Cybersecurity

Cursor confirms security breach led to malicious Claude Code extension

Cursor confirmed it suffered a security breach that let hackers distribute a malicious Claude Code extension through its marketplace after stealing credentials from AI infrastructure provider Fireworks AI.

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a high-severity security flaw impacting UnrealIRCd, an open-source Internet Relay Chat (IRC) server, to its Known Exploited Vulnerabilities (KEV) catalog…

Apple Reveals How Secure Exclaves Shield Camera and Microphone Data

The tech giant has detailed the architecture designed to isolate ambient sensor data from the main OS on HomeView and new iPhones.

No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software Update

Officials say there is no evidence of a cyberattack behind the nationwide FAA outage, which may have been caused by a software update.

FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’

Federal officials have yet to say what caused the communications disruption or whether they are investigating a possible cyberattack.

Trezor confirms crypto-stealing implants in three wallets, releases fix

Cryptocurrency hardware wallet maker Trezor has confirmed that three Safe 5 devices sold by Southeast Asian reseller CryptoBilis contained malicious hardware implants designed to steal wallet recovery phrases and send them to attackers…

German military drone operations disrupted by cyberattack

German defense technology company Quantum Systems confirmed that it detected an incident in late October that was part of an active cyberattack by "hostile actors."

PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE

A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, along with 51 other security flaws.

In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach

Noteworthy stories that might have slipped under the radar: Siemens details security advisory policy, OpenAI Codex backdoor risk, Microsoft warns of model weight backdoors.

Uber confirms hackers stole thousands of drivers’ license information in data breach

The ridesharing giant said drivers' license information stored by AI cloud company Fireworks AI was stolen during a security incident.

FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls

The U.S. Federal Bureau of Investigation (FBI) has established that threat actors tied to the Democratic People's Republic of Korea (DPRK aka North Korea) have stolen more than $400 million worth of cryptocurrency as part of a social…

Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases

Three Trezor Safe 5 wallets bought from the reseller CryptoBilis contain an implant, an extra circuit board that can copy their recovery phrases, hardware wallet maker Trezor said yesterday.

Microsoft Struggles to Restore Email and Other Services in a Global Outage

Microsoft is trying different ways to identify the cause of the problem and get its servers back online, using “a measured approach to identify and repair affected infrastructure.”

Also: TechCrunch

Quantum Systems drones back in the air after malware scare

Germany's Bundeswehr lifted precautionary grounding after malicious update reportedly reached military servers

Apify Confirms Customer Data Accessed in Cyberattack

The web scraping company says an intruder accessed customer accounts and obtained personal information or stored data.

Italian court rejects data from police hacking of Sky ECC cryptophone network

Italian prosecution against mafia group collapses after judge throws out intercept evidence from police hacking of the Sky ECC cryptophone network

Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins

An international police operation took down servers behind Gootloader, CastleRAT and StealC this week. Criminals used the three malware tools to gain access to computers, steal passwords, and launch ransomware attacks.

Check Point warns of zero-day flaw exploited for root access

Check Point Software has released emergency hotfixes to address a high-severity flaw that hackers have been exploiting to gain root privileges and establish persistence on vulnerable devices since late October.

Microsoft confirms Windows activation failures after November updates

Microsoft has confirmed that this month's Patch Tuesday security updates are causing Windows activation and licensing failures with 0x80041008 error codes.

Police arrest 354 suspects in dark web cybercrime crackdown

Authorities arrested 354 suspects in a joint international operation targeting vendors and buyers on the Archetyp, Nemesis, Tor2Door, Bohemia, and Kingdom dark web marketplaces.

Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files

An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then a previously unreported local privilege escalation flaw in Gaia OS to deploy a…

Also: BleepingComputer

PHP2Shell Exploited in Destructive Check Point Gateway Attacks

PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.

Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2

N-able on Thursday said it's taking additional precautions in the wake of public disclosure of a new set of flaws tracked as 4EverAble2Shell and Agent2Shell.

FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance

Also Thursday, the FBI blamed North Korea for a separate social engineering scheme that officials say resulted in the theft of $400 million worth of cryptocurrency.