Top Security Breaches 2026-11-03
Auto-generated 2026-11-03T09:00:47.864152+00:00 (UTC)
-
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Source: The Hacker News | Published: 2026-10-28T16:02:45+00:00 | Score: 16.588
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems.
The activity, which was observed on October 25, 2026, involved an attacker combining PHP2Shell with a kernel privilege escalation exploit to root
-
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
Source: The Hacker News | Published: 2026-10-31T12:01:56+00:00 | Score: 15.638
American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data.
However, the company noted that the breach did not result in unauthorized access to its investigation content, authentication credentials, or session tokens.
“This month, Chainalysis detected an external actor using offensive agentic
-
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
Source: The Hacker News | Published: 2026-11-03T07:43:07+00:00 | Score: 15.584
Synology is urging customers to update the DiskStation Manager (DSM) software powering its Network Attached Storage (NAS) devices following ransomware attacks.
The Taiwanese vendor said it observed threat actors exploiting a vulnerability patched in December 2024 to target devices running outdated versions of DSM.
“These attacks aim to encrypt data and extort ransom,” it said in a statement
-
Your Mobile Carrier Stores Your Call Logs for Years
Source: BleepingComputer | Published: 2026-11-02T15:01:11+00:00 | Score: 14.5
Mobile carriers can retain years of call and text metadata, exposing sensitive details about customers’ relationships, locations, and daily routines if breached. Cape examines the privacy risks of long-term telecom data retention and how its mobile service reduces exposure by automatically deleting call records. […]
-
Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
Source: The Hacker News | Published: 2026-10-30T04:14:59+00:00 | Score: 13.441
Cryptocurrency giant Binance said on Thursday that a “security incident” on its platform has impacted about $6.3 billion worth of assets.
The world’s biggest cryptocurrency exchange said nearly $3 billion of those assets have been frozen on-chain so far.
Tether and Circle said they have frozen more than 1.567 billion USDT and 800 million USDC related to the incident, respectively. The
-
Northflank security breach leads to abuse of customers’ AI API keys
Source: BleepingComputer | Published: 2026-10-31T18:01:12+00:00 | Score: 12.4
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers’ AI API keys. […]
-
DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment
Source: The Hacker News | Published: 2026-11-02T14:46:05+00:00 | Score: 12.312
Cybersecurity researchers have disclosed details of a cyber espionage campaign targeting Israel and the Kurdistan Region of Iraq by an Iran state-aligned threat actor between August and October 2026.
According to a report published by Dream Research Labs, the campaign has led to the compromise of a high-profile individual in Israel, along with additional compromises affecting a government cloud
-
Synology warns of C3RB3R ransomware attacks targeting NAS devices
Source: BleepingComputer | Published: 2026-11-02T11:28:42+00:00 | Score: 11.761
Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware attacks. […]
End of report.
