The Cyber Newspaper — ba-cybersecurity.comhttps://ba-cybersecurity.com/news/feed.xml2026-11-08T21:06:00ZNobuo Otoi (ba-cybersecurity.com)https://ba-cybersecurity.com/Counts, tables and classifications: CC BY 4.0. Quoted titles remain with their owners.radar_feed.pytag:ba-cybersecurity.com,2026:news/2026-11-09The Cyber Newspaper 2026-11-09: A year of leaks in numbers, and AI attack infrastructure comes into view2026-11-08T21:06:00Z5 articles. Main topics:
- Japan Leaks Hit 376 Million Records Through October
- Japan's Ransomware Infection Rate Nearly Doubles in Two Years
- ARTEX AI Attack Platform: 1,465 Exposed Consoles
- Brenner Base Tunnel Company Confirms Unauthorized Access
- 47% of Leaders Report Sensitive Data Exposed Through AI Tools
Each article links to its sources; summaries can contain errors. Check the original source before acting.tag:ba-cybersecurity.com,2026:news/2026-11-08The Cyber Newspaper 2026-11-08: VPN MFA bypass and SSH authentication flaw now under attack2026-11-07T21:04:00Z7 articles. Main topics:
- SonicOS SAML Authentication Bypass Exploited, Added to KEV
- [Update] OpenSSH Flaw Exploited Less Than 9 Hours After Disclosure
- [Update] WorkOS Breach Traced to Runaway AI Testing Tool
- AI-Assisted Financial Attackers Target Holidays and Weekends
- AI Agents Hand Over Secrets When Peers Ask
- 99% of Repository Tokens Never Expire
Each article links to its sources; summaries can contain errors. Check the original source before acting.tag:ba-cybersecurity.com,2026:news/2026-11-07The Cyber Newspaper 2026-11-07: NAS and Switch Flaws, and Real Losses From AI Impersonation Fraud2026-11-06T21:03:00Z10 articles. Main topics:
- Attacks on QNAP NAS Devices via Plex Keep Coming
- AI Impersonation of CEOs Used to Steal $129 Million
- Multiple D-Link DGS-3130 Zero-Days Left Unpatched
- Apache OFBiz RCE Fixed in 24.09.08
- Fake Event Sign-Ups Used to Hijack Microsoft and Google Accounts
- Fake Security Tools Target Engineers
Each article links to its sources; summaries can contain errors. Check the original source before acting.tag:ba-cybersecurity.com,2026:news/2026-11-06The Cyber Newspaper 2026-11-06: A day when vendors and misconfigurations widened the damage2026-11-05T21:05:00Z11 articles. Main topics:
- OpenSSH Flaw Could Let Attackers Into Password-Disabled Accounts
- [Update] Amadeus Breach Hits More Than Six Airlines
- [Update] US Agencies Issue Advisory on Cooling-Equipment Attacks
- Old Apple Flaw Exploited, Added to KEV
- Serious Linux TCP Flaw Also Affects WatchGuard
- DigiCert Customer Data and ID Documents Viewed
Each article links to its sources; summaries can contain errors. Check the original source before acting.tag:ba-cybersecurity.com,2026:news/2026-11-05The Cyber Newspaper 2026-11-05: A day of intrusions through update channels and contractors2026-11-04T21:04:00Z11 articles. Main topics:
- WordPress Update RCE Flaw Added to KEV
- Zyxel Switch Zero-Day Bypassed Earlier Patch
- [Update] Binance Details How Attackers Got In
- [Update] Arkéa Confirms Attack Via Contractor
- DreamHost Exposes FTP Credentials
- Cyberattack Hits French Blood Service Refrigeration
Each article links to its sources; summaries can contain errors. Check the original source before acting.tag:ba-cybersecurity.com,2026:news/2026-11-04The Cyber Newspaper 2026-11-04: Watch for exposed admin consoles and hijacked AI billing2026-11-03T21:05:00Z8 articles. Main topics:
- LLM Hijacking Racks Up About $1 Million in Charges
- Android November Update Fixes 216 Flaws in Two Tiers
- Ransomware Hits UK Schools, AI Automation Suspected
- Over $46 Million Drained From Brazil's Largest Exchange
- School Software Maker Frontline Notifies Over 1.3 Million
- UK NCSC Warns of Unprecedented Rise in Cyber Incidents
Each article links to its sources; summaries can contain errors. Check the original source before acting.tag:ba-cybersecurity.com,2026:news/2026-11-03The Cyber Newspaper 2026-11-03: Watch remotely managed devices and outside vendors2026-11-02T21:04:00Z8 articles. Main topics:
- Second Wave Hits European Supermarket Freezers
- Crypto Thefts Hit Outdated BTCPay Servers
- [Update] Over 1,000 GitLab Servers Remain Unpatched
- [Update] Polymarket Probe Focuses on DNS Hijack
- Google Disrupts Botnet of Pre-Infected TV Boxes
- New Gang Claims 1.3 Million Records at Michigan State
