| 1 | CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
Original article | Reported 80
Actively exploited | 4 Nov 2026 |
| 2 | Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
Original article | Reported 80
Actively exploited | 31 Oct 2026 |
| 3 | CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
Original article | Reported 80
Actively exploited | 30 Oct 2026 |
| 4 | Smashing Security podcast #491: How AI agents are spooking the banks
Original article | Reported 70
Ransomware | 5 Nov 2026 |
| 5 | Apple turns iCloud into spy cloud, will start looking at public share links
Original article | Reported 70
Policy / law | 4 Nov 2026 |
| 6 | Critical Rails Bug Threatens to Derail Vulnerable Servers
Original article | Reported 70
Threat actor | 4 Nov 2026 |
| 7 | More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus
Original article | Reported 70
Breach / leak | 4 Nov 2026 |
| 8 | Hackers stole DreamHost customer files and inboxes during months-long attack
Original article | Reported 70
Vulnerability | 4 Nov 2026 |
| 9 | Canadian extradited to US for allegedly hacking schools in at least four states
Original article | Reported 70
Other | 4 Nov 2026 |
| 10 | Hugging Face’s CEO Says His P(Doom) Is ‘Close to Zero’
Original article | Reported 70
Vulnerability | 4 Nov 2026 |
| 11 | French bank confirms cyber heist, hackers suspected to have stolen an estimated $133 million
Original article | Reported 70
Other | 4 Nov 2026 |
| 12 | Building on open source AI? Hugging Face’s policy chief on the costs, risks, and trade-offs
Original article | Reported 70
Policy / law | 4 Nov 2026 |
| 13 | Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
Original article | Reported 70
Threat actor | 4 Nov 2026 |
| 14 | SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
Original article | Reported 70
Vulnerability | 4 Nov 2026 |
| 15 | French blood storage impacted by freezer hacks as theories swirl about culprits
Original article | Reported 70
Other | 4 Nov 2026 |
| 16 | Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet
Original article | Reported 70
Malware | 4 Nov 2026 |
| 17 | Ukrainian news outlet Kyiv Independent hit by suspected Russian cyberattack
Original article | Reported 70
Other | 4 Nov 2026 |
| 18 | Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit
Original article | Reported 70
Other | 4 Nov 2026 |
| 19 | US gov IT worker pleads guilty to sending Top Secret files to Ethiopia
Original article | Reported 70
Other | 4 Nov 2026 |
| 20 | Cycurion Habit verifies threats and validates fixes before closing cases
Original article | Reported 70
Advisory | 4 Nov 2026 |
| 21 | Russian hackers target iOS and Android users with n-day exploits
Original article | Reported 70
Threat actor | 4 Nov 2026 |
| 22 | Sysdig Adds Runtime Security and Governance for AI Agents
Original article | Reported 70
Other | 4 Nov 2026 |
| 23 | Descope Envoy brings AI agent authentication to consumer apps
Original article | Reported 70
Other | 4 Nov 2026 |
| 24 | APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
Original article | Reported 70
Threat actor | 4 Nov 2026 |
| 25 | Barracuda ESG Authentication Bypass Flaw Opens Path to Root
Original article | Reported 70
Vulnerability | 4 Nov 2026 |