Cybersecurity News and Updates

An unknown operator appears to have exfiltrated SQL Server backups from the Philippine Overseas Employment Administration in under a half hour.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

The high-severity vulnerability, tracked as CVE-2026-119977 (CVSS score: 8.1), is a case of Time-of-check Time-of-use (TOCTOU) race condition that could be exploited to achieve arbitrary code

A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin.

The flaw, CVE-2026-58868, affects Android 14 through 17. Phones get the fix with security patch level 2026-11-01 or later, which phone makers and carriers send on their own schedules.

As of November 4, Google’s bulletin did not report

Russian authorities have arrested three suspected members of a threat group known as VasyGrek and dismantled its criminal infrastructure.

Also known as Fluffy Wolf, the threat actor has a history of targeting Russian and international companies since 2016.

The Ministry of Internal Affairs of the Russian Federation (MVD) said members of the group are “suspected of embezzling funds from the

Practical guidance on safer search, stronger login security, better executive protection, and other habits that help reduce enterprise risk.

German police led a multinational probe that exposed an alleged crime-as-a-service provider supplying fraudulent trading platforms to investment scammers.

Beyond food storage, the same combination of Internet connectivity, remote access, and inadequate security practices can put temperature-controlled infrastructure across other critical sectors at risk.

Cybercriminals have turned reselling cloud access to LLMs into a lucrative business model, with some victims paying as much as $1 million in resource consumption before access was revoked.

Multiple attacks from the same IP address attempted to deploy various payloads, including a Linux bot and webshells.

The post Critical Node-RED Flaw Exploited in Attacks appeared first on SecurityWeek.

The most severe is a critical flaw in Framework leading to remote code execution without user interaction.

The post Android’s November 2026 Updates Patch Over 200 Vulnerabilities appeared first on SecurityWeek.