Cybersecurity news — Thursday 05 November 2026

Malwarebytes Labs 22:18 UTC

A caller offers you a free phone upgrade or an exclusive deal from your mobile provider. A new phone arrives at your home. So far, everything seems to check out. Then comes another call: There’s been a shipping mistake. You received the…

Malwarebytes Labs 22:06 UTC

Players of Goddess of Victory: NIKKE are being urged to check their PCs after attackers tampered with files used by the game’s Windows launcher. Opening the launcher could allow malicious software to run, potentially exposing much more…

Malwarebytes Labs 21:34 UTC

When your pet goes missing, it can be totally heartbreaking. So hearing that they’ve been found is no doubt very welcome news. Even better to see a photo of them looking safe and well. But while the photo may look exactly like your pet…

BleepingComputer 21:30 UTC

Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to steal Microsoft and Google account credentials and authentication…

BleepingComputer 20:15 UTC

Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid. [...]

BleepingComputer 19:24 UTC

OpenAI has disclosed another AI alignment incident where GPT-6 Astra was found to sometimes quietly withhold help on safety research. [...]

CyberScoop 19:22 UTC

The government needs to invest in digital forensics to keep pace with incidents and threats in cyberspace, the principal cyber adviser for the Department of the Air Force said Thursday. “In order to detect, help us hunt and find where the…

ZDNet Security 18:44 UTC

Most HR professionals say they believe employees can be reskilled for AI jobs, yet companies still often seek outside hires. Here’s why.

ZDNet Security 18:18 UTC

If you’re a new Pixel 11 user, here are six things I recommend changing right away to get the most from your phone.

ZDNet Security 18:00 UTC

Anthropic has released what appears to be its answer to ChatGPT Finances.

ZDNet Security 17:46 UTC

Bluetooth Core 7.0 could make your smart home devices easier to set up, for one. Here’s what we know about the new core specification.

BleepingComputer 17:45 UTC

A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication, simply by entering an oversized password…

SecurityWeek 17:32 UTC

An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million. The post AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research appeared first on SecurityWeek .

CyberScoop 17:00 UTC

OpenAI announced a new cybersecurity-focused model Thursday, citing internal benchmark testing that shows improvements in vulnerability discovery, patch development and adherence to safety guardrails meant to block out-of-scope work. GPT-6…

The Hacker News 16:42 UTC

Attackers can log in to accounts that have no password, such as SSH key-only accounts, on some Alpine Linux servers running the standard openssh-server package. They need network access to the server, an account name, and a password…

The Hacker News 16:42 UTC

Cybersecurity researchers have disclosed details of a now-patched vulnerability that could be exploited to bypass Lockdown Mode protections in OpenAI ChatGPT. Lockdown Mode was introduced by the artificial intelligence (AI) company in June…

BleepingComputer 16:24 UTC

A new Linux malware called CWPdoor is being distributed through a trojanized version of cwpsrv, the web server behind the Control Web Panel (CWP) management interface. [...]

BleepingComputer 16:12 UTC

DigiCert warns it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information and identity documents. [...]

ZDNet Security 16:08 UTC

The wait is over for trying Siri AI on iOS 27. Here’s what you need to know to get started.

SANS ISC 15:29 UTC

This morning, I was browsing our honeypot data for any new and existing PHP exploit attempts. Instead, I first ran into some GeoServer exploits, but found them to be too boring to write up. This Cisco IOS exploit attempt was a bit more…

BleepingComputer 15:00 UTC

Attackers target IT service desks to bypass MFA by impersonating employees and convincing staff to reset passwords or register new authentication devices. Specops Software explains why traditional identity verification methods are no…

The Hacker News 14:41 UTC

How much damage can someone do without breaking much? Quite a lot, it seems. A stolen login can open doors across several systems. A trusted setting can be used to lock people out. Even a simple file copy can reach places it shouldn't. And…

SecurityWeek 13:22 UTC

More than 200 sites were seen serving phishing content to first-time visitors but not to those who revisit. The post Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns appeared first on SecurityWeek .

SecurityWeek 12:58 UTC

The incident comes after supermarkets in a number of European countries reported this week that their fridges and freezers warmed up after they were remotely hacked. The post Cyberattack Hits French Blood Bank Site but No Blood Products…

SecurityWeek 12:33 UTC

Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws. The post Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws appeared first on SecurityWeek .

The Hacker News 12:25 UTC

A critical finding can move through several security tools and still leave the organization exposed. The vulnerability has a severity score, and a ticket has reached the queue. Progress then depends on information the finding may lack: who…

Malwarebytes Labs 12:10 UTC

.kadence-column484998_59baca-d5 > .kt-inside-inner-col{padding-top:20px;padding-right:20px;padding-bottom:10px;padding-left:20px;}.kadence-column484998_59baca-d5 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm…

SecurityWeek 11:15 UTC

Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter. The post The Agent Smith Dilemma: Governing Agentic Identities appeared first on SecurityWeek .

