Cybersecurity briefing, 2026-11-03

Everyone is talking about AI-powered cyberattacks as if the machines are breaking in by themselves.

• Node-RED flaw exposes Siemens IoT2050 to command execution
• CryptoPayment Gateway flaw exposes stored wallet keys
• European freezer attacks spoil stock in more than 115 stores
• Synology ransomware targets outdated DSM as flaw remains unknown
• XCPE takedown leaves Android devices with persistent backdoor
• Vapor Panda used ARTEX to spray passwords and plant backdoors
• Active GitLab RCE attacks put hosted code at risk
• Stolen LLM keys now feed a resale economy
• Binance breach widens beyond a laptop entry
• Ivanti's second patch closes the chain, not prior exposure
• Google Cloud SDK clients may trust compromised CA roots
• BITTER’s native-tool chain slips past malware-only hunts
• Brotli flaw leaves bundled runtimes exposed after patching
• Chainalysis role labels sharpen the target for reset scams
• Apple spyware alerts span 99 countries, operators remain unknown
• Volt Typhoon’s relay chains conceal reach into control systems
• GOLD OGRE used AI agents to expand ransomware intrusions

Recent editions

• Monday, November 2, 2026: Ivanti's second patch closes the chain, not prior exposure · 20 stories
• Sunday, November 1, 2026: DebugBear snippet let attackers trade through Polymarket sessions · 6 stories
• Saturday, October 31, 2026: PAN-OS PHP2Shell chain stole Active Directory credentials · 16 stories
• Friday, October 30, 2026: Cisco VPN flaw reboots firewalls as Volt Typhoon targets control planes · 19 stories
• Thursday, October 29, 2026: DHS leak maps undercover work and application access · 18 stories
• Wednesday, October 28, 2026: Apple extends exploited CoreGraphics fix to iOS 18 · 18 stories
• Tuesday, October 27, 2026: UNM hospitals reopen as Health Sciences classes stay canceled · 15 stories