⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
Some attacks this week didn't need much of a trick. A fake support call, a trusted extension, a shared link, or a device with no password. Small things that people barely think about. Yet each was enough to cause serious trouble. Then there were the bigger messes. Billions stolen, hidden networks of hacked devices, poisoned software, and attackers finding new ways to turn normal tools against…
We summarise and link; this source is not one we hold a licence to reproduce. Everything below is what CyberBrief adds: the vulnerabilities involved, whether they are being exploited, who is named, and who else covered it.
Fastnexa security experts
Dealing with this in your own company?
If this story touches software, suppliers or systems you use, a Fastnexa security expert can tell you what it means for you and what to do first.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Coverage
One outlet has carried this so far.
2026-11-02 16:57 UTC
Related stories
- Max-severity bug in widely used OT programming tool exploited to deliver Linux malware
The Register · 2026-11-02
- Cops bust botnet of 1.3M infected Android TV boxes
The Register · 2026-11-02
- Fintech platform Sageworks taken offline after suspected cyberattack
BleepingComputer · 2026-11-02
- Google disrupts million-device XCPE Android malware botnet, bans TV box maker
BleepingComputer · 2026-11-02
- Russia's statistics agency confirms cyberattack claimed by Belarusian and Ukrainian hackers
The Record · 2026-11-02