MyCyberWayNewsroom

1. 13 NovFriday

   Cyber security

   Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters

   Climate change is the issue. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

   Schneier on Security

2. 13 NovFriday

   Cyber security

   FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’

   Federal officials have yet to say what caused the communications disruption or whether they are investigating a possible cyberattack.

   SecurityWeek+1 source

3. 13 NovFriday

   Nation-state

   North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure

   The DOJ seized over $1.2 billion from North Korea ‘s Binance theft, and says the same hackers are targeting open-source developers The U.S. Department of Justice announced two separate but connected actions against North Korea ‘s cryptocurrency theft operations. The press release covers the seizure of…

   Security Affairs+1 sourceT1684.001Impersonation

4. 13 NovFriday

   Attacks

   Industry guidelines for offensive cyber tools unveiled through international Pall Mall Process

   The United States this week signed on to an international set of industry standards for commercial offensive cyber tools that human rights groups and other advocates wish had been stronger. The Pall Mall Process voluntary industry guidelines for commercial cyber intrusion capabilities (CCICs), such as spyware,…

   CyberScoop

5. 13 NovFriday

   Phishing & scams

   Customers Still Want Human Service. Here’s How Small Businesses Can Benefit

   AI chatbots are becoming a familiar part of customer service, and customers are increasingly comfortable using them. But research shows an important distinction: people are happy to use AI for routine questions, product information, or tracking orders. When they have a problem, need advice, or want…

   Bitdefender

6. 13 NovFriday

   Data breaches

   City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents

   Osaka, Japan's third-largest city, told its 2.8 million residents to be wary of suspicious emails purporting to come from the local government.

   The Record

7. 13 NovFriday

   Attacks

   NYC to bar surveillance pricing as momentum for bans grows nationwide

   The New York City government will be able to fine companies $1,000 for each verified instance of surveillance pricing.

   The Record

8. 13 NovFriday

   Attacks

   German military drone operations disrupted by cyberattack

   German defense technology company Quantum Systems confirmed that it detected an incident in late October that was part of an active cyberattack by "hostile actors."

   BleepingComputer

9. 13 NovFriday

   Attacks

   University of Texas at Arlington warns personal information stolen during cyberattack

   In a statement to Recorded Future News, a spokesperson said an investigation into the attack confirmed the stolen data but declined to say what information was obtained by the threat actors.

   The RecordT1567Exfiltration Over Web Service

10. 13 NovFriday

    Malware & exploits

    PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE

    A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, along with 51 other security flaws. Full protection from this flaw also requires rebuilding any C-language extensions installed on the server. The…

    The Hacker NewsT1190Exploit Public-Facing Application

11. 13 NovFriday

    Cyber security

    ChatGPT Wallet lets agents pay without seeing your card number

    OpenAI began rolling out ChatGPT Wallet, which lets ChatGPT agents pay for purchases with a stand-in card number, so the user’s card details are not shared with the agent or the merchant. OpenAI built it with American Express, Mastercard, and Visa. It runs inside dots, where…

    Help Net Security

12. 13 NovFriday

    Ransomware

    DOJ: Gootloader used in at least 44 ransomware attacks costing $29 million since 2018

    In a briefing adjacent to European announcements about an international anti-malware operation, U.S. officials detailed the history and impact of the Gootloader ransomware.

    The RecordT1486Data Encrypted for Impact

13. 13 NovFriday

    Nation-state

    US cracks down on North Korean cryptocurrency-theft scheme, recovers more Binance funds

    Federal agents used court orders to chip away at North Korea’s cyberattacks.

    Cybersecurity Dive

14. 13 NovFriday

    Cloud

    56 AWS API calls in 141 milliseconds: Inside an AI-run intrusion

    A CyberStrikeAI server spent 16 days in four AWS accounts using eight identities, and the CloudTrail record shows why six detection rules each caught only part of it.

