November 2026

Practical guidance on safer search, stronger login security, better executive protection, and other habits that help reduce enterprise risk.

Cybercriminals have turned reselling cloud access to LLMs into a lucrative business model, with some victims paying as much as $1 million in resource consumption before access was revoked.

Hackers exploited a flaw in third-party software and stole the personal information of school district staff and students.

The post Frontline Education Data Breach Impacts Over 1.3 Million appeared first on SecurityWeek.

The acquisitions will add AI agent observability and automated AI security testing capabilities to the CrowdStrike Falcon platform.

The post CrowdStrike Reportedly Paying $495 Million for AI Security Firms Fiddler, Dreadnode appeared first on SecurityWeek.

The most severe is a critical flaw in Framework leading to remote code execution without user interaction.

The post Android’s November 2026 Updates Patch Over 200 Vulnerabilities appeared first on SecurityWeek.

Multiple attacks from the same IP address attempted to deploy various payloads, including a Linux bot and webshells.

The post Critical Node-RED Flaw Exploited in Attacks appeared first on SecurityWeek.

The overwhelming majority of the infected devices in the X.CPE botnet are Android TV set-top boxes, Google said, adding that they observed a number of other infected Android-based IoT devices, including telehealth devices, karaoke machines and digital signage devices.

Members of Germany’s political elite were among the spyware targets in 99 countries that Apple personally warned recently.

Supermarket and grocery store refrigerator controls across Europe were hacked in the early hours of Monday in the second such wave of attacks in recent weeks — following a first wave in France — with unidentified perpetrators defrosting fridges and causing stock to spoil.

North Korean attackers “combined a range of techniques, including social engineering by fake recruitment interviews,” Binance said about the multibillion-dollar crypto heist it discovered in October.