Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 01:28 IST · 13 sources · Get these by email

Threats, ransomware & breaches FBI links $6.3 billion Binance crypto heist to North Korean hackersThe FBI has confirmed that North Korean state-sponsored hackers known as TraderTraitor were behind the $6.3 billion crypto-theft attack on Binance, making it the largest cryptocurrency heist on record. [...] BleepingComputer · Global · 1 Nov 2026
Applications & supply chain Alpine Linux rebuilds GitLab after attempted RCE attackHackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise. [...] BleepingComputer · Global · 1 Nov 2026
AI security OpenAI says it's doubling Pro usage limits and bringing Work features to ChatOpenAI has just confirmed that it's rolling out ChatGPT Work capabilities directly into regular Chat, while also combining usage allowances across ChatGPT and Codex. [...] BleepingComputer · Global · 1 Nov 2026
AI security Northstar Security Exits Stealth With $7M to Expose Toxic Risk CombinationsThe startup maps how identities, assets and vulnerabilities connect, and uses AI agents to find and fix risky combinations of issues. The post Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations appeared first on SecurityWeek. SecurityWeek · Global · 1 Nov 2026
Policy, regulation & law enforcement CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private KeyA critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client's public certificate. Once in, the attacker would act as that… The Hacker News · Global · 1 Nov 2026
Threats, ransomware & breaches Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear ScriptMalicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded from an outside company. Polymarket says it is refunding about $2.7 million to 726… The Hacker News · Global · 1 Nov 2026
Threats, ransomware & breaches FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto HeistThe U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets to TraderTraitor, a North Korea-aligned elite hacking group also tracked as Jade Sleet, Pressure Chollima, PUKCHONG, Slow Pisces, and UNC4899. The FBI, along with the U.S.… The Hacker News · Global · 1 Nov 2026
Threats, ransomware & breaches NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET InjectionCybersecurity researchers have disclosed details of what has been described as a "highly sophisticated infection chain" targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a custom Windows 10 build used exclusively by government entities in Asia and… The Hacker News · Global · 1 Nov 2026
AI security Northflank security breach leads to abuse of customers' AI API keysCloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers' AI API keys. [...] BleepingComputer · Global · 31 Oct 2026
Threats, ransomware & breaches New Android SMS of Death exploit can remotely crash unpatched phonesA security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message. [...] BleepingComputer · Global · 31 Oct 2026
Threats, ransomware & breaches Reddit to lock content behind logins to fight scrapersReddit announced in a post by co-founder Steve Huffman that the site will gradually become a "logged-in service," offering limited access to visitors without accounts. [...] BleepingComputer · Global · 31 Oct 2026
AI security From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.AI-generated vulnerability reports are overwhelming some bug bounty programs, making it harder for aspiring security researchers to know where to start. TryHackMe explains how beginners can build practical cybersecurity skills, use AI responsibly, and produce reproducible findings that stand up to… BleepingComputer · Global · 31 Oct 2026
Threats, ransomware & breaches Chainalysis discloses data breach from "offensive agentic techniques"Blockchain analytics firm Chainalysis disclosed a data breach after attackers used "offensive agentic techniques" to access internal systems and tools, exposing customer names, email addresses, user IDs, and organizational roles. [...] BleepingComputer · Global · 31 Oct 2026
Identity & access Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity DataAmerican blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that the breach did not result in unauthorized access to its investigation content, authentication… The Hacker News · Global · 31 Oct 2026
AI security Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealerThe self-deleting VOLTA infostealer steals credentials, sessions, and cryptocurrency wallets. Then, it uses LLMs to profile victims and rank their most valuable assets. Cisco Talos · Global · 31 Oct 2026
Policy, regulation & law enforcement Syrian Hacker Gets Prison Time in US After Over a Decade on the RunA US court sentenced Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad attacks on media, businesses, and government entities. The post Syrian Hacker Gets Prison Time in US After Over a Decade on the Run appeared first on SecurityWeek. SecurityWeek · Global · 31 Oct 2026
OT, ICS & IoT Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild. The vulnerabilities are listed below - CVE-2026-111357 (CVSS… The Hacker News · Global · 31 Oct 2026
AI security A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private ChatsA malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed. The researchers reported the flaw through OpenAI's bug bounty program on October 18,… The Hacker News · Global · 31 Oct 2026
Cloud & SaaS Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million network-layer (L3) DDoS attacks and 14.4 trillion HTTP DDoS requests in… The Hacker News · Global · 31 Oct 2026
Threats, ransomware & breaches Inside a malicious Claude Code-branded extension and its persistent SSH backdoorMicrosoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post Inside a malicious Claude Code-branded extension and its persistent SSH backdoor appeared first on Microsoft Security Blog. Microsoft Security Blog · Global · 31 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.