    Elastic Security Labs

15. 13 NovFriday

    Attacks

    New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs

    Two attacks made public this week allow a malicious host to read data inside AMD SEV-SNP-protected virtual machines (VMs), which are built to keep the server's operator out. One of them, Mior, can also modify a VM's memory and fake the signed report confirming which software…

    The Hacker News

16. 13 NovFriday

    Attacks

    How one AI agent exposed five critical enterprise security gaps

    An AI agent built to automate invoice processing could be manipulated into changing vendor bank details through a malicious email, without triggering traditional security alerts. Token Security examines five critical AI agent security gaps and shares practical guidance from industry security leaders on preventing them.

    BleepingComputerT1566Phishing

17. 13 NovFriday

    Cyber security

    Fake GTA 6 download goes after Steam logins and crypto wallet data

    Cynet researchers followed a “GTA 6 EXE file download” link from a Google Colab notebook to a ZIP archive and found a WARDEN Stealer loader inside. The malware takes saved passwords, browser cookies, Steam and Roblox credentials, and cryptocurrency wallet data from the machine it runs…

    Help Net Security

18. 13 NovFriday

    Nation-state

    US freezes billions stolen by North Korean hackers in Binance heist

    US authorities have frozen billions in cryptocurrency stolen by North Korean hackers, while dismantling a separate operation that used deepfake video calls to steal hundreds of millions more. The US Justice Department has announced a major crackdown on North Korea's cryptocurrency theft operations, securing court authorization…

    BitdefenderT1684.001Impersonation

19. 13 NovFriday

    Data breaches

    Hospitals, airlines and governments hit by Microsoft outage as employee risk warnings mount

    Sheriff’s offices, courts, state agencies and hospitals lost email as the Microsoft 365 failure ran past 12 hours. The bigger risk for insurers may be what staff did to keep working. An insurance perspective on the outage from Insurance News. From a post by Matthew Sellers:…

    DataBreaches.net

20. 13 NovFriday

    Data breachesUK

    Crackdown on UK medical record snooping after staff reported sneaking 300+ times this year

    Carly Page reports: Britain’s privacy watchdog has put healthcare bosses on notice after receiving more than 300 reports of staff snooping through medical records this year, demanding that executives personally confirm they’re doing enough to keep prying eyes out of patient files. The Information Commissioner’s Office…

    DataBreaches.net

21. 13 NovFriday

    Data breaches

    Over 144,000 Norwegian and Widerøe passengers affected by data breach

    The following is an automated translation of an article that originally appeared in Norwegian. Helge Aadland Carlsen and Martin Gundersen report: Information about 144,249 passengers at Norwegian and Widerøe has been leaked in connection with the data breach at the Spanish IT provider Amadeus. This is…

    DataBreaches.netT1199Trusted Relationship

22. 13 NovFriday

    Nation-state

    FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls

    The U.S. Federal Bureau of Investigation (FBI) has established that threat actors tied to the Democratic People's Republic of Korea (DPRK aka North Korea) have stolen more than $400 million worth of cryptocurrency as part of a social engineering scheme codenamed FaceStealer in the last 18…

    The Hacker NewsT1684.001Impersonation

23. 13 NovFriday

    Ransomware

    Ransomware attack on Belarusian cloud firm disrupts businesses for days

    ActiveCloud said hackers had breached its systems and encrypted parts of its cloud infrastructure, leaving customers unable to access key services for several days.

    The RecordT1486Data Encrypted for Impact

24. 13 NovFriday

    SOC & SIEM

    GeoVision Camera Software Abused to Deploy XMRig Cryptominer

    Attackers abused publicly exposed GeoVision camera software at 13 organizations, tried to disable Defender, and deployed XMRig. Get the IoCs and next steps.

    Huntress

25. 13 NovFriday

    Cyber security

    Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases

    Three Trezor Safe 5 wallets bought from the reseller CryptoBilis contain an implant, an extra circuit board that can copy their recovery phrases, hardware wallet maker Trezor said yesterday. The implant reads the phrase from the wallet's screen and sends it over the mobile network to…

    The Hacker News+1 source

26. 13 NovFriday

    Microsoft

    Microsoft Struggles to Restore Email and Other Services in a Global Outage

    Microsoft is trying different ways to identify the cause of the problem and get its servers back online, using “a measured approach to identify and repair affected infrastructure.”

