The Cyber Newspaper — 2026-11-04

Watch for exposed admin consoles and hijacked AI billing

Front Page

Barracuda Flaws Let Attackers Take Root on Six Products — Attackers who can reach the admin interface can run commands as root on email security and other appliances. (BleepingComputer)
LLM Hijacking Racks Up About $1 Million in Charges — Google reports a growing practice of using stolen API keys and cloud credentials to run up other people's AI bills. (BleepingComputer)

Android November Update Fixes 216 Flaws in Two Tiers — Only the 2026-11-05 patch level or later includes every fix. No zero-days under active exploitation were reported. (SecurityWeek)

Ransomware Hits UK Schools, AI Automation Suspected — Bitdefender says commands in the 3AM attack on a UK school group were issued at regular intervals with slight variations. (BleepingComputer)
Over $46 Million Drained From Brazil's Largest Exchange — Mercado Bitcoin disclosed the incident on the 2nd and halted deposits and withdrawals. It says customer funds are safe, but experts dispute that. (The Record)
School Software Maker Frontline Notifies Over 1.3 Million — A flaw in third-party software led to an August breach that may have exposed Social Security numbers and more. (SecurityWeek)

UK NCSC Warns of Unprecedented Rise in Cyber Incidents — Its annual report warns that AI will exploit long-neglected vulnerabilities at scale. (The Record)
IPA Expands Help Desk for Personal Data Leaks — After a string of unauthorized-access cases, its consumer consultation line will take calls from people worried about leaks. (Security NEXT)