Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3578 articles
CrowdStrike plans to acquire Fiddler and add its AI-agent evaluation, behavioral monitoring and explainability tools to Falcon as Falcon Observe, which the company says is expected to be generally available in Q4 FY27.
CrowdStrike announced Falcon Guardian updates spanning endpoint, agent, and cloud security, including an available AI kill switch and Falcon AI Gateway, pre-beta Linux and Kubernetes coverage, and general availability of Falcon Complete for Guardian.
CrowdStrike plans to acquire Dreadnode and add its automated AI security testing to the Falcon platform. CrowdStrike says the tool will test AI systems with more than 50 attack techniques and is expected to be generally available in Q4 FY27.
CrowdStrike signed agreements to acquire Fiddler AI and Dreadnode, adding AI agent observability and predeployment security testing. It also announced an AI Kill Switch for stopping agents at runtime.
Authorities arrested seven people and seized more than 100 servers in a multinational takedown of an alleged investment scam. Europol said the scheme targeted potential victims in over 50 countries and caused estimated losses of at least $4.5 million.
Bitdefender says a 3AM affiliate’s attack on a UK school showed signs of an AI system handling repetitive commands and troubleshooting. Researchers could not access the attacker’s machine to verify AI use.
Google Threat Intelligence Group and Mandiant report that criminals resell stolen enterprise LLM access through underground “LLM mixers,” with victim charges topping $100,000 in a day and reaching $1 million before access was revoked.
Google's Cloud VRP now offers up to $250,000 for qualifying Root-in-Cloud flaws that enable full administrative control over arbitrary Google Cloud organizations or projects, subject to strict eligibility and testing rules.
Authorities from six European countries arrested seven suspects and seized more than 100 servers in a Europol- and Eurojust-supported investigation into a suspected fraud-service company linked to investment scams affecting victims in at least 50 countries.
After Mercado Bitcoin reported a November 2 hack draining an estimated $49 million across 17 blockchains, Chainalysis says its coordination with law enforcement and issuers helped freeze nearly $10 million, including over $9 million in USDT.
The FBI attributed a $6.43 billion Binance cryptocurrency theft to North Korean group TraderTraitor. The article says $2.85 billion was frozen on-chain and also lists numerous CVEs, including a pre-authenticated RCE in TightVNC.
Google says it disrupted a botnet affecting more than 1.3 million Android devices, mostly TV boxes, and accuses maker Videostrong of intentionally installing the x.cpe backdoor and selling criminal access.
Intrinsec says it has joined CrowdStrike’s Project QuiltWorks as an early European partner. The coalition addresses risks from frontier AI models, with Intrinsec contributing vulnerability triage, confirmation, AI-assisted remediation and ongoing exposure monitoring.
SecurityWeek tracked 37 cybersecurity M&A deals announced in October 2026, including acquisitions and proposed deals involving Absolute Security, Cohere, Hex-Rays, IonQ, Proofpoint and other companies.
Dream Research Labs reports DarkBlinders activity targeting Israel and Iraqi Kurdistan from August to October 2026, including reported compromises of a high-profile Israeli individual and a regional government cloud environment.
Malwarebytes researchers found underground sellers offering fake five-star reviews, review removal and proxy access; forum users discussed AI-generated reviews. Sellers claimed reviews could evade platform checks, with removal prices ranging from $100 to $1,100.
Retailers in Belgium, Luxembourg and Sweden reported overnight refrigeration disruptions, with temperatures reportedly reaching 50°C. NoName057(16) and Z-Pentest claimed responsibility, but the claims remain unverified and no entry point is known.
Google’s Cloud VRP now offers up to $250,000 for flaws enabling full control of arbitrary Cloud organizations or projects, with restrictions on exploit paths and testing against production systems.
Wiz describes Red Agent for validating exploitable risks before a breach and Blue Agent for investigating active threats using cloud, code, and runtime context. The article also outlines a pre-breach response workflow.
Malicious Claude Code extension versions 2.1.312 and 2.1.313 were available in Cursor’s marketplace for about 11 hours on Oct. 29. The code attempted reconnaissance and persistence; Cursor removed the versions and issued detection and response guidance.
DarkOwl’s roundup reviews eight security stories, including a Pentagon personnel-records breach, law-enforcement operations, attacks involving autonomous AI agents, and the Hirudo Android banking trojan.
Unit 42 reported that CL-UNK-1211 targeted government-linked Linux infrastructure from October 2025 to April 2026, using web shells, scripts suspected of AI generation, and SysGoRAT for persistence, reconnaissance and attempted data theft.
The FBI attributed the Binance theft to North Korean group TraderTraitor and flagged 628 cryptocurrency addresses. Binance and analytics firms described the investigation, recovery efforts and ongoing laundering activity.
Talos researchers say the VOLTA Windows infostealer collects credentials and personal data, then uses LLMs to rank victims’ assets by monetization value. It reportedly sends exfiltrated data over Telegram.
