OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run 2026-11-05 78 Sinisa Markovic True A banking malware sample led researchers to an Android bug that can loop-crash phones 2026-11-05 65 Mirko Zorz True Healthcare can’t govern the AI tools it hasn’t found yet 2026-11-05 55 Anamarija Pogorelec True Russian hackers target iOS and Android users with n-day exploits 2026-11-04 85 Sinisa Markovic True Poisoned cPGuard update hits thousands of web hosting servers 2026-11-04 85 Zeljka Zorz True Open-source file sync tool rsync 3.5.2 fixes a CPU exhaustion flaw 2026-11-04 70 Anamarija Pogorelec True What AI-generated malware looks like under the microscope 2026-11-04 40 Mirko Zorz True Stolen AI access leaves companies with cloud bills of up to $1 million 2026-11-03 75 Sinisa Markovic True Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up 2026-11-03 88 Help Net Security True AI coding agents are installing MCP servers that will never be patched 2026-11-03 70 Mirko Zorz True CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) 2026-11-02 85 Zeljka Zorz True Google disrupts XCPE botnet, bans the company behind it 2026-11-02 80 Mirko Zorz True AI-powered infostealer picks out the most profitable parts of your stolen data 2026-11-02 75 Sinisa Markovic True Second wave of refrigeration cyberattacks hits European supermarkets 2026-11-02 70 Zeljka Zorz True Trezor warns some of its wallets may hide a seed-stealing implant 2026-11-02 75 Sinisa Markovic True Chainalysis breached using “offensive agentic techniques” 2026-11-02 60 Zeljka Zorz True FBI pins $6.3 billion Binance crypto heist on North Korea while scammers circle anxious users 2026-11-02 95 Sinisa Markovic True Ransomware gang talked AI agents into doing much of its dirty work 2026-11-02 78 Sinisa Markovic True Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability 2026-11-01 85 Help Net Security True Assad regime hacker who caused $136 billion market drop sentenced to 42 months 2026-10-30 85 Sinisa Markovic True Claude Code extension poisoned with persistent SSH backdoor 2026-10-30 75 Sinisa Markovic True Fake IT help desk callers got by on little more than names and email addresses 2026-10-30 72 Mirko Zorz True Scammers rebuild fake shopping sites within hours of a takedown 2026-10-30 65 Anamarija Pogorelec True Smart TVs can harbor unpatched security flaws and track what you watch 2026-10-30 60 Anamarija Pogorelec True Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls 2026-10-29 88 Zeljka Zorz True Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network 2026-10-29 90 Zeljka Zorz True Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767) 2026-10-29 85 Sinisa Markovic True Shame and sleepless nights haunt scam victims long after the money is gone 2026-10-29 25 Anamarija Pogorelec True Stolen staff logins are spreading attacks between K-12 school districts 2026-10-29 70 Mirko Zorz True Compromised camera management software gives attackers a way into corporate networks 2026-10-28 70 Zeljka Zorz True Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack 2026-10-27 75 Zeljka Zorz True AI coding agents fall for malicious instructions planted in the Downloads folder 2026-10-26 70 Sinisa Markovic True Synthetic identities leave US lenders with $2.4 billion in fraud exposure 2026-10-26 65 Anamarija Pogorelec True OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken 2026-10-25 45 Anamarija Pogorelec True Week in review: PHP vulnerabilities patched, exploited Palo Alto GlobalProtect VPN flaw 2026-10-25 78 Help Net Security True PHP2Shell: Critical PHP vulnerabilities patched, update now! 2026-10-21 92 Mirko Zorz True Info-stealing malware slipped into OVHcloud CLI releases on GitHub 2026-10-21 70 Sinisa Markovic True AOMEI Backupper servers hijacked for minutes at a time to push backdoor 2026-10-20 90 Zeljka Zorz True Quarantined, but still on your calendar: The explosion of invite-based attacks 2026-10-20 72 Zeljka Zorz True US Army is developing AI agents that could strike enemy networks and vanish without a trace 2026-10-20 70 Sinisa Markovic True ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access 2026-10-19 75 Zeljka Zorz True With open-weight AI, more of the security burden falls on enterprises 2026-10-19 55 Sinisa Markovic True Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks 2026-10-19 70 Anamarija Pogorelec True Ransomware pressure now reaches employees’ homes and families 2026-10-19 75 Anamarija Pogorelec True Week in review: Hidden implant in Ledger wallets linked to $93M theft, 1,500+ npm packages exposed 2026-10-18 75 Help Net Security True Hackers disguise phishing as promising business opportunities 2026-10-16 65 Sinisa Markovic True Scammers clone candidates’ voices to steal cash and voter data ahead of 2026 midterms, FBI warns 2026-10-16 50 Sinisa Markovic True Fake Arch Linux AUR packages exploit typos to run malware with root privileges 2026-10-16 75 Sinisa Markovic True Stolen AI API keys are paying for hackers’ autonomous scans 2026-10-16 75 Anamarija Pogorelec True DDoS attacks can knock services offline before links reach capacity 2026-10-16 72 Anamarija Pogorelec True 
