OpenAI Launches New Security Sprint to Hunt Vulnerabilities and Strengthen Defenses

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI is preparing a new internal security sprint that will bring outside researchers together with its own teams to find vulnerabilities, test fixes, and strengthen its platforms using AI. Announced on November 2, the effort includes a partnership with Cathedral …

Anthropic Enables EDR Monitoring in Claude Cowork to Detect Hidden AI Agent Activity

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic has introduced a beta integration that lets businesses run endpoint detection and response sensors inside Claude Cowork’s local virtual machine. The feature addresses a monitoring gap: security software installed on a computer cannot see the shell commands and code …

Hackers Use ARTEX AI to Breach WorkOS and Access Customer Slack Conversations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WorkOS has confirmed unauthorized access to an internal sales application, exposing customer contact information and records of business conversations. The company detected the incident on October 30, 2026, and published a security bulletin on November 2. Its investigation identified an …

Google Dismantles 1.3 Million Device XCPE Botnet, Bans Android TV Maker Over Preinstalled Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google and industry partners have dismantled the XCPE botnet, which enrolled more than 1.3 million set-top boxes through preinstalled malware. In a November 2 report, Google linked the operation with high confidence to Videostrong Technology, accusing the Android device maker …

Mercado Bitcoin Suffers Cyberattack as Researchers Flag $40 Million in Suspicious Crypto Transfers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Brazilian cryptocurrency exchange Mercado Bitcoin suspended deposits and withdrawals on November 2, 2026, after detecting a security incident in one of its systems. Blockchain security firm Hypernative flagged more than $40 million in suspicious transfers across at least 10 blockchains, …

Guardz Brings Palo Alto Networks Prisma Browser Protection to Small Businesses

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Miami, United States, November 2nd, 2026, CyberNewswire Prisma Browser for Business joins Guardz to connect browser protection with email, identity and endpoint security, helping security teams investigate and respond to threats across the workspace Guardz, the Agentic Workspace Security platform …

Hackers Could Exploit iPhone BootROM Flaws to Compromise Cryptocurrency Wallet Security

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Older iPhones used to store cryptocurrency seed phrases could expose owners to physical attacks that airplane mode cannot stop. OneKey founder Yishi has warned that wiping an aging iPhone and keeping it offline does not make it a secure cold …

Hackers Using Microsoft Teams Messages and Calls to Trick Users and Gain Remote Access to System

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using Microsoft Teams messages and voice calls to impersonate IT support staff, persuade employees to approve remote access, and move deeper into corporate networks. Two intrusions investigated by Microsoft show how a seemingly routine help desk conversation can …

Northflank Security Breach Leads to Unauthorized AI API Key Usage, Customers Urged to Rotate Secrets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Northflank urged customers to rotate all platform secrets after reports of unauthorized AI API key use, warning that environment variables across workloads, secret groups, and global settings may have been exposed. Northflank is investigating a security incident involving reported misuse …

POC Released for Windows WinSock Ancillary Privilege Escalation Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A public proof-of-concept exploit for CVE-2023-21768 shows how attackers with local access can gain SYSTEM privileges through the Windows Ancillary Function Driver for WinSock. Researchers Valentina Palmiotti, known as chompie, and Ruben Boonen published the code. Their complete exploit targets …