SecurityWeek 11:00 UTC

Ryan Davis went from hacking his school’s network to running security at New Charter Technologies. What worries him now is shadow AI. The post CISO Conversations: Ryan Davis – The Unknown Is Where Security Meets Reality appeared first on…

SecurityWeek 10:56 UTC

Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests. The post Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day appeared first on…

SecurityWeek 10:37 UTC

The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine. The post Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes appeared first on SecurityWeek .

The Hacker News 10:06 UTC

October 2026 brought another wave of cyber threats targeting US businesses, with attackers exploiting trusted platforms, legitimate authentication processes, and everyday business workflows. For enterprises, these campaigns raise the…

SecurityWeek 10:02 UTC

OpenAI says its Critical-rated cyber model met fewer hidden task goals when work was framed as AI safety research, often silently. The post OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks appeared first…

BleepingComputer 09:18 UTC

Attackers can force Android devices into a continuous boot loop using a specially crafted app that requires no permissions and only needs to be installed. [...]

The Hacker News 09:13 UTC

Apple has revealed that it plans to start checking public iCloud links for harmful content starting with iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3. The change specifically applies to scenarios where users share iCloud content…

The Hacker News 08:42 UTC

The Indian Computer Emergency Response Team (CERT-In) has disclosed that an artificial intelligence (AI)-assisted threat actor it tracks as Crafty Falcon is targeting organizations in the Banking, Financial Services, and Insurance (BFSI)…

The Hacker News 07:06 UTC

Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found. The exploit lets anyone who can reach a switch's web management…

