AX·NEWS
Sign in

Cybersecurity

Cybersecurity news — Friday 30 October 2026

48 stories from 9 sources, every one in English. Each links to its publisher.

Open in the live feedRSS feedOn a TV

  1. China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days
    USCyberScoop

    A China state-backed threat group is using ARTEX, the automated agentic AI penetration testing framework, to achieve remarkable speed, scale and success in a campaign that already compromised about 140 sensitive targets in 11 days…

  2. Critical Linux kernel flaw allows remote root attacks on MPTCP servers
    USBleepingComputer

    Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners. [...]

  3. Friday Squid Blogging: Bigfin Squid Off California Coast
    USSchneier on Security

    Neat video : The sighting, announced September 2, marks the first time anyone has spotted a live bigfin squid, which belongs to the Magnapinna genus, in the northeastern Pacific Ocean. As usual, you can also use this squid post to talk…

  4. Android 17 adoption hits a staggering 1% – why you really should update now
    USZDNet Security

    Only a quarter of Android phones have even made it to Android 16.

  5. Samsung adds better sleep tracking to Galaxy Watches – here’s what to expect
    USZDNet Security

    The FDA-approved sleep apnea tracking feature will first come to the Galaxy Watch Ultra 2, Watch 9, and Ring.

  6. I’m finally ready for a smart calendar – why the Echo Show 16 stands out
    USZDNet Security

    I’m finally ready to upgrade to a smart calendar – and Amazon’s newest Echo device looks like an organizational solution for my family and I.

  7. Apple notifications alert victims in 99 countries about mercenary spyware infections
    USCyberScoop

    Apple has sent new notifications of mercenary spyware infections to almost 100 countries, with recipients including journalists and documentary filmmakers . “Today’s notification is being sent to targeted users in 99 countries, and to date…

  8. Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
    INThe Hacker News

    Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has been…

  9. Your Netgear router may be vulnerable to a security exploit – how to check and patch it
    USZDNet Security

    A vulnerability in some Netgear routers could allow an attacker with access to your network to run malicious commands on the device.

  10. Google’s latest Home updates just fixed my biggest annoyances with its speakers and cameras
    USZDNet Security

    Google details 42 fixes to its Home app and the devices compatible with it.

  11. California officials confirm grand jury subpoenas as states, civil groups brace to protect elections from federal encroachment
    USCyberScoop

    The Trump administration is taking direct aim at California state election officials, issuing grand jury subpoenas to election offices statewide ahead of the final day of voting on Nov. 3. The investigations, first reported by Bloomberg…

  12. Trezor warns of suspected crypto-theft implant in hardware wallet
    USBleepingComputer

    Hardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a Trezor Safe 5 sold by its reseller CryptoBilis in Southeast Asia. [...]

  13. Fake PDF and search tools hijacked searches for 13.4 million Chrome users
    USMalwarebytes Labs

    Ads promoted browser extensions as tools to find manuals, convert PDFs, or make searches safer. But many of these extensions sent users’ search queries through servers controlled by their operators. Socket researcher John Tuckner…

  14. Bloatware in Aftermarket Auto Parts
    USSchneier on Security

    This story is interesting: One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing…

  15. TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
    INThe Hacker News

    TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the viewer, and the machine…

  16. Defense contractor pleads guilty to aiding North Korean remote worker scheme
    USCyberScoop

    A defense contractor with top secret security clearance pleaded guilty to aiding North Korea’s remote worker scheme by allowing co-conspirators to use his identity to apply for jobs, including positions with national security implications…

  17. PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
    USSecurityWeek

    Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week. The post PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress appeared first on SecurityWeek .

  18. In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
    USSecurityWeek

    Noteworthy stories that might have slipped under the radar: Iran eyed in military freezer hacks, Copenhagen University breach, AI-powered malware. The post In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI…

  19. Malicious Claude Code extension on Cursor planted SSH backdoors
    USBleepingComputer

    A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH…

  20. Syrian hacker who served Assad regime gets 42 months in US prison
    USCyberScoop

    A Syrian man who prosecutors say was a central figure in a hacking operation run from former President Bashar Assad’s inner circle was sentenced Thursday to 42 months in federal prison. Ahmad Umar Agha, 42, carried out the conspiracy from…

  21. WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
    INThe Hacker News

    Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE identifier, relates to a case of remote code execution…

  22. SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone
    USBleepingComputer

    Flaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscribers without compromising their devices. Cape explains how these attacks exploit…

  23. Passkeys Are Better Than Passwords. But They Are Not Enough.
    USSecurityWeek

    As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it. The post Passkeys Are Better Than Passwords. But They Are Not Enough. appeared first…

  24. Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
    USSecurityWeek

    It allowed customers to host hack-for-hire services, supported ransomware and infostealer operators, and accepted crypto payments. The post Bulletproof Host Virtualine Loses Its Domain to FBI Seizure appeared first on SecurityWeek .

