| 1 | CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
Original article | Confirmed 100
Vulnerability | 2 Nov 2026 |
| 2 | CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
Original article | Confirmed 100
Vulnerability | 2 Nov 2026 |
| 3 | CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows
Original article | Confirmed 100
Vulnerability | 2 Nov 2026 |
| 4 | CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench
Original article | Confirmed 100
Policy / law | 2 Nov 2026 |
| 5 | CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
Original article | Confirmed 100
Vulnerability | 2 Nov 2026 |
| 6 | Max-severity bug in widely used OT programming tool exploited to deliver Linux malware
Original article | Reported 70
Malware | 2 Nov 2026 |
| 7 | One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning
Original article | Reported 70
Breach / leak | 2 Nov 2026 |
| 8 | Germany says lawmakers’ iPhones may have been hacked with spyware
Original article | Reported 70
Breach / leak | 2 Nov 2026 |
| 9 | Cops bust botnet of 1.3M infected Android TV boxes
Original article | Reported 70
Malware | 2 Nov 2026 |
| 10 | If hackers can take control of a supermarket freezer, how vulnerable is other tech?
Original article | Reported 70
Other | 2 Nov 2026 |
| 11 | Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes
Original article | Reported 70
Policy / law | 2 Nov 2026 |
| 12 | ⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
Original article | Reported 70
Breach / leak | 2 Nov 2026 |
| 13 | Thieves pilfer environment variables from Trigger AI workflow tool
Original article | Reported 70
Other | 2 Nov 2026 |
| 14 | Token thieves costing companies $100K+ per day in illicit LLM charges
Original article | Reported 70
Other | 2 Nov 2026 |
| 15 | Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
Original article | Reported 70
Malware | 2 Nov 2026 |
| 16 | Microsoft's AI Risk Report Misses This Key Detail
Original article | Reported 70
Other | 2 Nov 2026 |
| 17 | DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment
Original article | Reported 70
Threat actor | 2 Nov 2026 |
| 18 | Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps
Original article | Reported 70
Advisory | 2 Nov 2026 |
| 19 | A fresh wave of cyberattacks has hit Europe’s supermarket refrigerators, destroying food across countries
Original article | Reported 70
Other | 2 Nov 2026 |
| 20 | PapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South Asia
Original article | Reported 70
Threat actor | 2 Nov 2026 |
| 21 | Frozen part II: Hackers remotely defrost produce in Euro supermarkets ... again
Original article | Reported 70
Other | 2 Nov 2026 |
| 22 | Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
Original article | Reported 70
Vulnerability | 2 Nov 2026 |
| 23 | FBI pins $6.3B Binance crypto heist on North Korean hackers
Original article | Reported 70
Policy / law | 2 Nov 2026 |
| 24 | Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy
Original article | Reported 70
Vulnerability | 2 Nov 2026 |
| 25 | Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
Original article | Reported 70
Other | 2 Nov 2026 |