    SecurityWeek

27. 13 NovFriday

    Microsoft

    Microsoft’s latest email outage turned into a full blown global cloud crisis

    Microsoft's day-long outage began with Outlook and Teams, and ended up taking much of the company's cloud services offline. Microsoft says it's gradually restoring service.

    TechCrunch

28. 13 NovFriday

    Data breaches

    Attackers in Binance Breach Targeted Known Weakness, Missing Controls

    Blockchain complexities, such as attacker-deployed sweepers, hobble security controls designed to limit the damage of an exchange compromise.

    Dark Reading

29. 13 NovFriday

    Data breaches

    Apify Confirms Customer Data Accessed in Cyberattack

    The web scraping company says an intruder accessed customer accounts and obtained personal information or stored data.

    SecurityWeek

30. 13 NovFriday

    Microsoft

    Microsoft says November security updates cause printing issues

    Microsoft warned customers earlier this week that the November 2026 security updates may break printing for documents with complex formatting.

    BleepingComputer

31. 13 NovFriday

    Cyber security

    When an AI Agent Goes Wrong, Can You Stop It?

    Suppose an AI agent is asked to sort support tickets and look up account details. A ticket contains instructions that lead the agent to export records to an unfamiliar destination. The agent can make the request because its identity has access to the records and its…

    The Hacker News

32. 13 NovFriday

    Cyber security

    Apple details Secure Exclaves, isolated runtimes for camera and microphone data

    Apple published details of Secure Exclaves, a security architecture designed to protect camera and microphone data during background processing. Apple says data processed and analyzed within Secure Exclaves cannot be accessed by the main operating system, apps, or the company itself. The company uses Secure Exclaves…

    Help Net Security+1 source

33. 13 NovFriday

    Identity

    SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users

    A newly identified spying group used hacked equipment inside Asian mobile operators to intercept the calls and texts of selected people, mostly in Taiwan. Enea, a telecom and cybersecurity software company based in Stockholm, found the group's attack sources in at least six Asian countries and…

    The Hacker News+1 source

34. 13 NovFriday

    Law & courts

    354 dark web vendors and buyers arrested in Operation TorNado

    Europol and police in 14 countries arrested 354 dark web vendors and buyers in Operation TorNado, which ran from May 2025 to October 2026. Investigators went after people who had traded on five marketplaces that were already offline: Archetyp, Bohemia, Nemesis, Kingdom and Tor2Door. Seized money…

    Help Net Security

35. 13 NovFriday

    Zero-daysExploited

    Check Point warns of zero-day flaw exploited for root access

    Check Point Software has released emergency hotfixes to address a high-severity flaw that hackers have been exploiting to gain root privileges and establish persistence on vulnerable devices since late October.

    BleepingComputerT1190Exploit Public-Facing Application

36. 13 NovFriday

    Phishing & scams

    GTA VI isn’t out yet – and the scams are already in full swing

    Cybercriminals attempt to cash in on the hype around the game, luring fans with malware-laced downloads and ‘early access’ that doesn’t exist…

    ESET WeLiveSecurity

37. 13 NovFriday

    Microsoft

    Microsoft confirms Windows activation failures after November updates

    Microsoft has confirmed that this month's Patch Tuesday security updates are causing Windows activation and licensing failures with 0x80041008 error codes.

    BleepingComputer

38. 13 NovFriday

    Malware & exploits

    OpenAI’s Daybreak brings AI agents to security testing and vulnerability fixes

    OpenAI is bringing AI agents into more of the software security process with Daybreak, pairing web application penetration testing with tools that investigate vulnerabilities and develop fixes. The two offerings, Red Team and Defense Factory, connect the work of finding security weaknesses with patching and retesting…

    Help Net Security

39. 13 NovFriday

    AI for defence

    OpenAI Unveils Daybreak Red Team, Defense Factory Security Tools

    Daybreak Red Team pentests web applications with AI agents, while Defense Factory investigates security findings and prepares patches.

    SecurityWeek

40. 13 NovFriday

    Microsoft

    Microsoft outage: Impact shows risk of M365 bundle lock-in

    The Microsoft 365 suite provides everything from office productivity to cyber security tools. Should organisations rethink their Microsoft strategy?

    Computer Weekly

Nothing under this filter in the latest stories – try another.