Welcome to this week’s Black Arrow Cyber Threat Intelligence Briefing – a weekly digest, collated and curated by our cyber experts to provide senior and middle management with an easy to digest round up of the most notable threats, vulnerabilities, and cyber related news from the last week.
Executive Summary
We frequently highlight the importance of both cyber resilience and cyber security, and this week we start our review with views on whether organisations are ready to survive a serious cyber incident rather than relying on prevention alone. The UK’s cyber security chief has warned of a potentially unprecedented rise in cyberattacks, while the EU and USA are driving organisational accountability through regulation, disclosure and enforcement. McKinsey research highlights a wider gap between the threats organisations face and their preparedness to respond.
Recent incidents demonstrate the variety of threats facing businesses. Binance reports how fake job interviews, malicious software and misuse of an internal AI tool contributed to a $6.43 billion theft, which the FBI has attributed to North Korean hackers. Cyberattacks also disrupted supermarket refrigeration systems across European countries, highlighting risks to physical operations and essential supply chains. Meanwhile, research points to increasingly targeted phishing and exploitation of software vulnerabilities including in internet-facing systems.
We strongly advise business leaders to manage cyber security and resilience across people, operations and technology. A key focus must be on rehearsing how the leadership team will respond when their organisation is being attacked; the impacts are wide across business operations, employees and customers as well as technology. Contact us to discuss how we support business leaders to achieve this proportionate to the size and profile of their organisation.
Top Cyber Stories of the Last Week
Cyber Security Is No Longer About Protection. It’s About Survival
Cyber security strategies must move beyond preventing attacks to ensuring organisations can continue operating when defences fail. While preventative controls remain essential, ransomware, supplier compromises and AI-enabled attacks underline the importance of business resilience. Organisations need to understand their critical dependencies, maintain reliable backups, test recovery capabilities and establish clear responsibilities for managing incidents. Europe is increasingly making cyber resilience a regulatory obligation, while the US is pursuing accountability through disclosure, enforcement and procurement pressure. Boards must recognise that cyber security is not solely an IT responsibility, but an organisation-wide obligation requiring investment in business continuity, recovery and the ability to withstand serious disruption.
UK Cyber Chief Warns Firms ‘Wilfully Blind’ to Hacking Risk
The head of the UK's National Cyber Security Centre has warned that Britain could face an unprecedented surge in cyberattacks over the coming months, with too many businesses and supply chains operating on weak technological and operational foundations. Richard Horne highlighted growing threats from Russia, Iran and China, identifying China as the most sophisticated and persistent threat, particularly given its potential use of artificial intelligence against critical infrastructure. Reported cyberattacks affecting supermarket refrigeration systems across Europe demonstrate how cyber incidents can disrupt essential services. Horne warned of serious consequences if businesses disregard the warning signs and fail to act.
https://www.claimsjournal.com/news/national/2026/11/03/341096.htm
NIS2 Makes Board Members Personally Liable for Access Control Decisions
The EU’s NIS2 Directive places greater personal accountability on board members for cyber security risk management, requiring them to approve security measures and oversee their effectiveness. Covering an estimated 160,000 organisations, the legislation requires directors to understand whether access to critical systems is adequately controlled, rather than simply approving policies. For essential entities, national law must permit fines reaching at least €10 million or 2% of worldwide annual turnover, whichever is higher. Board members may also face personal liability under national law. With compromised credentials involved in 39% of breaches, demonstrating effective access controls is increasingly important.
Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
Cryptocurrency exchange Binance has disclosed how attackers stole $6.43 billion in cryptocurrency through a sophisticated campaign targeting its employees. The attack began with a compromised software download, followed by fraudulent job interviews designed to trick an engineer into installing malicious software. Attackers subsequently exploited an internal AI tool and stolen credentials to gain access to systems authorising financial transactions. The incident demonstrates how criminals can combine employee deception, malicious software and abuse of an internal AI tool to overcome security controls. Binance has since rebuilt affected systems and strengthened its security measures.
https://thehackernews.com/2026/11/binance-reveals-how-fake-job-interviews.html
FBI Pins $6.3 Billion Binance Crypto Heist on North Korea While Scammers Circle Anxious Users
The FBI has attributed the theft of approximately $6.3 billion in cryptocurrency from Binance to North Korean hackers, potentially making it the largest cryptocurrency theft in history. Nearly $3 billion was frozen within the first day, while Binance has subsequently replaced approximately 95% of the stolen assets using its own funds. As withdrawals gradually resume, fraudsters are exploiting customer uncertainty through fake compensation offers, creating further risks for affected users.
https://www.helpnetsecurity.com/2026/11/02/fbi-north-korea-binance-hack/
KnowBe4 Report Reveals Cybercriminals Abandoning ‘Spray and Pray’ Scams as Spear-Phishing Rises 41%
KnowBe4 has identified a significant shift towards more targeted and sophisticated phishing attacks. Overall phishing volumes increased over 29% year-on-year, with targeted attacks rising 41% and impersonation of businesses increasing 28%. Attackers are increasingly exploiting trusted cloud and AI platforms to deceive employees and bypass traditional security measures. AI is also enabling criminals to exploit breaking news stories 5.4 times faster than in 2022. More than half of phishing attacks involve business email compromise, where criminals impersonate trusted contacts to steal money or sensitive information. HR, Finance and senior executives remain the primary targets.
Anthropic-Themed Phishing Emails Bypass Top Security Tools
A phishing campaign impersonating AI company Anthropic has successfully bypassed leading email security products, including Microsoft Defender for Office 365 and Proofpoint. Since September, attackers have distributed fraudulent invitations offering early access to new AI technology, attempting to steal Microsoft and Google account credentials. Despite obvious spelling errors, suspicious links and inconsistent branding, the emails reached users' inboxes. Attackers exploited legitimate webinar services, disguised malicious links and used verification challenges to obstruct automated security checks. The campaign demonstrates that even sophisticated email security tools cannot reliably prevent phishing, reinforcing the importance of employee awareness, strong authentication and monitoring for suspicious account activity.
The Latest Vishing Attacks Are a Warning for All Industries
A wave of telephone-based impersonation attacks (vishing) targeting major Wall Street investment firms highlights a growing threat across all industries. AI voice cloning can make impersonation more convincing, and similar attacks have involved attempts to persuade employees to reset credentials or approve unusual requests. Such attacks can bypass traditional technical defences by exploiting human trust rather than software vulnerabilities. PwC found that nearly two-thirds of employed US respondents reported their organisations had experienced major digital harm, yet only 9% believed those managing digital threats were keeping pace. Organisations must learn from attacks elsewhere, regularly testing and adapting their procedures before similar threats reach them.
Supermarket Freezer Cyberattacks Spread Across Europe as Experts Warn of Wider IoT Risks
A second wave of suspected cyberattacks has disrupted supermarket refrigeration systems across seven European countries, reportedly affecting major retailers including Carrefour, Coop and Delhaize. Attackers allegedly manipulated temperatures to as high as 50°C, causing food spoilage and operational disruption. Research across 99 countries and territories recorded nearly 13,000 observations of refrigeration services accessible from the internet. The incidents highlight how poorly secured connected equipment can cause significant physical and financial damage, extending cyber risk beyond traditional IT systems. Similar vulnerabilities could affect food production, logistics, pharmaceuticals and other industries reliant on temperature-controlled infrastructure.
https://www.itsecurityguru.org/2026/11/03/supermarket-freezer-cyberattacks-europe/
Vulnerability Exploitation Rising as the Root Cause of Many Breaches
Exploiting security vulnerabilities is becoming an increasingly significant cause of cyber breaches, with Verizon's 2026 research finding that exploitation accounted for 31% of breaches, up from 20% the previous year. Separate findings from LevelBlue show vulnerabilities were responsible for 14% of initial intrusions in Q3, compared with 4% in Q2. Internet-facing devices, including firewalls and remote access systems, are particularly attractive targets because attackers can exploit weaknesses to gain entry without deceiving employees or overcoming additional login security measures. Artificial intelligence is also making it easier for attackers to identify potentially vulnerable systems.
