Latest security news

Yesterday · Mon, 2 Nov 2026

1. 17:05
   Polymarket pledges to give $3.9 million back to victims after site compromise

   In a post-mortem on an October 29 incident, prediction market Polymarket said it will pay people back what they lost, as well as compensate them for the site's downtime.

   The Record
2. 16:44
   Thieves pilfer environment variables from Trigger AI workflow tool

   So, who's ready to clear the dust out of that server closet and move things back on-prem?

   The Register
3. 16:30
   Russia's statistics agency confirms cyberattack claimed by Belarusian and Ukrainian hackers

   An alliance of Belarusian and pro-Ukrainian hackers claimed to have taken out Russia's federal statistics agency, Rosstat, and stolen vast amounts of sensitive government data in a cyberattack.

   The Record
4. 16:16
   Barracuda Networks security advisory (AV26-1112)

   Serial Number: AV26-1112 Date: November 2, 2026 As of November 2, 2026, Barracuda Networks is affected by a vulnerability in the following products: Barracuda Email Security Gateway (ESG) Prior to 9.4.0.030 Barracuda Load Balancer Application Delivery Controller (ADC) Prior to 6.4.0 Barracuda Web Application Firewall (WAF) Prior to 11.0.1 Barracuda Web Security Gateway (WSG) Prior to 16.1.100.100 Barracuda Message Archiver (BMA) Prior to 5.5.4.0 Barracuda WAF Control Center (WCC) Prior to 2.2.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Pre-Authentication Authorization Bypass and Command Injection Vulnerabilities in Certain Barracuda Products — Updates Available Barracuda Product Security Advisories

   Canadian Centre for Cyber Security·Barracuda
5. 16:00
   Token thieves costing companies $100K+ per day in illicit LLM charges

   Don't let the LLMjackers hit you

   The Register
6. 15:57
   2nd November – Threat Intelligence Report

   For the latest discoveries in cyber research for the week of 2nd November, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Binance, a global cryptocurrency exchange, has suffered a cyberattack resulting in the theft of approximately $6.3 billion in digital assets. Attackers reportedly compromised a DevOps engineer’s laptop and abused internal wallet infrastructure

   Check Point Research·Exchange
7. 15:50
   Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access

   A botnet of more than 1.3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led by Google. Google says it is highly confident that device maker Videostrong intentionally put a backdoor in the boxes and sold access to criminals. They used the boxes for ad fraud and to pass other people's internet traffic through owners' home

   The Hacker News·Google, Android
8. 15:03
   BTCPay Server warns of hot wallet crypto thefts on outdated instances

   The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been draining "hot wallets" on instances running older versions.

   BleepingComputer
9. 15:01
   Cybersecurity M&A Roundup: 37 Deals Announced in October 2026

   Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint.

   SecurityWeek
10. 15:01
    Your Mobile Carrier Stores Your Call Logs for Years

    Mobile carriers can retain years of call and text metadata, exposing sensitive details about customers' relationships, locations, and daily routines if breached. Cape examines the privacy risks of long-term telecom data retention and how its mobile service reduces exposure by automatically deleting call records.

    BleepingComputer