The Hacker News 05:17 UTC

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06386v1 Announce Type: new Abstract: Fault-resistant policy storage does not guarantee fault-resistant enforcement. We demonstrated this distinction on the RP2350A4 using differential photon-emission microscopy (PEM) and laser…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2602.01932v3 Announce Type: replace Abstract: Matter is the latest interoperability standard for the consumer Internet of Things (IoT) market, developed by the Connectivity Standards Alliance (CSA). Matter's design pays particular…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2604.27202v2 Announce Type: replace Abstract: As LLMs are increasingly integrated into systems that browse, retrieve, summarize, and act on web content, webpages have become an untrusted input vector for downstream model behavior…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2610.39509v3 Announce Type: replace Abstract: Large language models (LLMs) deployed in safety-critical settings must resist adversarial inputs designed to elicit harmful outputs. We present a systematic empirical evaluation of five…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2606.23496v2 Announce Type: replace-cross Abstract: Discrete text-trigger optimization -- searching for text sequences that, when ingested by a model, steer it toward a specified objective -- underpins model red-teaming (e.g., LLM…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.05573v1 Announce Type: new Abstract: \emph{Trapdoored matrices} are pseudorandom matrices admitting a fast matrix-vector multiplication algorithm given the secret key. We study a candidate family of such matrices: matrices…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.05660v1 Announce Type: new Abstract: Authentication solutions are the key design, architectural, and implementation decisions that implement authentication security controls. An example is a password-based authentication…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.05779v1 Announce Type: new Abstract: Users can inadvertently increase their vulnerability to privacy attacks by oversharing personal information. In particular, the combination of individually innocuous attributes can place a…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.05781v1 Announce Type: new Abstract: Continual model updating has become a common practice in the deployment of machine learning systems. However, the dynamic training behaviors give rise to new risks not sufficiently addressed…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06034v1 Announce Type: new Abstract: People, companies and software agents often must work on shared records even when they do not trust each other. Today they usually give those records to a central server. The server keeps the…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06039v1 Announce Type: new Abstract: Web agents commonly follow the ReAct paradigm, selecting each action from runtime observations that inherently mix trusted and untrusted content. This design makes their control flow…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06197v1 Announce Type: new Abstract: Web tracking studies largely rely on automated crawlers, yet their measurements can differ from what people encounter while browsing. Conventional crawlers follow predefined navigation rules…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06225v1 Announce Type: new Abstract: 5G networks increasingly resemble distributed systems in their design. It then becomes crucial to move beyond traditional network-based detection methods and to explore alternative…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06257v1 Announce Type: new Abstract: Open-weight language models that fit on a single consumer GPU are becoming capable on a growing range of tasks, and they matter because they can run locally without sending the code to a…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06268v1 Announce Type: new Abstract: Sybil defenses price the creation of an identity, yet influence goes, again and again, to active identities. We study the cost of maintaining influence. A defense has a bilinear Sybil cost…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06342v1 Announce Type: new Abstract: The records that could train the most useful models, such as a hospital's patient files, are often the ones an institution cannot share. We propose CoRTeC, a method that releases synthetic…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06477v1 Announce Type: new Abstract: Early assessment of Common Vulnerability Scoring System (CVSS) vectors from Open Source Intelligence (OSINT) can reduce the delay between initial public disclosure and official National…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06788v1 Announce Type: new Abstract: Embodied Internet of Things (IoT) systems are promoting the adoption of task-oriented semantic communication (SemCom), in which the trustworthy task decisions require both semantic…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.05509v1 Announce Type: cross Abstract: Device-independent conference key agreement (DI-CKA) allows a group of users to establish a common secret key without trusting the internal operation of their quantum devices. Existing…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.05695v1 Announce Type: cross Abstract: The real--ideal paradigm, an approach to security specification developed in the cryptography community, has the benefit that it can express sophisticated confidentiality and integrity…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.05722v1 Announce Type: cross Abstract: Most quantum-computer security work targets physical-layer attacks on qubits, while two surfaces remain inadequately defended: the quantum-error-correction (QEC) syndrome-and-decoder…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06082v1 Announce Type: cross Abstract: Fast adversarial training (FAT) makes robust training affordable by replacing the multi-step attack with a single-step one, but it suffers from catastrophic overfitting (CO): partway…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2502.04953v2 Announce Type: replace Abstract: Static analysis techniques are often insufficient to determine whether a reported security vulnerability is exploitable and actually poses a real security risk to a software application…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2508.12035v3 Announce Type: replace Abstract: In recent years, generative artificial intelligence (GenAI) has demonstrated remarkable capabilities in high-stakes domains such as molecular science. However, challenges related to the…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2512.10485v4 Announce Type: replace Abstract: Vulnerability detection methods based on deep learning (DL) have shown strong performance on benchmark datasets, yet their real-world effectiveness remains underexplored. Recent work…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2606.28079v4 Announce Type: replace Abstract: The rapid proliferation of automated, multi-vector malware threats poses a significant risk to heterogeneous, resource constrained cyber-physical networks. Conventional epidemiological…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.05746v1 Announce Type: new Abstract: Security Operations Centers (SOCs) must identify real threats from large alert streams, but limited analyst capacity means that unnecessary escalations can delay more serious investigations…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.05816v1 Announce Type: new Abstract: Blockchain-based peer-to-peer (P2P) energy markets let neighbors trade directly, but concentrate unchecked power in the clearing operator. Most prior work addresses only part of this…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.05971v1 Announce Type: new Abstract: Advances in CPU and GPU confidential computing enable confidential AI, allowing LLMs to process user prompts without exposing them to service providers or infrastructure operators. However…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06103v1 Announce Type: new Abstract: Sensors bridge the physical and digital worlds, making their integrity critical to cyber-physical system security. Existing sensor attacks largely exploit unintended and sensor-specific…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06138v1 Announce Type: new Abstract: Modern LLM serving systems manage the KV cache through PagedAttention, a custom GPU allocator that partitions a single CUDA-allocated region into fixed-size physical blocks and maps each…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06173v1 Announce Type: new Abstract: Deploying an explainable intrusion detection model from a validated laboratory setting into a forensic workflow requires guarantees that benchmarks do not test: that the certified model is…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06286v1 Announce Type: new Abstract: The web cannot tell whether a request comes from a person or from a program. Sites have checked the network address and puzzles in its place, and both have given way: automated traffic…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06498v1 Announce Type: new Abstract: Offline retrieval-augmented generation (RAG) on edge devices is updated through signed knowledge packs that carry text and precomputed embedding vectors. A signature proves who published a…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.05582v1 Announce Type: cross Abstract: Data tends to be most useful when it is shared, and the data most worth sharing is often the data that privacy obligations restrict. Synthetic data from a generator trained under…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.05985v1 Announce Type: cross Abstract: Two-message quantum key exchange (2QKE) cannot be realized in a statistically secure way, and therefore some computational assumptions are required. So far, the known weakest assumption for…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2611.06124v1 Announce Type: cross Abstract: Interactive hashing, introduced by Ostrovsky, Venkatesan, and Yung [OVY93], is a building block in many cryptographic protocols, including perfectly hiding commitments from one-way…

arXiv cs.CR (Security) 05:00 UTC

arXiv:2403.15191v5 Announce Type: replace Abstract: Cross-chain transactions today remain slow, costly, and fragmented. Existing custodial exchanges expose users to counterparty and centralization risks, while non-custodial liquidity…

Krebs on Security 04:36 UTC

Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today. One of the proxy services is…

The Hacker News 04:31 UTC

OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2 million in API costs. "Our prototype…

ZDNet Security 02:35 UTC

It starts with a surprise version number: Linux Mint 27 instead of 24. But the next release brings far more changes than that.

Recorded Future 00:00 UTC

Ensuring that there are "humans in the loop" is the gold safety standard for making sure artificial intelligence (AI) agentic systems act safely, ethically, and legally. However, as automated processes accelerate and scale, humans lose the…