-
Thousands of GCHQ storage devices remain unaccounted for, according to the Investigatory Powers Commissioner’s Office (IPCO). Its 2025 annual report says the UK intelligence agency cannot immediately locate the items, some of which may contain sensitive information. Regulator identifies gaps in device tracking The equipment includes USB sticks, external hard drives, compact discs, memory cards…
-
The FBI has attributed the Binance attack to North Korean hackers after more than $6.3 billion in cryptocurrency disappeared on October 29. Binance said it had reserved over $6.34 billion to cover losses and began gradually restoring withdrawals on November 1. Compromised laptop provided initial access Binance’s initial investigation linked the theft to a compromised…
-
ARTEX AI attacks targeted more than 200 organisations across 14 countries in a campaign that began on October 17. CrowdStrike researchers attributed the operation to a China-linked group called Vapor Panda, which compromised at least nine organisations. Vapor Panda targets government and industry The campaign targeted government ministries, telecommunications providers and organisations across the pharmaceutical,…
-
A Sageworks outage disrupted lenders after Abrigo detected irregular activity and took the platform offline on October 30. By November 2, the company had restored most functions, although borrower-facing features remained unavailable. Abrigo shuts down platform to investigate Abrigo disabled Sageworks at approximately 11:25 a.m. Eastern Time on Friday after identifying suspicious activity in its…
-
Google and its partners have disrupted the XCPE botnet, which infected more than 1.3 million Android TV streaming boxes. In its November 2 announcement, Google accused Chinese manufacturer Videostrong Technology Co. of deliberately installing malware during production and selling access to criminal affiliates. Google bans manufacturer following investigation Google said it attributed the operation to…
-
BTCPay Server thefts have prompted an urgent update warning after attackers drained cryptocurrency from hot wallets on outdated installations. On November 2, the project confirmed an attack vector affecting version 2.4.1 and earlier, urging operators to upgrade to version 2.4.7. Attackers access older installations The project began receiving reports of unauthorised Bitcoin and Litecoin payments…
-
Supermarket refrigeration attacks have affected more than 115 stores across six European countries after hackers remotely altered cooling settings. The incidents forced some retailers to discard food and call managers into stores during the early morning hours on November 2. Attackers switched off refrigeration units or activated defrost functions, allowing temperatures to rise. However, investigators…
-
Microsoft has fixed a Smart App Control issue that prevented some Windows 11 users from enabling the security feature. The problem followed the October 2026 KB5127648 security update and affected devices running Windows 11 version 24H2 and later. Update Left the Security Setting Unavailable On affected computers, Windows Security displayed a greyed-out option for enabling…
-
A critical GitLab RCE flaw remains unpatched on more than 1,000 internet-accessible servers despite ongoing attacks. Shadowserver reported the exposure after GitLab released security updates on October 12, leaving administrators with an urgent patching priority. GitLab RCE Flaw Affects Pipeline Configuration Processing The vulnerability, tracked as CVE-2026-97229, involves an integer overflow in GitLab’s CI/CD Regular…
-
Synology has warned customers that C3RB3R ransomware attackers are targeting NAS devices running outdated DiskStation Manager software. The company urged users to install updates immediately after identifying attacks that exploit a vulnerability it patched in December 2024. Attackers Exploit an Older DSM Security Flaw According to Synology, the attackers aim to encrypt stored data and…