Cybersecurity Headlines

Read the full stories at CISOseries.com.

This week's Department of Know is hosted by Sarah Lane, with guests Jason Thomas, senior director, technology security, governance, and risk, Cystic Fibrosis Foundation, and David Nolan, CSO, Trimont.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

Big thanks to our sponsor, ESET

Your teams are adopting AI faster than security keeps up. ESET helps you embrace it safely. Confident AI adoption starts with proactive protection and effortless security management: AI-powered prevention stopping threats early, expert MDR watching 24/7, and one platform that's simple to run. Get to know the new ESET PROTECT Platform - designed for the AI era.

Norway's aid agency suffers data breach

https://www.theregister.com/cyber-crime/2026/11/05/norways-aid-agency-pwned-and-all-users-data-is-stolen/5307765

GhostMap Android flaw lets app run persistent boot loop

https://www.bleepingcomputer.com/news/security/ghostmap-android-flaw-lets-malicious-app-trigger-persistent-boot-loop/

Zyxel fixes zero-day on network switches

https://www.bleepingcomputer.com/news/security/zyxel-fixes-zero-day-exploited-to-hack-nearly-1-000-network-switches/

More Asian airlines rocked by Amadeus

https://therecord.media/asian-airlines-announce-data-breach-it-provider-incident

Cyberattack wipes cloud data at Russian hosting provider Beget

https://therecord.media/russia-cyberattack-beget-cloud

Hackers exploit patched Apple flaw to deliver info-stealing malware

https://thehackernews.com/2026/11/hackers-exploit-patched-apple-flaw-to.html

Bank phishing sites evade takedowns by playing dead

https://www.securityweek.com/bank-phishing-sites-show-fake-suspended-pages-to-evade-takedowns/

New York's Queens Public Library battles ransomware attack

https://www.theregister.com/cyber-crime/2026/11/05/new-yorks-queens-public-library-battles-ransomware-crims-wi-fi-checkouts-and-website-go-dark/5307796

Get the show notes here: https://cisoseries.com/cybersecurity-news-november-6-2026/

Huge thanks to our episode sponsor, ESET

ESET MDR is a 24/7 threat management service combining AI and human expertise to achieve an industry-leading 6-minute threat response and containment, removing the need to maintain in-house security specialists. You don't need a security team the size of a Fortune 500. You need ESET. Supervised Cybersecurity for the AI Era. Built to be effortless.

Blood banks caught in European fridge attacks https://www.cnbc.com/2026/11/04/blood-bank-fridges-cyberattacks.html

Anthropic wants proof of which AI model answered https://techcrunch.com/2026/11/03/anthropic-is-working-on-a-system-to-prove-ai-models-identity/

Google Calendar phishing steals live sessions https://www.bleepingcomputer.com/news/security/google-calendar-phishing-campaign-hijacks-sessions-bypasses-mfa/

Chinese keyboard app traffic hijacked to deliver malware https://www.infosecurity-magazine.com/news/slippynunchucks-sogou-dns-hijacking/

French bank confirms heist estimated at $133 million https://therecord.media/french-bank-confirms-cyber-heist

APT29-linked campaign targets unpatched phones https://thehackernews.com/2026/11/apt29-linked-hackers-hijack-web.html

NIKKE PC launcher spread remote-access malware https://www.bleepingcomputer.com/news/security/nikke-pc-game-launcher-hacked-to-spread-remote-access-data-stealing-malware/

Hackers push false alerts through Kyiv Independent https://therecord.media/ukraine-kyiv-independent-cyberattack

Get the show notes here: https://cisoseries.com/cybersecurity-news-november-5-2026/

Huge thanks to our episode sponsor, ESET

Managed detection and response used to be built for big enterprises with big budgets. Not anymore. ESET is bringing effortless cybersecurity as a service to businesses of every size, with twenty-four-seven monitoring, automated threat containment, and real experts behind it, all without the overhead. You don't need a security team the size of a Fortune 500. You need ESET. Supervised Cybersecurity for the AI Era. Built to be effortless.

China planning broad AI guardrails https://www.bloomberg.com/news/articles/2026-11-03/china-plans-broad-ai-guardrails-after-global-security-lapses

UK predicts "routine" use of AI in nation-state attacks https://www.ft.com/content/131d9506-04b1-49b8-ba79-b0d783219c40?syn-25a6b1a6=1 https://bsky.app/profile/joetidy.bsky.social/post/3mzfvc75l222g

Ukraine's war crime investigations hit with cyberattack https://therecord.media/russia-linked-cyber-spies-target-ukraine-war-support

Details about the Binance hack https://thehackernews.com/2026/11/binance-reveals-how-fake-job-interviews.html https://www.msn.com/en-us/money/markets/north-korea-denies-links-to-binance-hack-as-researchers-trace-stolen-billions/ar-AA2gDfyp

mSecure tells users to reset passwords https://www.theregister.com/security/2026/11/03/password-manager-msecure-tells-users-to-change-passwords-wont-say-why/5307296

