Cybersecurity Headlines

Read the full stories at CISOseries.com.
This week's Department of Know is hosted by Sarah Lane, with guests Jason Thomas, senior director, technology security, governance, and risk, Cystic Fibrosis Foundation, and David Nolan, CSO, Trimont.
Missed the live show? Check it out on YouTube.
The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.
Big thanks to our sponsor, ESET
Your teams are adopting AI faster than security keeps up. ESET helps you embrace it safely. Confident AI adoption starts with proactive protection and effortless security management: AI-powered prevention stopping threats early, expert MDR watching 24/7, and one platform that's simple to run. Get to know the new ESET PROTECT Platform - designed for the AI era.

Norway's aid agency suffers data breach
https://www.theregister.com/cyber-crime/2026/11/05/norways-aid-agency-pwned-and-all-users-data-is-stolen/5307765
GhostMap Android flaw lets app run persistent boot loop
https://www.bleepingcomputer.com/news/security/ghostmap-android-flaw-lets-malicious-app-trigger-persistent-boot-loop/
Zyxel fixes zero-day on network switches
https://www.bleepingcomputer.com/news/security/zyxel-fixes-zero-day-exploited-to-hack-nearly-1-000-network-switches/
More Asian airlines rocked by Amadeus
https://therecord.media/asian-airlines-announce-data-breach-it-provider-incident
Cyberattack wipes cloud data at Russian hosting provider Beget
https://therecord.media/russia-cyberattack-beget-cloud
Hackers exploit patched Apple flaw to deliver info-stealing malware
https://thehackernews.com/2026/11/hackers-exploit-patched-apple-flaw-to.html
Bank phishing sites evade takedowns by playing dead
https://www.securityweek.com/bank-phishing-sites-show-fake-suspended-pages-to-evade-takedowns/
New York's Queens Public Library battles ransomware attack
https://www.theregister.com/cyber-crime/2026/11/05/new-yorks-queens-public-library-battles-ransomware-crims-wi-fi-checkouts-and-website-go-dark/5307796
Get the show notes here: https://cisoseries.com/cybersecurity-news-november-6-2026/
Huge thanks to our episode sponsor, ESET

ESET MDR is a 24/7 threat management service combining AI and human expertise to achieve an industry-leading 6-minute threat response and containment, removing the need to maintain in-house security specialists. You don't need a security team the size of a Fortune 500. You need ESET. Supervised Cybersecurity for the AI Era. Built to be effortless.

Blood banks caught in European fridge attacks
https://www.cnbc.com/2026/11/04/blood-bank-fridges-cyberattacks.html
Anthropic wants proof of which AI model answered
https://techcrunch.com/2026/11/03/anthropic-is-working-on-a-system-to-prove-ai-models-identity/
Google Calendar phishing steals live sessions
https://www.bleepingcomputer.com/news/security/google-calendar-phishing-campaign-hijacks-sessions-bypasses-mfa/
Chinese keyboard app traffic hijacked to deliver malware
https://www.infosecurity-magazine.com/news/slippynunchucks-sogou-dns-hijacking/
French bank confirms heist estimated at $133 million
https://therecord.media/french-bank-confirms-cyber-heist
APT29-linked campaign targets unpatched phones
https://thehackernews.com/2026/11/apt29-linked-hackers-hijack-web.html
NIKKE PC launcher spread remote-access malware
https://www.bleepingcomputer.com/news/security/nikke-pc-game-launcher-hacked-to-spread-remote-access-data-stealing-malware/
Hackers push false alerts through Kyiv Independent
https://therecord.media/ukraine-kyiv-independent-cyberattack
Get the show notes here: https://cisoseries.com/cybersecurity-news-november-5-2026/
 
Huge thanks to our episode sponsor, ESET

Managed detection and response used to be built for big enterprises with big budgets. Not anymore. ESET is bringing effortless cybersecurity as a service to businesses of every size, with twenty-four-seven monitoring, automated threat containment, and real experts behind it, all without the overhead. You don't need a security team the size of a Fortune 500. You need ESET. Supervised Cybersecurity for the AI Era. Built to be effortless.

