Google Dismantles 1.3 Million Device XCPE Botnet, Bans Android TV Maker Over Preinstalled Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google and industry partners have dismantled the XCPE botnet, which enrolled more than 1.3 million set-top boxes through preinstalled malware. In a November 2 report, Google linked the operation with high confidence to Videostrong Technology, accusing the Android device maker …

Mercado Bitcoin Suffers Cyberattack as Researchers Flag $40 Million in Suspicious Crypto Transfers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Brazilian cryptocurrency exchange Mercado Bitcoin suspended deposits and withdrawals on November 2, 2026, after detecting a security incident in one of its systems. Blockchain security firm Hypernative flagged more than $40 million in suspicious transfers across at least 10 blockchains, …

Guardz Brings Palo Alto Networks Prisma Browser Protection to Small Businesses

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Miami, United States, November 2nd, 2026, CyberNewswire Prisma Browser for Business joins Guardz to connect browser protection with email, identity and endpoint security, helping security teams investigate and respond to threats across the workspace Guardz, the Agentic Workspace Security platform …

Hackers Could Exploit iPhone BootROM Flaws to Compromise Cryptocurrency Wallet Security

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Older iPhones used to store cryptocurrency seed phrases could expose owners to physical attacks that airplane mode cannot stop. OneKey founder Yishi has warned that wiping an aging iPhone and keeping it offline does not make it a secure cold …

Hackers Using Microsoft Teams Messages and Calls to Trick Users and Gain Remote Access to System

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using Microsoft Teams messages and voice calls to impersonate IT support staff, persuade employees to approve remote access, and move deeper into corporate networks. Two intrusions investigated by Microsoft show how a seemingly routine help desk conversation can …

Northflank Security Breach Leads to Unauthorized AI API Key Usage, Customers Urged to Rotate Secrets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Northflank urged customers to rotate all platform secrets after reports of unauthorized AI API key use, warning that environment variables across workloads, secret groups, and global settings may have been exposed. Northflank is investigating a security incident involving reported misuse …

POC Released for Windows WinSock Ancillary Privilege Escalation Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A public proof-of-concept exploit for CVE-2023-21768 shows how attackers with local access can gain SYSTEM privileges through the Windows Ancillary Function Driver for WinSock. Researchers Valentina Palmiotti, known as chompie, and Ruben Boonen published the code. Their complete exploit targets …

Hackers Exploit Patched Synology NAS Vulnerabilities to Deploy C3RB3R Ransomware and Encrypt Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Synology NAS devices are facing C3RB3R ransomware attacks linked to 2024 security flaws, prompting the company to urge users to update outdated DiskStation Manager versions and packages. The warning followed reports from the 360 Security Team and Solar Emergency Response …

Hackers Exploit ChatGPT’s Popularity With Fake Billing Notices That Target Credit Cards and OTPs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are impersonating OpenAI in fake ChatGPT Plus billing emails that lead users to payment pages designed to steal credit card details and one-time passwords. The campaign combines convincing subscription warnings with a live operator who can decide when to …

Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are posing as trusted artificial intelligence bots to search websites for passwords, API keys, and cloud credentials. The campaign uses the names of ChatGPT, Claude, Perplexity, and other AI services to disguise automated scanning, testing whether businesses will let …