Russian Hackers Target iOS and Android Users with N-Day Exploits
Researchers believe Russian state-linked hackers have exploited iPhone and Android vulnerabilities for which fixes were already available to steal passwords, messages and browsing data, potentially enabling access to online accounts. Researchers at Sekoia identified the campaign targeting visitors to compromised websites, including military, government-related and commercial sites. Attackers also compromised a web analytics service used by thousands of websites, potentially exposing large numbers of visitors. Exploitation could occur without users clicking anything or downloading malicious software. Fixes for all the vulnerabilities were available before the attacks began, highlighting the importance of keeping mobile devices updated, including those used by employees and third-party suppliers.
https://www.helpnetsecurity.com/2026/11/04/apt29-watering-hole-mobile-devices-n-day-exploits/
Who Controls the Technology We Depend on?
The UK's reliance on overseas technology presents a growing resilience concern, particularly as geopolitical relationships and commercial priorities evolve. The UK competition regulator found that Microsoft and Amazon have considerable power in cloud services and that customers can struggle to change providers. Recent disruptions affecting Starlink services used by Ukrainian military drones illustrate how dependence on externally controlled technology can affect critical operations. Organisations should assess their exposure to foreign technology providers, understand who controls access to essential systems and test whether they could maintain operations if a major supplier became unavailable.
https://www.computerweekly.com/opinion/Who-controls-the-technology-we-depend-on
Governance, Risk and Compliance
UK Cyber Chief Warns Firms ‘Willfully Blind’ to Hacking Risk
Cybersecurity Is Economic Security
70% of global business leaders report rising risk exposure amid AI, geopolitical disruptions: KPMG
67% of security leaders say their teams struggle to meet business needs | CSO Online
Cybersecurity is no longer about protection. It’s about survival. | CSO Online
87% of organisations face threat-related incidents, preparedness gaps persist: McKinsey | Mint
AI may help, but it’s no substitute for sturdy cyber defence | The Strategist
Threats
Ransomware, Extortion and Destructive Attacks
Ransomware gang talked AI agents into doing much of its dirty work - Help Net Security
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
Ransomware and Cyber Extortion in Q3 2026
New Framework Puts Ransomware Resilience for AI Systems in Focus - Infosecurity Magazine
Ransomware and Destructive Attack Victims
UK school estate hit by 3AM ransomware in suspected AI-assisted attack
Phishing & Email Based Attacks
KnowBe4 Report Reveals Cybercriminals Abandoning ‘Spray and Pray’ Scams as Spear-Phishing Rises 41%
Anthropic-Themed Phishing Emails Bypass Top Security Tools
Phishing Campaign Actively Targets Customers of 300 US Banks
Google Calendar phishing campaign hijacks sessions, bypasses MFA
Online Scam Volumes Double to Overtake Phishing - Infosecurity Magazine
Other Social Engineering
Fake IT help desk callers got by on little more than names and email addresses - Help Net Security
Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
The Latest Vishing Attacks Are A Warning For All Industries
Russian hackers target iOS and Android users with n-day exploits - Help Net Security
Google Calendar phishing campaign hijacks sessions, bypasses MFA
Online Scam Volumes Double to Overtake Phishing - Infosecurity Magazine
Scammers rebuild fake shopping sites within hours of a takedown - Help Net Security
Shame and sleepless nights haunt scam victims long after the money is gone - Help Net Security
Defense contractor pleads guilty to aiding North Korean remote worker scheme | CyberScoop
Artificial Intelligence
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
VOLTA, the infostealer that asks an AI which victims are worth the effort
Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
Anthropic-Themed Phishing Emails Bypass Top Security Tools
A Defense Contractor Gave Their Personal AI Agent Access to a Secure Pentagon System | WIRED
Artificial intelligence and cyber intrusion | National Cyber Security Centre
Ransomware gang talked AI agents into doing much of its dirty work - Help Net Security
70% of global business leaders report rising risk exposure amid AI, geopolitical disruptions: KPMG
“The attackers are winning”: Cyber 60 founders say AI is giving hackers the upper hand | Fortune
Why AI could threaten much of the world’s digital infrastructure | Cybersecurity News | Al Jazeera
