Every notable cyber threat for education and government (125 items), including CVE references.
AI-assisted summaries and fixes, sources cited.
High · BleepingComputer ·
An internal DigiCert business platform was left reachable online during a server move, allowing unknown parties to access customer records and identity documents, the company says.
Medium · The Register — Security ·
A New Brunswick K-12 school district left a file share reachable by outsiders, exposing confidential documents and internal recipe files before the material was taken offline.
High · The Hacker News ·
New reporting ties Apache OFBiz remote code execution exploitation to data exposure, website takeovers, credential theft and patching delays.
High · The Register — Security ·
A privilege-escalation path in Anthropic's Claude Dispatch can be chained into remote command execution, letting attackers cross corporate boundaries — and no patch is coming.
Medium · SecurityWeek ·
Unknown intruders hit a French blood collection organization's site and remotely altered refrigeration at several European supermarkets this week, with no blood products reported affected.
Medium · Help Net Security ·
Scammers exploited Grand Theft Auto VI anticipation with fake leaks, early-access offers, and nonexistent mobile editions to spread malware and crypto fraud, Netcraft reported.
High · The Register — Security ·
Unknown attackers breached vendor Norad on Nov. 5, 2026, stealing data for every user and putting sensitive personal information at risk.
High · SecurityWeek ·
A Russia-aligned group is compromising websites to deliver mobile exploit chains against Apple iOS and Google Android, focusing on Ukraine while also hitting entities in the US and Europe.
High · Security Affairs ·
A Sekoia report attributes a broad mobile-focused operation to APT29, also known as Cozy Bear, Nobelium and Midnight Blizzard, using hijacked websites and a compromised analytics service to reach iOS and Android users.
Medium · The Hacker News ·
India's CERT-In says an AI-assisted group known as Crafty Falcon is backdooring consoles and a Docker image to gain root access at financial services organizations.
Medium · The Record ·
Unknown attackers breached blockchain analytics provider Chainalysis on Wednesday evening, exposing information tied to every user and prompting an alert.
High · Dark Reading ·
Attackers can abuse crafted image uploads in Ruby on Rails Active Storage with ImageMagick to write or read files and pivot across vulnerable servers, with no CVE assigned.
High · The Record ·
Amadeus IT Group disclosed a supply-chain compromise that exposed airline customer data across six carriers in Asia, including Japan Airlines, Cathay Pacific, Korean Air, Asiana, Singapore Airlines and Malaysia Airlines.
High · BleepingComputer ·
Unidentified intruders accessed DreamHost's File Manager and took login data for FTP/SFTP and webmail sessions over about two months, with no CVE assigned.
High · The Record ·
Unknown intruders used a compromised third-party supplier to move roughly $133 million out of Crédit Mutuel Arkéa accounts, highlighting vendor risk in financial services.
Medium · BleepingComputer ·
Unknown intruders changed temperature and defrost parameters on blood-preservation refrigerators across three facilities, creating potential risks for stored blood products.
High · BleepingComputer ·
Attackers altered scripts in the NIKKE PC launcher to deliver credential-stealing code, crypto-wallet drainers and remote-access malware through a trusted update path.
High · The Register — Security ·
A U.S. government IT help desk worker admitted copying classified files and transmitting them to Ethiopia over more than two years, facing at least 10 years.
Medium · BleepingComputer ·
A phishing campaign tracked as Operation CloudFire used calendar invites and fake login pages across nearly 900 domains to steal Google sessions and bypass MFA.
Medium · BleepingComputer ·
SonicWall has alerted users to a pair of defects in its Global Management System that remain without fixes, with risk heightened because the product is past end-of-life.
High · Help Net Security ·
Research tied to Sekoia says APT29 used tampered analytics code and fake domains to compromise iPhones and Android handsets starting in mid-October 2026.
High · The Hacker News ·
Sekoia ties a large-scale watering-hole and supply-chain operation to Russia-linked APT29, which abused a hijacked Plerdy SEO Tracker script to profile visitors and serve mobile exploits.
High · SecurityWeek ·
Attackers can combine authentication bypass and command injection in Barracuda ESG email gateway appliances to obtain root-level control, with no CVE identifiers assigned yet.
Medium · The Record ·
Intruders altered refrigeration temperature settings at three sites operated by France’s blood service, part of a wider campaign observed across Europe this week.