- Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
November 2, 2026
On October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released fixes for both. Ivanti rates CVE-2026-111357, a missing authentication for critical function vulnerability (CWE-306), with a CVSSv3.1 score of 8.8; it allows a local authenticated attacker to escalate privileges. CVE-2026-118527, classified as generation of ...
- Qantas among list of major airlines impacted in global cyber security breach
November 2, 2026
Qantas and multiple other airlines have been targeted in a cyber security breach, with the Australian airline now working to determine what information was obtained. Client of Qantas, Spanish travel company Amadeus – which provides travel technology for global airlines, hire cars and hotels – was breached by an unauthorised agent, potentially accessing data about passenger ...
- The most used lateral movement hacking tools across enterprise infrastructures
November 2, 2026
The statistics compiled from detection alerts* within Kaspersky Anti Targeted Attack (KATA) reveal the hacking tools most often used for lateral movement across enterprise infrastructures, highlighting the pressing need for reliable network security solutions to protect corporate environments. Recent investigations into cyber-espionage groups show that attackers increasingly avoid detectable malware, choosing instead to blend into legitimate ...
- Germany says lawmakers’ iPhones may have been hacked with spyware
November 2, 2026
The German government is warning politicians and public figures that they were targeted by government-backed spyware, days after Apple began sending out notifications warning victims that their iPhones may have been hacked. Germany’s federal cybersecurity office, known as the BSI, said in a note over the weekend that it had become aware that members of the ...
- AI-driven attacks on educational organizations in Latin America and Africa
November 2, 2026
Kaspersky Threat Research has uncovered attacks on educational organizations in Latin America and Africa in which attackers used artificial intelligence to help direct activity inside compromised networks. Researchers traced reconnaissance, credential theft, movement between computers and data collection, including activity that compromised highly privileged administrator accounts. The attackers used CyberStrikeAI, an open-source penetration-testing framework that combines ...
- A fresh wave of cyberattacks has hit Europe’s supermarket refrigerators, destroying food across countries
November 2, 2026
A second wave of cyberattacks is suspected to have hit supermarket refrigerators across Europe, causing fridges to increase temperatures and spoil food at dozens of stores across Belgium, Ireland, Luxembourg, and Sweden. Supermarket giants Ahold Delhaize and Colruyt confirmed the hacks overnight, with one Belgian company that operates Delhaize’s systems saying that the hackers had changed ...
- Ukraine and Russia report fake emergency alerts after cyberattack targets apps
November 2, 2026
Authorities in Ukraine and Russia say their emergency alert mobile apps were targeted by cyberattacks late Sunday, with users in Ukraine receiving false warnings of dangerously high radiation levels in the capital, Kyiv. In a Telegram post late Sunday, Ukraine’s air raid alert channel said “unauthorized parties” had interfered with the app’s operation and that the ...
- ‘SMS of Death’ exploit can remotely crash unpatched Android phones
November 2, 2026
A zero-click Android flaw let attackers crash phones with a specially crafted SMS message. Repeated messages could trigger reboot loops, disrupt calls, and even affect emergency connectivity. Google patched supported Android versions, but many end-of-life devices remain permanently vulnerable. Read more… Source: Tech Radar Sign up for the Cyber Security Review Newsletter The latest cyber security news and insights delivered right ...
- Inside the underground fake review trade
November 2, 2026
Recently, our team exposed sophisticated scam kits designed to steal sensitive data and trick consumers. But underground marketplaces are not just for malware and stolen passwords. They also offer services designed to manipulate your opinion of the products and services you buy every day. In our latest research, we examined cybercrime forums where sellers advertise illicit ...