AI headline fatigue is now a security risk | Ctech
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
EU AI Act transparency rules show why businesses can’t afford to wait - IT Security Guru
Hugging Face malware campaign returns to hijack GPUs for crypto mining
Why AI Models Cheat: Reward Hacking, Explained - Decrypt
Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see
Anthropic VS code extension on Cursor backdoored for nearly 12 hours - Ars Technica
AI coding agents are installing MCP servers that will never be patched - Help Net Security
The Next Cyber Insurance Claim May Start With Authorized AI
The Future Of AI Security Is Better Judgment, Not More Automation
Northflank security breach leads to abuse of customers' AI API keys
Chainalysis discloses data breach from "offensive agentic techniques"
OpenAI tightens ChatGPT’s limits on weapons and past mass attacks
Open-weight AI model GLM-5.3 cheated its way to correct answers - Help Net Security
A 'code red' for cybersecurity? How to prepare for a possible wave of AI hacking - ABC13 Houston
The Patching Grace Period Is Over: Cybersecurity Predictions For 2027
China rejects UK claims over potential use of AI in cyberattacks
AI 'could make cyber security look worse before it makes it better'
Ukraine readies cyber strategy on AI threats - Klymenko
Thieves pilfer environment variables from Trigger AI workflow tool
Bots/Botnets
Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
Careers, Roles, Skills, Working in Cyber and Information Security
67% of security leaders say their teams struggle to meet business needs | CSO Online
The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers
From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.
Cloud/SaaS
Northflank security breach leads to abuse of customers' AI API keys
484,142 Exposed Cloud Buckets Contain 18 Billion Files - Security Affairs
26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity
Thieves pilfer environment variables from Trigger AI workflow tool
Cryptocurrency/Cryptomining/Cryptojacking/NFTs/Blockchain
Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
How hard is it to recover the $6.3 billion hackers stole from Binance? - CBS News
Binance resumes bitcoin, ether withdrawals after covering bulk of stolen $6.3 billion | Reuters
Hugging Face malware campaign returns to hijack GPUs for crypto mining
Bitcoin Crashes to $76K, $1.5B Liquidated After Crypto’s Biggest Hack
Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners
FBI Flags Over 600 Addresses Tied to North Korea's Binance Heist - SecurityWeek
Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack - SecurityWeek
Crypto exchange HTX ordered to stop doing business in UK | Reuters
Trezor warns some of its wallets may hide a seed-stealing implant - Help Net Security
BTCPay Server warns of hot wallet crypto thefts on outdated instances
Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
Cyber Crime, Organised Crime & Criminal Actors
Online Scam Volumes Double to Overtake Phishing - Infosecurity Magazine
Scammers rebuild fake shopping sites within hours of a takedown - Help Net Security
Shame and sleepless nights haunt scam victims long after the money is gone - Help Net Security
Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see
U.S. court sentences Syrian hacker 42 months for cyberattacks linked to ousted regime
Bulletproof Host Virtualine Loses Its Domain to FBI Seizure - SecurityWeek
Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure
Teen arrested following cyberattack on Swiss schools - SWI swissinfo.ch
Data Breaches/Leaks
484,142 Exposed Cloud Buckets Contain 18 Billion Files - Security Affairs
26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories
Chainalysis discloses data breach from "offensive agentic techniques"
Sony’s ISP data breach exposes 2.1M customer records | Cybernews
Arnold Clark concedes data breach failures | Car dealer news
Russia’s Statistics Agency Hit by Cyberattack as Hackers Claim Massive Data Theft - The Moscow Times
Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk - SecurityWeek
Kash Patel dealt humiliating blow as ‘major’ hack threatens to spread beyond his FBI - Raw Story
Revolve Data Breach Impacts at Least 200,000 People - SecurityWeek
Bristol schools hack sees 320,000 stolen files published on dark web - BBC News
Frontline Education Data Breach Impacts Over 1.3 Million - SecurityWeek
Data Sovereignty
Who controls the technology we depend on? | Computer Weekly
Denial of Service/DoS/DDoS
Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
Encryption
Security leaders brace for an overhaul of public key infrastructure as quantum risks rise | IT Pro
