The last 30 days of cyber threats for education and government (360 items).
AI-assisted summaries and fixes, sources cited.
Medium · BleepingComputer ·
Reddit is moving toward requiring users to sign in, reducing what visitors can see without an account and limiting automated collection across the platform.
Informational · BleepingComputer ·
A capacity-building push focuses on teaching security skills, preparing aspiring vulnerability researchers, and adapting learning for an AI-driven era.
High · BleepingComputer ·
Chainalysis says unknown intruders reached internal systems and tools, exposing customer names, email addresses, user IDs and organizational roles; no CVE was cited.
Informational · The Hacker News ·
An unidentified outside party reached customer identity records through an internal Chainalysis tool in October 2026; the company says credentials were not compromised.
Medium · Cisco Talos ·
Talos details a malware operation that steals credentials, sessions, and crypto wallets, then uses language models to decide which victims matter most.
Informational · The Hacker News ·
Researchers found a ChatGPT weakness letting an attacker run code inside another person's signed-in session and reach conversations meant to be private; OpenAI fixed it eight days after the October 18 report.
Informational · The Hacker News ·
Cloudflare's Q3 2026 figures show about 18.2 million DDoS events and 14.4 trillion HTTP requests, with network-layer and application floods driving mitigation load.
Informational · Security Affairs ·
Check Point Research tracked the Yoba campaign for about two months, linking counterfeit AI-branded GitHub projects and signed installers to sideloaded malware and a cryptocurrency miner.
Informational · Dark Reading ·
A pitch event pairing founders with funders offered a read on where security investment is heading — a market signal, not a security incident.
Medium · The Record ·
A court advisory from Justice Department officials and U.S. Trustees raises concerns about how Character.AI conversation records could be sold, with a privacy ombudsman urging safeguards.
Informational · Dark Reading ·
Unknown attackers pushed a tainted add-on to Cursor users and activity involving the Claude Code extension on the same day, exposing developer machines in two related incidents.
Informational · Dark Reading ·
A recent law enforcement operation has shut down scam centers, and a threat intelligence expert briefing underscores the need for staff vigilance against fraud.
Informational · The Register — Security ·
Actors behind an extortion scheme directed more than $7,000 toward artificial-intelligence platforms and left behind traces, a case dated October 30, 2026 shows.
High · The Record ·
Resolve has disclosed a recent intrusion in which attackers accessed payment card information and exposed customer data; the number of affected individuals has not been specified.
Informational · Hackread ·
A flaw in TeamViewer is being used by attackers to execute arbitrary code, putting IT help desks and remote-support workflows squarely in the crosshairs.
Medium · The Hacker News ·
CrowdStrike reports that Vapor Panda and VexatiousTemper, linked to Chinese state interests, used AI-augmented testing and mass targeting against high-value global victims.
Informational · The Register — Security ·
General Motors will pay $220 million across multiple states to resolve allegations tied to how vehicle data was collected, a reminder for public-sector data governance.
High · The Register — Security ·
An unknown actor interfered with the Claude Code extension and Cursor editor in a focused supply-chain operation disclosed on October 30, 2026, while both vendors rejected culpability and blamed outside parties.
Medium · BleepingComputer ·
Trezor says credible reports indicate Safe 5 hardware wallets distributed through reseller CryptoBilis in Southeast Asia may have been tampered with, leading to cryptocurrency theft.
Informational · Dark Reading ·
Dark Reading reports researchers are assessing threat activity tied to Italy, but the overall risk picture remains undefined and no CVE identifiers are cited.
Medium · The Hacker News ·
A fixed TeamViewer issue from October 2026 allowed a compromised remote system to terminate the viewer application, with a possibility that code could run.
High · BleepingComputer ·
A rogue publisher pushed a tainted Claude Code add-on through Cursor's marketplace on October 29, exposing as many as 5,000 developers to backdoor SSH access for roughly 11 hours.
Informational · The Record ·
Ahmad Umar Agha, tied to the Syrian Electronic Army and the Th3Pr0 handle, was sentenced Thursday to 42 months for a conspiracy conviction involving attacks on Western targets.
Medium · Hackread ·
Unknown attackers are using a counterfeit GitHub repository to trick AI coding assistants into installing malware on developers' Windows machines and opening remote access.