  25. CISA says max severity GitLab flaw now exploited in the wild
    USBleepingComputer

    Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA). [...]

  26. Photo ID, bank checks, face scan? The UK’s age-check options
    USMalwarebytes Labs

    As preparation for the UK’s planned social media ban, Ofcom has set out four ways social media platforms could check whether users are aged 16 or over. The government and Parliament will decide how the ban works in practice. Ofcom is the…

  27. Binance hit by largest-ever crypto theft, with $6.3 billion stolen
    USMalwarebytes Labs

    .kadence-column482616_9de20c-07 > .kt-inside-inner-col{padding-top:20px;padding-right:20px;padding-bottom:10px;padding-left:20px;}.kadence-column482616_9de20c-07 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm…

  28. Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis
    INThe Hacker News

    A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported. Trezor has not yet examined the device. It is telling…

  29. Fresh WordPress Vulnerability in Attackers’ Crosshairs
    USSecurityWeek

    Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution. The post Fresh WordPress Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek .

  30. Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving
    INThe Hacker News

    The alert is critical. The fix is known. And the ticket sits in a queue for days. Security teams understand the risk, but the people who keep applications available need proof that the change won’t break anything. Their concerns are…

  31. Hackers steal and publish data on 41,000 Homeland Security workers
    USMalwarebytes Labs

    .kadence-column482644_f2c16d-bc > .kt-inside-inner-col{padding-top:20px;padding-right:20px;padding-bottom:10px;padding-left:20px;}.kadence-column482644_f2c16d-bc > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm…

  32. Microsoft finally fixes VPN issues caused by September updates
    USBleepingComputer

    Microsoft has resolved Always On VPN connection failures triggered after installing the September 2026 Windows 11 security updates. [...]

  33. Drupal Commerce Core Vulnerability Exploited Against Online Stores 
    USSecurityWeek

    Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders. The post Drupal Commerce Core Vulnerability Exploited Against Online Stores appeared first on SecurityWeek .

  34. Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison
    INThe Hacker News

    Ahmad Umar Agha, a Syrian Electronic Army hacker known online as "Th3Pr0," has been sentenced by a U.S. federal court to 42 months in prison for his role in a hacking conspiracy that targeted Western news outlets. The conspiracy was…

  35. Drupal warns of critical Commerce Core flaw exploited in attacks
    USBleepingComputer

    Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild. [...]

  36. $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
    USSecurityWeek

    Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds. The post $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack appeared first on SecurityWeek .

  37. Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
    USSecurityWeek

    Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server. The post Max-Severity GitLab Vulnerability Exploited Against Alpine Linux appeared first on SecurityWeek .

  38. Binance links $6.3 billion crypto theft to compromised DevOps laptop
    USBleepingComputer

    Binance, the world's largest crypto exchange, has linked the theft of about $6.3 billion in cryptocurrency to a DevOps engineer's compromised laptop. [...]

  39. Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
    INThe Hacker News

    Cybersecurity researchers have disclosed that a trojanized version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, attempting to install a persistent SSH backdoor on…

  40. TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
    USSecurityWeek

    An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system. The post TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines appeared first on SecurityWeek .

  41. $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor
    USSecurityWeek

    Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop. The post $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor appeared first on…

  42. Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
    INThe Hacker News

    Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce…

  43. CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
    INThe Hacker News

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation. The…

  44. CrowdStrike Expands Falcon Adversary OverWatch Threat Hunting Across AI and Google Cloud
    USCrowdstrike Blog
  45. Build an Intelligence Advantage with Falcon Next-Gen SIEM
    USCrowdstrike Blog
  46. CrowdStrike Agent Graph Shows How Agents Act on the Endpoint
    USCrowdstrike Blog
  47. Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
    INThe Hacker News

    Cryptocurrency giant Binance said on Thursday that a "security incident" on its platform has impacted about $6.3 billion worth of assets. The world's biggest cryptocurrency exchange said nearly $3 billion of those assets have been frozen…

  48. ISC Stormcast For Friday, October 30th, 2026 https://isc.sans.edu/podcastdetail/10158, (Fri, Oct 30th)
    USSANS ISC