Fraud, Scams and Financial Crime
Online Scam Volumes Double to Overtake Phishing - Infosecurity Magazine
Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
Scammers rebuild fake shopping sites within hours of a takedown - Help Net Security
Shame and sleepless nights haunt scam victims long after the money is gone - Help Net Security
French bank Credit Mutuel Arkea counting losses from cyberattack - CNA
Police Seize 100+ Servers After Four-Year Investment Fraud Investigati - Infosecurity Magazine
Chrome extensions with 13.4 million installs caught hijacking searches
Insider Risk and Insider Threats
Defense contractor pleads guilty to aiding North Korean remote worker scheme | CyberScoop
Insurance
The Next Cyber Insurance Claim May Start With Authorized AI
Internet of Things – IoT
UK warned of empty supermarket shelves and power blackouts as cyber attack threat grows
UK also affected by cyber-attack which hit European fridges - BBC News
EU will check supermarkets’ readiness for cyberattacks — what is the reason | УНН
US Military Probes Freezer Failures, After French Hack | Silicon UK
Smart TVs can harbor unpatched security flaws and track what you watch - Help Net Security
Blood banks among victims of European cyber attacks | The National
Consultation on cyber security for EV charge points launched | Charging & infrastructure
Biden-Era 'Cyber Trust Mark' May Finally Appear on Smart Home Gadgets in 2027 | PCMag
Law Enforcement Action and Take Downs
Scammers rebuild fake shopping sites within hours of a takedown - Help Net Security
Bulletproof Host Virtualine Loses Its Domain to FBI Seizure - SecurityWeek
Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
Behind the Scenes of How Operation Blackout Went Down
U.S. court sentences Syrian hacker 42 months for cyberattacks linked to ousted regime
Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure
Canada Extradites 1 of 2 Suspects in Supercomputer Hacks
Teen arrested following cyberattack on Swiss schools - SWI swissinfo.ch
Linux and Open Source
Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
Malware
VOLTA, the infostealer that asks an AI which victims are worth the effort
Hugging Face malware campaign returns to hijack GPUs for crypto mining
Hackers are using GitHub to push fake ChatGPT and Claude apps | IT Pro
Anthropic VS code extension on Cursor backdoored for nearly 12 hours - Ars Technica
Hackers hijack cPGuard autoupdate to deploy backdoor, steal data
China-Aligned Group Abuses Sogou Input Method to Deliver Malware - Infosecurity Magazine
Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
Mobile
Russian hackers target iOS and Android users with n-day exploits - Help Net Security
Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
Telegram call can let hackers hijack Android phones | Cybernews
New Android SMS of Death exploit can remotely crash unpatched phones
Apple notifications alert victims in 99 countries about mercenary spyware infections | CyberScoop
Your Mobile Carrier Stores Your Call Logs for Years
Models, Frameworks and Standards
NIS2 Makes Board Members Personally Liable for Access Control Decisions
NIST publishes cybersecurity guide for businesses too small to have IT staff - Help Net Security
Passwords, Credential Stuffing & Brute Force Attacks
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity
Passkeys Are Better Than Passwords. But They Are Not Enough. - SecurityWeek
Privacy, Surveillance
Your Mobile Carrier Stores Your Call Logs for Years
Regulations, Fines and Legislation
NIS2 Makes Board Members Personally Liable for Access Control Decisions
What Democratic control of Congress means for cybersecurity | CyberScoop
EU AI Act transparency rules show why businesses can’t afford to wait - IT Security Guru
EU blocks members’ social media bans for teenagers
EU will check supermarkets’ readiness for cyberattacks — what is the reason | УНН
Crypto exchange HTX ordered to stop doing business in UK | Reuters
CISA’s new strategy runs into America’s blind trust problem | CyberScoop
Sabotage
UK warned of empty supermarket shelves and power blackouts as cyber attack threat grows
UK also affected by cyber-attack which hit European fridges - BBC News
EU will check supermarkets’ readiness for cyberattacks — what is the reason | УНН
US Probes Suspected Hack Behind Military Base Freezer Failures - Security Affairs
Businesses face 'sharpened scrutiny' on cyber policies after fridge hacks
French blood storage impacted by freezer hacks as theories swirl about culprits - BBC News
Social Media
EU blocks members’ social media bans for teenagers
Reddit to lock content behind logins to fight scrapers
Spyware