OpenAI on a security sprint https://www.wsj.com/politics/national-security/openai-hires-former-army-secretary-dan-driscoll-to-cybersecurity-role-0e5cc0a1?st=cfNEPb https://openai.com/index/preparing-our-next-security-sprint-to-harden-openai/

LLM jacking comes with a high price tag https://thehackernews.com/2026/11/google-warns-llmjacking-attacks-are.html

Google shuts down TV malware https://9to5google.com/2026/11/02/google-android-tv-box-backdoor-shut-down/

Get the show notes here: https://cisoseries.com/cybersecurity-news-november-4-2026/

Huge thanks to our episode sponsor, ESET

Is your business ready to embrace AI with confidence? Explore how companies are balancing rapid AI adoption with growing cyber risk, and where resilience strategies are falling short. Access the full research from ESET's SMB Cyber Readiness Index report for free today at eset.com.

European supermarkets report freezer hacks https://www.bloomberg.com/news/articles/2026-11-02/belgian-swedish-supermarkets-report-new-suspected-freezer-hack

BTCPay warns of hot wallet thefts https://www.bleepingcomputer.com/news/security/btcpay-server-warns-of-hot-wallet-thefts-targeting-outdated-instances/

GDPx puts AI agents through harder tests https://newsletter.semianalysis.com/p/gdpx-measuring-frontier-model-capabilities

Hackers send false emergency alerts https://www.bloomberg.com/news/articles/2026-11-02/ukraine-and-russia-report-cyberattacks-on-emergency-alert-apps https://theprint.in/world/ukraine-and-russia-say-emergency-alert-apps-were-hit-by-hacks/3088251/ https://apnews.com/article/717372f7bbf4e8a805bc918f06f9730f

DarkBlinders targets Israel and Iraqi Kurdistan https://thehackernews.com/2026/11/darkblinders-compromises-israeli-target.html

Chinese hackers use AI across simultaneous attacks https://www.bleepingcomputer.com/news/security/chinese-hackers-use-artex-ai-in-automated-attacks-against-200-orgs/

Business groups push to renew cyber sharing law https://cyberscoop.com/business-groups-cisa-2015-renewal-ndaa-cybersecurity/

Ransomware gang claims Michigan State data https://therecord.media/michigan-state-university-byod-gang-cyber-incident

Get the show notes here:

https://cisoseries.com/cybersecurity-news-november-3-2026/

Huge thanks to our episode sponsor, ESET

ESET MDR is a 24/7 threat management service combining AI and human expertise to achieve an industry-leading 6-minute threat response and containment, removing the need to maintain in-house security specialists. You don't need a security team the size of a Fortune 500. You need ESET. Supervised Cybersecurity for the AI Era. Built to be effortless.

NetamLoader malware targets government Windows systems in Asia

https://thehackernews.com/2026/11/netamloader-malware-targets-government.html

Northflank warns of security breach

https://www.bleepingcomputer.com/news/security/northflank-security-breach-leads-to-abuse-of-customers-ai-api-keys/

Russian home goods chain Poryadok suffers cyberattack

https://therecord.media/russian-home-goods-chain-faces-disruptions

Android SMS of Death zero-click warning

https://www.bleepingcomputer.com/news/security/new-android-sms-of-death-exploit-can-remotely-crash-unpatched-phones/

Data of more than 41,000 homeland security workers leaked

https://www.theguardian.com/us-news/2026/oct/28/homeland-security-data-leak

Fashion retailer Revolve suffers data theft

https://therecord.media/resolve-fashion-retailer-data-breach-payment-cards

British spy agency cannot account for thousands of data storage devices

https://therecord.media/gchq-cannot-account-for-thousands-of-data-devices

UK landline phones to be disconnected in two months

https://www.theregister.com/networks/2026/11/01/landline-phones-will-switch-off-across-britland-in-100-days-no-extensions-openreach/5306673

Get the show notes here: https://cisoseries.com/cybersecurity-news-november-2-2026/

Huge thanks to our episode sponsor, ESET

Managed detection and response used to be built for big enterprises with big budgets. Not anymore. ESET is bringing effortless cybersecurity as a service to businesses of every size, with twenty-four-seven monitoring, automated threat containment, and real experts behind it, all without the overhead. You don't need a security team the size of a Fortune 500. You need ESET. Supervised Cybersecurity for the AI Era. Built to be effortless.

Read the full stories at CISOSeries.com.

