Code Defender

Organizations in the region face growing cyberattacks from the known India-linked threat group, which leverages legitimate Windows functionality in three distinct attack chains.

The latest “Digital Defense Report” identifies government agencies as prime targets for AI attacks but doesn’t mention that they are broadly being targeted through Microsoft bugs.

The record theft shows how weak system separation, inadequate controls, and untested attack possibilities can turn one breach into systemic loss.

Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week.

Langflow is an open-source tool for building AI agents and workflows, and its vulnerability reports go to IBM. Every release from 1.0.0 through 1.12.8 has the flaws, and the only fix is version 1.13.0.

Neither flaw is in CISA’s Known

Cybersecurity researchers have disclosed details of a cyber espionage campaign targeting Israel and the Kurdistan Region of Iraq by an Iran state-aligned threat actor between August and October 2026.

According to a report published by Dream Research Labs, the campaign has led to the compromise of a high-profile individual in Israel, along with additional compromises affecting a government cloud

A botnet of more than 1.3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led by Google.

Google says it is highly confident that device maker Videostrong intentionally put a backdoor in the boxes and sold access to criminals.

They used the boxes for ad fraud and to pass other people’s internet traffic through owners’ home

An alliance of Belarusian and pro-Ukrainian hackers claimed to have taken out Russia’s federal statistics agency, Rosstat, and stolen vast amounts of sensitive government data in a cyberattack.

A recent post by the BYOD gang appears to line up with a security incident that prompted campus-wide action at Michigan State University. BYOD drew attention in October for an attack on the University of New Mexico.

Blockchain security companies said more than $46 million left the Mercado Bitcoin platform.

The top payout is for high-impact architectural research demonstrating full administrative control.

The post Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward appeared first on SecurityWeek.