Apple notifications alert victims in 99 countries about mercenary spyware infections | CyberScoop
Apple’s spyware notifications reach the Bundestag: what the BSI says to do now - Security Affairs
Supply Chain and Third Parties
UK warns weak supply chains will worsen AI-led cybersecurity crisis
Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack - SecurityWeek
Nation State Actors, Advanced Persistent Threats (APTs), Cyber Warfare, Cyber Espionage and Geopolitical Threats/Activity
Cyber Warfare and Cyber Espionage
Russia arming drones with propaganda, cyber threats, Ukraine's drone commander warns
I know the UK's hidden security risk. Putin could cut your electricity and water
Russia-Aligned Gorbag Targets Ukraine for Intelligence - Infosecurity Magazine
Exposing state threats still matters - resilience matters more | Computer Weekly
Russia may have rehearsed attack on satellite, specialist says, flagging another approach | Reuters
US Probes Suspected Hack Behind Military Base Freezer Failures - Security Affairs
Nation State Actors
70% of global business leaders report rising risk exposure amid AI, geopolitical disruptions: KPMG
China
Exposing state threats still matters - resilience matters more | Computer Weekly
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
Chinese Actor Compromises US Government Network Via Chained PHP2Shell - Infosecurity Magazine
Russia, China likely to ramp up UK cyberattacks - Mobile World Live
US plans to ban Chinese telecom firms from direct access to US phone numbers | Reuters
Russia
Russian hackers target iOS and Android users with n-day exploits - Help Net Security
Exposing state threats still matters - resilience matters more | Computer Weekly
Russia, China likely to ramp up UK cyberattacks - Mobile World Live
Russia arming drones with propaganda, cyber threats, Ukraine's drone commander warns
Hackers are using GitHub to push fake ChatGPT and Claude apps | IT Pro
The UK-Germany Hybrid Threats Pact - Modern Diplomacy
I know the UK's hidden security risk. Putin could cut your electricity and water
Russia-Aligned Gorbag Targets Ukraine for Intelligence - Infosecurity Magazine
Russia may have rehearsed attack on satellite, specialist says, flagging another approach | Reuters
French blood storage impacted by freezer hacks as theories swirl about culprits - BBC News
As Russia’s Cyberwar Evolves, Belarus Steps Forward
Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure
Russia’s Statistics Agency Hit by Cyberattack as Hackers Claim Massive Data Theft - The Moscow Times
Ukraine and Russia both report cyberattacks on emergency apps | ITV News
US Probes Suspected Hack Behind Military Base Freezer Failures - Security Affairs
North Korea
Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
How hard is it to recover the $6.3 billion hackers stole from Binance? - CBS News
Binance resumes bitcoin, ether withdrawals after covering bulk of stolen $6.3 billion | Reuters
FBI Flags Over 600 Addresses Tied to North Korea's Binance Heist - SecurityWeek
Defense contractor pleads guilty to aiding North Korean remote worker scheme | CyberScoop
Other Nation State Actors, Hacktivism, Extremism, Terrorism and Other Geopolitical Threat Intelligence
Who controls the technology we depend on? | Computer Weekly
Exposing state threats still matters - resilience matters more | Computer Weekly
70% of global business leaders report rising risk exposure amid AI, geopolitical disruptions: KPMG
PapRAT Cyber-Espionage Campaign Leaves Bitter Taste in South Asia
Tools and Controls
NIS2 Makes Board Members Personally Liable for Access Control Decisions
Exposing state threats still matters - resilience matters more | Computer Weekly
70% of global business leaders report rising risk exposure amid AI, geopolitical disruptions: KPMG
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers
The Future Of AI Security Is Better Judgment, Not More Automation
AI 'could make cyber security look worse before it makes it better'
CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience - Infosecurity Magazine
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity
Security leaders brace for an overhaul of public key infrastructure as quantum risks rise | IT Pro
What human hackers still do better than AI, according to HackerOne's CEO - Help Net Security
Your Mobile Carrier Stores Your Call Logs for Years
Passkeys Are Better Than Passwords. But They Are Not Enough. - SecurityWeek
The Patching Grace Period Is Over: Cybersecurity Predictions For 2027
DeepSeek Website Code Points to Cyber, a Dedicated Cybersecurity Model in Limited Testing - Pandaily
Are Hardware Security Keys For Your Laptop Actually Worth It?