Each article links to its sources; summaries can contain errors. Check the original source before acting.tag:ba-cybersecurity.com,2026:news/2026-11-02The Cyber Newspaper 2026-11-02: FBI Attributes Binance Heist to North Korea2026-11-01T21:14:00Z5 articles. Main topics:
- FBI Blames North Korea for Binance Theft
- Fake Help Desk Calls Succeed With Just a Name and Email
- Huntress Reports Intrusions via Camera Management Software
- Flaws Found in Browsers Built Into AI Coding Assistants
- Open-Weight AI Model Tops Attack Evaluation
Each article links to its sources; summaries can contain errors. Check the original source before acting.tag:ba-cybersecurity.com,2026:news/2026-11-01The Cyber Newspaper 2026-11-01: A sweep of secrets, and holes in the kernel and platforms2026-10-31T21:04:00Z8 articles. Main topics:
- Northflank Breach Exposes Secrets in Environment Variables
- Attackers Probe WordPress Update Mechanism Flaw
- TeamViewer Flaw Lets Remote Hosts Take Over Support Machines
- Android 'SMS of Death' Remains Unpatched on Older Versions
- Chainalysis Breached in AI-Agent Attack
- Revolve Card Theft Hit More Than 120,000 People
Each article links to its sources; summaries can contain errors. Check the original source before acting.tag:ba-cybersecurity.com,2026:news/2026-10-31The Cyber Newspaper 2026-10-31: Developer endpoints and third-party scripts are the way in2026-10-30T21:04:00Z9 articles. Main topics:
- Max-Severity GitLab Flaw Added to KEV After Exploitation
- Binance Suffers Largest Crypto Theft Ever, About $6.3 Billion
- Ivanti Connect Secure Hit by Three-Flaw Attack Chain
- Polymarket Funds Drained via Performance-Monitoring Script
- Fake Claude Code Extension on Cursor Planted SSH Backdoor
- Possible Comms Board in Wallet: Trezor Warns About Reseller
Each article links to its sources; summaries can contain errors. Check the original source before acting.tag:ba-cybersecurity.com,2026:news/2026-10-30The Cyber Newspaper 2026-10-30: Cisco VPN zero-day, and a Linux privilege-escalation deadline on the 31st2026-10-29T21:05:00Z10 articles. Main topics:
- Cisco ASA/FTD VPN DoS Flaw Under Active Attack
- Linux Privilege-Escalation Flaw Fragnesia Added to KEV, Deadline the 31st
- JPCERT/CC Updates PHP2Shell Advisory
- Low-Rated ESXi Bug Used as Zero-Day by China-Linked Group
- Sophos UTM Pre-Auth RCE; End-of-Life Units Need Manual Patch
- Windows Remote Desktop Failures Fixed
Each article links to its sources; summaries can contain errors. Check the original source before acting.tag:ba-cybersecurity.com,2026:news/2026-10-29The Cyber Newspaper 2026-10-29: PHP2Shell chain and Brotli exploitation put edge devices in the crosshairs2026-10-28T21:04:00Z12 articles. Main topics:
- PHP2Shell Chained With Linux Privilege Escalation to Seize Firewalls
- Brotli Flaw Added to KEV, Deadline Nov. 10
- Probing Begins Against Critical Oracle EBS Flaw
- So-net Member Database Breached, Over 2.58 Million Records Leaked
- JAL: About 92,000 People Affected via Reservation Platform Vendor
- Exposed Key Sat Unnoticed for 14 Months, Putting 238,000 at Risk
Each article links to its sources; summaries can contain errors. Check the original source before acting.tag:ba-cybersecurity.com,2026:news/2026-10-28The Cyber Newspaper 2026-10-28: GMO Extortion Prompts a Check of Operational Foundations2026-10-27T21:06:00Z10 articles. Main topics:
- GMO Reportedly Faces Demand for About $53 Million
- 11 Flaws Found in Tailscale SSH
- PAN-OS PHP2Shell Fixes Partly Released
- Cyberattack Hits University of New Mexico Hospital
- AI Development Environment Warp Breached
- Convertr Removes Skimmer, but Improved Version Came First
Each article links to its sources; summaries can contain errors. Check the original source before acting.tag:ba-cybersecurity.com,2026:news/2026-10-27The Cyber Newspaper 2026-10-27: PHP2Shell exploitation confirmed; emergency Brotli updates2026-10-27T01:13:00Z8 articles. Main topics:
- PHP2Shell Added to KEV After Exploitation Confirmed
- Microsoft Issues Emergency Patches for Brotli Flaw
- Apple Fixes Exploited Flaw in Older iOS Versions
- University of Copenhagen Breach May Affect 525,000
- DreamHost Forces Password Resets for All Email and FTP Users
- South Korea Busts Ring That Hit 90 Organizations With AI Tool
Each article links to its sources; summaries can contain errors. Check the original source before acting.