The post Hackers Use AI Agents to Launch 3AM Ransomware Attacks Against UK School Networks appeared first on Cyber Security News.

Hackers have targeted supermarket refrigeration systems across at least 10 European countries, forcing retailers to remove chilled and frozen food from sale after temperature controls were changed. The attacks, reported on Monday, November 2, have raised concerns about the security of connected equipment across Europe’s food supply chain. Some stores reported settings or temperatures reaching […]

The post Hackers Target Supermarket Refrigeration Systems Across Europe, Raising Freezer Temperatures to 50°C appeared first on Cyber Security News.

Hackers targeted emergency alert apps in Ukraine and Russia late on November 1 and into November 2, sending false warnings about radiation, chemical threats, and nuclear strikes. The incidents disrupted trusted public safety channels during wartime. However, officials said the app breaches did not disable their wider warning systems. No independent report has linked either […]

The post Hackers Hijack Emergency Alert Apps in Ukraine and Russia to Send Fake Nuclear Attack Warnings appeared first on Cyber Security News.

AI-powered offensive frameworks are helping attackers move from stolen credentials to cloud privilege escalation, lateral movement, and data theft in minutes. Recent ARTEX campaigns show why organizations must rethink how they detect and stop automated intrusions. Cybercriminals and state-linked hacking groups are increasingly using an artificial intelligence-powered framework called ARTEX to automate complex attacks against […]

The post Hackers Use ARTEX AI to Automate Enterprise Attacks at Machine Speed – Insights for Defenders appeared first on Cyber Security News.

A security researcher has found a way to run any command with root rights on the navigation unit in a 2014 Renault Latitude. The unit is a TomTom Carminat LIVE head unit that runs a custom system built on Linux 2.6.28.10. The research was published on November 2, 2026, and it shows how old in-car […]

The post Renault Car’s 15-Year-Old Linux Navigation Software Hacked to Execute Arbitrary Root Commands appeared first on Cyber Security News.

Microsoft’s new research shows that attackers pick flaws that give them control of a system. About 78% of vulnerabilities exploited in real attacks let an attacker take over a system or raise their privileges. The finding comes from a data study published on November 2, 2026, by Microsoft Security Research. Software flaws keep piling up. […]

The post Microsoft Reveals 78% of Exploited Vulnerabilities Enable System Takeover and Privilege Escalation appeared first on Cyber Security News.

Hackers are distributing Yoba malware through fake ChatGPT and Claude downloads, pairing legitimate, digitally signed applications with malicious libraries. The campaign uses trusted software and GitHub hosting to make dangerous installers appear credible, ultimately deploying a cryptocurrency miner on compromised Windows computers. The attack does not require compromising OpenAI or Anthropic. Instead, criminals place malicious […]

The post Hackers Abuse Signed ChatGPT and Claude Applications to Deploy Yoba Malware and Evade Detection appeared first on Cyber Security News.

Brazilian cryptocurrency exchange Mercado Bitcoin suspended deposits and withdrawals on November 2, 2026, after detecting a security incident in one of its systems. Blockchain security firm Hypernative flagged more than $40 million in suspicious transfers across at least 10 blockchains, raising questions about the scope of the breach. The exchange has not confirmed that amount […]

The post Mercado Bitcoin Suffers Cyberattack as Researchers Flag $40 Million in Suspicious Crypto Transfers appeared first on Cyber Security News.

Miami, United States, November 2nd, 2026, CyberNewswire Prisma Browser for Business joins Guardz to connect browser protection with email, identity and endpoint security, helping security teams investigate and respond to threats across the workspace Guardz, the Agentic Workspace Security platform built for managed service providers (MSPs), today announced the integration of Prisma Browser for Business […]

The post Guardz Brings Palo Alto Networks Prisma Browser Protection to Small Businesses appeared first on Cyber Security News.

Older iPhones used to store cryptocurrency seed phrases could expose owners to physical attacks that airplane mode cannot stop. OneKey founder Yishi has warned that wiping an aging iPhone and keeping it offline does not make it a secure cold wallet. The concern involves BootROM flaws that let attackers run code before iOS starts. However, […]

The post Hackers Could Exploit iPhone BootROM Flaws to Compromise Cryptocurrency Wallet Security appeared first on Cyber Security News.

Hackers are using Microsoft Teams messages and voice calls to impersonate IT support staff, persuade employees to approve remote access, and move deeper into corporate networks. Two intrusions investigated by Microsoft show how a seemingly routine help desk conversation can lead to stolen data and access to highly privileged accounts. The attacks did not exploit […]

The post Hackers Using Microsoft Teams Messages and Calls to Trick Users and Gain Remote Access to System appeared first on Cyber Security News.

Northflank urged customers to rotate all platform secrets after reports of unauthorized AI API key use, warning that environment variables across workloads, secret groups, and global settings may have been exposed. Northflank is investigating a security incident involving reported misuse of AI keys but has not confirmed the entry point, identified an attacker, or disclosed […]

The post Northflank Security Breach Leads to Unauthorized AI API Key Usage, Customers Urged to Rotate Secrets appeared first on Cyber Security News.

A public proof-of-concept exploit for CVE-2023-21768 shows how attackers with local access can gain SYSTEM privileges through the Windows Ancillary Function Driver for WinSock. Researchers Valentina Palmiotti, known as chompie, and Ruben Boonen published the code. Their complete exploit targets vulnerable Windows 11 22H2 systems. The release concerns a vulnerability patched in January 2023, not […]

The post POC Released for Windows WinSock Ancillary Privilege Escalation Vulnerability appeared first on Cyber Security News.

Synology NAS devices are facing C3RB3R ransomware attacks linked to 2024 security flaws, prompting the company to urge users to update outdated DiskStation Manager versions and packages. The warning followed reports from the 360 Security Team and Solar Emergency Response Team on October 29. Victims found their files encrypted with the .L0CK3D extension and a […]

The post Hackers Exploit Patched Synology NAS Vulnerabilities to Deploy C3RB3R Ransomware and Encrypt Files appeared first on Cyber Security News.

Hackers are impersonating OpenAI in fake ChatGPT Plus billing emails that lead users to payment pages designed to steal credit card details and one-time passwords. The campaign combines convincing subscription warnings with a live operator who can decide when to request a verification code, potentially helping approve an unauthorized payment. The emails claim a subscription […]

The post Hackers Exploit ChatGPT’s Popularity With Fake Billing Notices That Target Credit Cards and OTPs appeared first on Cyber Security News.

Hackers are posing as trusted artificial intelligence bots to search websites for passwords, API keys, and cloud credentials. The campaign uses the names of ChatGPT, Claude, Perplexity, and other AI services to disguise automated scanning, testing whether businesses will let requests through simply because they appear to come from a familiar provider. The operation highlights […]

The post Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys appeared first on Cyber Security News.

Hackers are now using an AI-driven command framework called CyberStrikeAI to break into Windows networks and take over entire domains. Education organizations in Africa and Latin America were among the confirmed victims. The tool lets a language model decide which commands to run, so the operator no longer types each step by hand. CyberStrikeAI is […]

The post Hackers Use CyberStrikeAI Agents to Automate Windows Domain Takeovers and Credential Theft appeared first on Cyber Security News.