Decoys help cyberdefenders counter AI attacks | The Straits Times
NATO's Crossed Swords Exercise Brings AI Agents Into Cyber Operations Training - SecurityWeek
Reports Published in the Last Week
Other News
‘Vulnerable’ SMEs to get discount on Government-backed cyber security scheme | The Standard
Artificial intelligence and cyber intrusion | National Cyber Security Centre
NATO's Crossed Swords Exercise Brings AI Agents Into Cyber Operations Training - SecurityWeek
CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience - Infosecurity Magazine
Why a Group of Hackers Is Playing Porn on Digital Billboards Around the World
Vulnerability Management
Vulnerability exploitation rising as the root cause of many breaches | CSO Online
Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving
Armadin Tests Find 88% of Severe Flaws Outside Vendor Advisories - Infosecurity Magazine
What human hackers still do better than AI, according to HackerOne's CEO - Help Net Security
The Patching Grace Period Is Over: Cybersecurity Predictions For 2027
Vulnerabilities
Microsoft fixes Smart App Control broken by October Windows update
Ivanti patches two more Connect Secure zero-days chained in attacks
Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws - SecurityWeek
Chinese Actor Compromises US Government Network Via Chained PHP2Shell - Infosecurity Magazine
Barracuda warns of critical flaws allowing root access to devices
New TeamViewer Security Flaw Could Turn Routine Remote Support Sessions Into Computer Takeovers
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical - SecurityWeek
Russian hackers target iOS and Android users with n-day exploits - Help Net Security
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
Android's November 2026 Updates Patch Over 200 Vulnerabilities - SecurityWeek
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
Over 1,000 GitLab servers vulnerable to ongoing RCE attacks
OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux
Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
Sector Specific
Industry specific threat intelligence reports are available.
Contact us to receive tailored reports specific to the industry/sector and geographies you operate in.
Automotive
Construction
Critical National Infrastructure (CNI)
Defence & Space
Education & Academia
Energy & Utilities
Estate Agencies
Financial Services
FinTech
Food & Agriculture
Gaming & Gambling
Government & Public Sector (including Law Enforcement)
Health/Medical/Pharma
Hotels & Hospitality
Insurance
Legal
Manufacturing
Maritime & Shipping
Oil, Gas & Mining
OT, ICS, IIoT, SCADA & Cyber-Physical Systems
Retail & eCommerce
Small and Medium Sized Businesses (SMBs)
Startups
Telecoms
Third Sector & Charities
Transport & Aviation
Web3
Contact us to help assess where your risks lie and to ensure you are doing all you can do to keep you and your business secure.
Look out for our ‘Cyber Tip Tuesday’ video blog and on our YouTube channel.
You can also follow us on Facebook, Twitter and LinkedIn.
Links to external articles are provided for general interest and awareness only. Linking to or reposting external content does not constitute endorsement of or by any organisation, service, or product. We do not control and are not responsible for the content, security, or availability of external websites or links. Full credit is given to the original authors and sources. E&OE.