Year: 2026

602/69 Wednesday, November 4, 2026 OpsShield, the developer of the cPGuard server security software, disclosed that attackers compromised the infrastructure used to distribute software updates. The attackers gained access through a user account whose credentials had been stolen or otherwise misused, then abused cPGuard’s official update channel to deploy malicious software onto customer servers. The […]

601/69 Tuesday, November 3, 2026 Synology has warned users of its Network Attached Storage (NAS) devices after detecting attacks that exploit vulnerabilities patched in December 2024 against systems still running older versions of DiskStation Manager (DSM). The attacks encrypt files and demand ransom payments. Reports from affected users have linked the activity to the C3RB3R […]

600/69 Tuesday, November 3, 2026 Reports have emerged of abnormal refrigeration system behavior at supermarkets across several European countries, with temperatures inside refrigerators and freezers rising unexpectedly and some incidents reportedly linked to cyberattacks. On November 2, 2026, retailers Ahold Delhaize and Colruyt disclosed IT incidents affecting refrigeration systems at dozens of stores in Belgium […]

599/69 Tuesday, November 3, 2026 Researchers from Cisco Talos have reported the discovery of a Windows information-stealing malware known as VOLTA, or VOLTA-AUTODOXER, which incorporates Artificial Intelligence (AI) into its operations. In addition to stealing personal, system, and financial information in a conventional manner, the malware uses Large Language Models (LLMs) to automatically assess the […]

598/69 Monday, November 2, 2026 Researchers have disclosed CVE-2026-58882, a vulnerability in Android’s telephony system referred to as “SMS of Death.” An attacker who knows a target’s phone number can send a specially crafted WAP Push message that causes the com.android.phone process to crash, temporarily disrupting cellular connectivity and terminating active calls. No user interaction […]

597/69 Monday, November 2, 2026 CISA added two security vulnerabilities affecting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) Catalog on October 30, 2026, after confirming that they had been exploited in the wild. The first, CVE-2026-111357 (CVSS 8.8), is a Missing Authentication for a Critical Function vulnerability that could allow an authenticated […]

596/69 Monday, November 2, 2026 Cybersecurity researchers from Kaspersky have disclosed a sophisticated campaign targeting government organizations in Asia. The attacks use a newly identified malware framework named NetamLoader to compromise specially customized Windows 10 systems deployed within government environments. Researchers believe the activity may be related to a supply chain attack, in which threat […]

595/69 Friday, October 30, 2026 Polymarket, an online prediction market platform, temporarily suspended trading on Polymarket.com on October 29, 2026, after discovering that a third-party service provider had been compromised and used to distribute malicious JavaScript. Polymarket switched the platform to cancel-only mode and suspended its relayer service while investigating the incident. The issue was […]

594/69 Friday, October 30, 2026 Cisco has disclosed CVE-2026-76418, a High-severity vulnerability with a CVSS score of 8.6 affecting Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software. The flaw affects the Remote Access SSL VPN service and could allow an unauthenticated attacker to send specially crafted requests that […]

593/69 Friday, October 30, 2026 The U.S. Federal Bureau of Investigation (FBI), working with international law enforcement agencies, has seized the primary domain of Virtualine, a bulletproof hosting provider allegedly used to support cybercriminal activity. The service also operated under the names Secury, Massgod, Spamhouse, Lanedo, and Omegatech, and advertised on cybercrime forums that it […]