China planning broad AI guardrails
https://www.bloomberg.com/news/articles/2026-11-03/china-plans-broad-ai-guardrails-after-global-security-lapses
UK predicts "routine" use of AI in nation-state attacks
https://www.ft.com/content/131d9506-04b1-49b8-ba79-b0d783219c40?syn-25a6b1a6=1
https://bsky.app/profile/joetidy.bsky.social/post/3mzfvc75l222g
Ukraine's war crime investigations hit with cyberattack
https://therecord.media/russia-linked-cyber-spies-target-ukraine-war-support
Details about the Binance hack
https://thehackernews.com/2026/11/binance-reveals-how-fake-job-interviews.html
https://www.msn.com/en-us/money/markets/north-korea-denies-links-to-binance-hack-as-researchers-trace-stolen-billions/ar-AA2gDfyp
mSecure tells users to reset passwords
https://www.theregister.com/security/2026/11/03/password-manager-msecure-tells-users-to-change-passwords-wont-say-why/5307296
OpenAI on a security sprint
https://www.wsj.com/politics/national-security/openai-hires-former-army-secretary-dan-driscoll-to-cybersecurity-role-0e5cc0a1?st=cfNEPb
https://openai.com/index/preparing-our-next-security-sprint-to-harden-openai/
LLM jacking comes with a high price tag
https://thehackernews.com/2026/11/google-warns-llmjacking-attacks-are.html
Google shuts down TV malware
https://9to5google.com/2026/11/02/google-android-tv-box-backdoor-shut-down/















Get the show notes here: https://cisoseries.com/cybersecurity-news-november-4-2026/ 
Huge thanks to our episode sponsor, ESET

Is your business ready to embrace AI with confidence? Explore how companies are balancing rapid AI adoption with growing cyber risk, and where resilience strategies are falling short. Access the full research from ESET's SMB Cyber Readiness Index report for free today at eset.com.

European supermarkets report freezer hacks
https://www.bloomberg.com/news/articles/2026-11-02/belgian-swedish-supermarkets-report-new-suspected-freezer-hack
BTCPay warns of hot wallet thefts
https://www.bleepingcomputer.com/news/security/btcpay-server-warns-of-hot-wallet-thefts-targeting-outdated-instances/
GDPx puts AI agents through harder tests
https://newsletter.semianalysis.com/p/gdpx-measuring-frontier-model-capabilities
Hackers send false emergency alerts
https://www.bloomberg.com/news/articles/2026-11-02/ukraine-and-russia-report-cyberattacks-on-emergency-alert-apps
https://theprint.in/world/ukraine-and-russia-say-emergency-alert-apps-were-hit-by-hacks/3088251/
https://apnews.com/article/717372f7bbf4e8a805bc918f06f9730f
DarkBlinders targets Israel and Iraqi Kurdistan
https://thehackernews.com/2026/11/darkblinders-compromises-israeli-target.html
Chinese hackers use AI across simultaneous attacks
https://www.bleepingcomputer.com/news/security/chinese-hackers-use-artex-ai-in-automated-attacks-against-200-orgs/
Business groups push to renew cyber sharing law
https://cyberscoop.com/business-groups-cisa-2015-renewal-ndaa-cybersecurity/
Ransomware gang claims Michigan State data
https://therecord.media/michigan-state-university-byod-gang-cyber-incident
Get the show notes here:
https://cisoseries.com/cybersecurity-news-november-3-2026/
Huge thanks to our episode sponsor, ESET

ESET MDR is a 24/7 threat management service combining AI and human expertise to achieve an industry-leading 6-minute threat response and containment, removing the need to maintain in-house security specialists. You don't need a security team the size of a Fortune 500. You need ESET. Supervised Cybersecurity for the AI Era. Built to be effortless.