Europol Raids Seize 100+ Servers in Investment Fraud Network
November 4, 2026
Europol-backed raids across 17 countries arrested seven people and seized more than 100 servers in a fraud network that targeted
News
Europol Raids Seize 100+ Servers in Investment Fraud Network
Europol-backed raids across 17 countries arrested seven people and seized more than 100 servers in a fraud network that targeted victims in over 50 countries.
German Officials Among Recipients of Apple Spyware Warnings
Apple sent mercenary-spyware warnings to German officials, lawmakers and journalists, and the BSI told recipients to assume their devices are infected.
24,664 Lovable-Built Apps Leak Passports and Chat Messages
Crissy Field found 24,664 Lovable-built apps on Supabase returning database records with no authentication, exposing passports, payments and chat messages.
ILC Dover Pays $13M to Settle Cybersecurity Fraud Claims
ILC Dover and ILC Astrospace agreed to pay $13 million to settle False Claims Act allegations that they knowingly failed to meet contract cybersecurity rules.
Google Dismantles XCPE Botnet of 1.3 Million Android TV Boxes
Google and partners disrupted the XCPE botnet of 1.3 million Android TV boxes and banned maker Videostrong, which it says built the backdoor into firmware.
Refrigeration Attacks Hit Supermarkets in Six European Countries
A second wave of attacks on Danfoss refrigeration controls hit supermarkets in six European countries overnight, spoiling stock and raising set points to 55 C.
Attackers Exploit CVSS 10.0 Node-RED Flaw CVE-2026-58115
VulnCheck caught attackers exploiting CVE-2026-58115, a CVSS 10.0 missing-authentication flaw in Node-RED, to drop Linux bots on exposed Siemens devices.
BTCPay Server Hot Wallets Drained on Outdated Instances
Attackers drained Bitcoin and Litecoin hot wallets on BTCPay Server instances running version 2.4.1 or older, and the project urges updating to 2.4.7.
Trigger.dev Breach Exposes Customer Environment Variables
Trigger.dev disclosed that an attacker accessed environment variables belonging to a subset of its cloud customers, which can hold API keys and credentials.
cPGuard Update Channel Hijacked to Push Linux Server Backdoor
An attacker used stolen credentials to push a malicious script through OPSSHIELD's cPGuard update channel, installing a backdoor and stealing root SSH keys.
German Officials Among Recipients of Apple Spyware Warnings
November 4, 2026
Apple sent mercenary-spyware warnings to German officials, lawmakers and journalists, and the BSI told recipients to assume their devices are
24,664 Lovable-Built Apps Leak Passports and Chat Messages
November 4, 2026
Crissy Field found 24,664 Lovable-built apps on Supabase returning database records with no authentication, exposing passports, payments and chat messages.
ILC Dover Pays $13M to Settle Cybersecurity Fraud Claims
November 4, 2026
ILC Dover and ILC Astrospace agreed to pay $13 million to settle False Claims Act allegations that they knowingly failed
Google Dismantles XCPE Botnet of 1.3 Million Android TV Boxes
November 3, 2026
Google and partners disrupted the XCPE botnet of 1.3 million Android TV boxes and banned maker Videostrong, which it says
Refrigeration Attacks Hit Supermarkets in Six European Countries
November 3, 2026
A second wave of attacks on Danfoss refrigeration controls hit supermarkets in six European countries overnight, spoiling stock and raising
Attackers Exploit CVSS 10.0 Node-RED Flaw CVE-2026-58115
November 3, 2026
VulnCheck caught attackers exploiting CVE-2026-58115, a CVSS 10.0 missing-authentication flaw in Node-RED, to drop Linux bots on exposed Siemens devices.
BTCPay Server Hot Wallets Drained on Outdated Instances
November 3, 2026
Attackers drained Bitcoin and Litecoin hot wallets on BTCPay Server instances running version 2.4.1 or older, and the project urges
Trigger.dev Breach Exposes Customer Environment Variables
November 3, 2026
Trigger.dev disclosed that an attacker accessed environment variables belonging to a subset of its cloud customers, which can hold API
cPGuard Update Channel Hijacked to Push Linux Server Backdoor
November 3, 2026
An attacker used stolen credentials to push a malicious script through OPSSHIELD’s cPGuard update channel, installing a backdoor and stealing
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.