PhishingThe Hacker News⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and MoreSome attacks this week didn't need much of a trick. A fake support call, a trusted extension, a shared link, or a device with no password. Small things…Read on The Hacker NewsDDoSThe Hacker NewsGoogle Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal AccessA botnet of more than 1.3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led by Google. Google…Read on The Hacker NewsSecurity newsSecurityWeekCybersecurity M&A Roundup: 37 Deals Announced in October 2026Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint. The post Cybersecurity M&A Roundup: 37 Deals Announced in October 2026 appeared first on…Read on SecurityWeekAI securityDark ReadingMicrosoft's AI Risk Report Misses This Key DetailThe latest "Digital Defense Report" identifies government agencies as prime targets for AI attacks but doesn't mention that they are broadly being targeted through Microsoft bugs.Read on Dark ReadingSecurity newsThe Hacker NewsDarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud EnvironmentCybersecurity researchers have disclosed details of a cyber espionage campaign targeting Israel and the Kurdistan Region of Iraq by an Iran state-aligned threat actor between August and October…Read on The Hacker NewsData breachSecurityWeekFlorida Student Aid Website Hack Puts Data of 4.9 Million People at RiskThe Florida Department of Education says SSNs and other personal data may have been exposed in a breach of its financial aid website. The post Florida Student Aid…Read on SecurityWeekNation-stateDark ReadingPapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South AsiaOrganizations in the region face growing cyberattacks from the known India-linked threat group, which leverages legitimate Windows functionality in three distinct attack chains.Read on Dark ReadingVulnerabilityThe Hacker NewsCritical Langflow Flaws Could Let Unauthenticated Attackers Run Code on ServersTwo critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week. Langflow is an open-source tool for…Read on The Hacker NewsAI securityThe Hacker NewsIs Your SOC Ready for AI Agents? A Maturity Check Before You DeployForty percent of security teams now use AI every day, and another 56% are testing it. Only 4% have no plans to adopt it, according to Prophet Security's…Read on The Hacker NewsSecurity newsThe Hacker NewsAttackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company DataAttackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certificate Services (AD CS)…Read on The Hacker NewsAI securityThe Hacker NewsGovernment Linux Servers Targeted With SysGoRAT and Suspected AI-Generated ScriptsCybersecurity researchers have disclosed details of a cyber espionage campaign specifically targeting Linux infrastructure associated with government entities and state-affiliated infrastructure. The activity, observed by Palo Alto Networks…Read on The Hacker NewsMalwareThe Hacker NewsNew VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial ValueCybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim's stolen data…Read on The Hacker News
Headlines link to the original publishers. Collected automatically and labelled by topic; INFO SHIELD is not responsible for third-party content.