Archive

November 2026

Wed 4 Binance says a fake job interview opened the door to its $6.3B heist, CISA confirms WordPress core exploitation, and a poisoned cPGuard update backdoored hosting servers.
Tue 3 Google takes down a 1.3-million-device Android TV box botnet, hackers warm supermarket fridges across Europe, and Siemens IoT2050 and Synology NAS flaws are exploited.
Mon 2 Weekend edition: the official Claude Code extension on Cursor was trojanized, the FBI pins the Binance heist on North Korea's TraderTraitor, and Ivanti, Drupal and WordPress flaws are under attack.

Fri 30 Binance loses about $6.3 billion in the largest crypto heist ever, a 9.8-rated Linux TCP bug gets an AI-written root exploit, and GitLab and Cisco flaws join KEV.
Thu 29 A leak exposes 41,000 DHS staff including undercover ICE agents, a UEFI flaw puts most servers at risk, and Talos details an APT abusing Cisco SD-WAN. SN #1102
Wed 28 PHP2Shell is now on CISA's KEV list, Moldova pulls 80+ public services offline after an attack, and Interpol's Serengeti sweep tops 1,400 arrests.

Wed 30 Weekly recap Two Citrix NetScaler zero-days hit mass exploitation, F5 and Check Point zero-days, Bitget loses $388M, ShinyHunters claims the FBI, and Ireland fines Google €403M. SN #1098
Sun 20 Weekly recap Cisco Email Gateway and ISE zero-days, Gyazo leaks 23.6M accounts, a Revolut breach, an AI coding session hijack spreads Shai-Hulud, and ENISA builds the CRA reporting platform. SN #1096
Sun 13 Weekly recap A record Patch Tuesday with two zero-days, Cisco FMC and N-central exploited, a rootkit on F5 BIG-IP, and AI agents used to breach 395 organizations via PaperCut. SN #1095
Sun 6 Weekly recap SonicWall SMA 1000 zero-days, ShinyHunters claims 284M McKesson patient records, infostealers hijack Claude sessions, and CISA drops six free assessment programs. SN #1094