This week's Department of Know is hosted by Rich Stroffolino, with guests Jason Elrod, CISO, MultiCare Health System, and DJ Schleen, head of infrastructure and security, Boats Group.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

Big thanks to our sponsor, GuardSquare

Guardsquare delivers mobile app security without compromise, providing advanced protections for both Android and iOS apps. From app security testing to code hardening to real-time visibility into the threat landscape, Guardsquare solutions provide enhanced mobile application security from early in the development process through publication. Learn more about how to protect your app at Guardsquare.com.

French energy company ENGIE suffers data breach

https://securityaffairs.com/201985/data-breach/engie-data-breach-exposes-customer-details-and-energy-contracts.html

NIST publishes guidance to meet federal post-quantum deadlines

https://www.infosecurity-magazine.com/news/nist-guidance-post-quantum/

MR ROBOT Malware-as-a-Service targets Indian bank customers

https://www.infosecurity-magazine.com/news/robot-malware-indian-bank-customers/

Hackers exploit Cisco SD-WAN flaw to install encryption key stealing malware

https://thehackernews.com/2026/10/hackers-exploited-cisco-sd-wan-flaw-to.html

Japan Airlines warns of data breach

https://therecord.media/japan-airlines-warns-of-breach-country-grapples-with-incidents

GitHub launches npm firewall to block malicious packages before installation

https://thehackernews.com/2026/10/github-launches-npm-firewall-to-block.html

Pentagon treating military base freezer malfunctions as suspected cyberattack

https://www.reuters.com/technology/pentagon-treating-military-base-freezer-malfunctions-suspected-cyberattack-2026-10-29/

Get more info here: https://cisoseries.com/cybersecurity-news-french-energy-breach-pentagon-freezer-hack-japan-airlines-breach/

Attackers are treating your mobile app like an open book. Sixty-three percent of security leaders recently detected app tampering, cloning, or unauthorized modifications. When your code runs in an untrusted environment, you need runtime self-protection and code hardening to keep attackers out. Address tampering before it starts. Learn more at Guardsquare.com.

OpenAI opens an election war room https://www.politico.com/news/2026/10/28/openai-election-war-room-interference-01137690

Hack attempt disrupts FEC disclosures https://www.reuters.com/technology/hacker-trying-breach-us-federal-election-commission-system-email-shows-2026-10-27/

Google gives cyber defenders first access to Carbon https://blog.google/innovation-and-ai/models-and-research/gemini-models/introducing-gemini-4-carbon/

Attackers probe newly patched Oracle flaw https://thehackernews.com/2026/10/hackers-target-critical-oracle-e.html

Volt Typhoon's Silent Train network exposed https://thehackernews.com/2026/10/volt-typhoon-used-covert-silent-train.html

Entra admins face authentication deadline https://www.bleepingcomputer.com/news/microsoft/microsoft-reminds-entra-id-admins-to-migrate-users-to-passkeys/

Belarusian hackers move closer to Russia and Ukraine https://therecord.media/belarus-russia-hackers-ukraine-war

Software inventory can't tell the whole story https://www.darkreading.com/cyber-risk/sboms-alone-scope-supply-chain-attack

Get the show notes here:

https://cisoseries.com/cybersecurity-news-october-29-2026/

Huge thanks to our sponsor, Guardsquare

AI is speeding up development, but at what cost? While 96% of teams now use AI tools, 81% report that AI-generated code has introduced new vulnerabilities into their mobile apps. In a world with automated threats, you need multi-layered, polymorphic security to stay ahead of the curve. Learn more at Guardsquare.com.

Authenticator flaw exposes work accounts https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html

Tailworm flaws put Tailscale SSH at risk https://www.securityweek.com/tailscale-rushes-patches-after-uncoordinated-disclosure-of-tailworm-flaws/

UK police suppliers repeatedly breached https://therecord.media/uk-police-data-breached-from-suppliers-watchdog-report

Rural hospitals get a cyber lifeline https://cyberscoop.com/oncd-rural-hospital-cybersecurity-pilot-project-lifeline-250/

Cyberattack disrupts UNM health services https://www.theregister.com/cyber-crime/2026/10/27/day-2-of-canceled-classes-at-university-of-new-mexico-after-health-sciences-center-cyberattack/5305690

Warp breach exposes AI agent logs https://www.bleepingcomputer.com/news/security/warp-discloses-breach-exposing-ai-agent-logs-user-telemetry-data/

Malware hides from online store scanners https://www.infosecurity-magazine.com/news/hackers-infect-953-online-stores/

Apple patches exploited flaw on older devices https://thehackernews.com/2026/10/apple-backports-fix-for-exploited.html

Get the show notes here:

https://cisoseries.com/cybersecurity-news-october-28-2026/

Huge thanks to our sponsor, Guardsquare

Is your mobile app truly protected? Relying on the OS isn't enough. A global study of thirteen-hundred security and developer leaders found that ninety-six percent of teams using layered protection reported significantly fewer security incidents. Don't wait for a breach to harden your defenses. Get the protection needed for modern security risks. Learn more at Guardsquare.com.