The last 30 days of cyber threats for education and government (359 items).
AI-assisted summaries and fixes, sources cited.
Informational · BleepingComputer ·
Telecom operators and vendor Cape are tied to extended retention of phone records, creating privacy risks from inferred relationships and locations across years of metadata.
Medium · The Register — Security ·
Public alert channels for Kherson were taken over and used to push intimidating notices to civilians when a ceasefire lapsed, with attribution still unresolved.
Medium · The Record ·
Apple has notified customers across 99 nations that their devices may be targets of mercenary spyware, with no CVE tied to the campaign.
Informational · The Record ·
A cyber group reportedly breached Ukrainian and Russian emergency alert platforms over the weekend, pushing fabricated nuclear alerts and retaliatory intrusions.
Medium · BleepingComputer ·
Cyber intruders changed refrigeration settings at supermarket chains across several European countries, disrupting store operations and manipulating temperature controls.
Informational · Help Net Security ·
Delhaize, Carrefour and Spar stores in Belgium, Luxembourg and Sweden reported warming and spoiled food after attackers remotely forced refrigeration into defrost mode on 2026-11-02.
Informational · Hackread ·
FortiGuard Labs reports BITTER APT luring South Asian organizations with counterfeit diplomatic paperwork, then using Windows shortcut files and PowerShell to deploy PapRAT spyware.
Informational · Dark Reading ·
A suspected India-aligned threat group is running an espionage operation against South Asian targets, using PapRAT and built-in Windows capabilities across three intrusion paths.
High · SecurityWeek ·
Intruders reached Revolve’s online storefront and took customer records plus payment card details tied to roughly 180,000 individuals, raising fraud and compliance concerns.
Informational · SecurityWeek ·
Google has created a reward program for researchers who demonstrate how attackers could seize complete administrative control of its cloud environment, with a top payout of $250,000.
Medium · The Register — Security ·
Attackers remotely triggered defrost cycles across supermarket refrigeration units in Europe, spoiling food and causing water damage at dozens of locations.
Medium · The Record ·
A second wave of temperature-control interference at European grocery sites has left retailers dealing with spoiled perishables and unanswered questions about access.
Informational · Help Net Security ·
SatoshiLabs warned that a subset of Trezor Safe 3, Safe 5 and Safe 7 devices purchased through reseller CryptoBilis since March 2026 may contain hidden hardware built to capture recovery phrases.
Informational · Security Affairs ·
Refrigeration equipment at several supermarkets in five European countries appears to have been remotely manipulated on a Monday in November, raising temperatures and spoiling food.
High · The Hacker News ·
IBM's Langflow releases 1.0.0 through 1.12.8 have an authentication bypass that can lead to arbitrary code execution and server takeover; version 1.13.0 is the fix.
High · The Register — Security ·
On Nov. 2, 2026, the FBI attributed a Binance crypto-exchange theft to North Korean actors, with $6.3B involved and billions in customer withdrawals.
High · Help Net Security ·
Blockchain analytics provider Chainalysis has disclosed that outside parties broke into its corporate environment and in-house applications, exposing data; the scope remains undisclosed.
Medium · The Hacker News ·
A 2026 Prophet Security poll of over 250 security executives shows widespread AI use, but readiness for SOC operations and rollout planning remains uneven.
High · SecurityWeek ·
An unknown adversary delivered a malicious extension into a Cursor IDE and Anthropic Claude Code workflow, prompting host discovery and an attempted reverse SSH tunnel.
High · SecurityWeek ·
Chainalysis says unidentified intruders used AI-assisted, agentic offensive methods to reach company systems and in-house tools, resulting in a data breach.
Medium · Security Affairs ·
Unidentified intruders took control of civil emergency notification apps and pushed invented warnings to residents in both countries late Sunday, raising panic and trust-erosion worries.
Informational · Help Net Security ·
The FBI says North Korean actors and scammers stole more than $6.3 billion in virtual assets, prompting a late-2026 alert aimed at Binance account holders.
High · SecurityWeek ·
An unknown attacker altered DNS entries tied to Polymarket, affecting one customer, while roughly $3.9 million in trader money was returned after the compromise.
High · SecurityWeek ·
The FBI has attributed a large cryptocurrency theft and laundering operation to North Korea’s TraderTraitor and flagged 600 addresses tied to about $6 billion in stolen funds.