News Live

French bank Crédit Mutuel Arkéa confirms it was the victim of a cyberattack in which funds were transferred out of the bank's own account, says the losses are of the order of magnitude of around $133 million

Hackers breach French bank Crédit Mutuel Arkéa, steal "undisclosed amount" of money through fraudulent transactions

Severe internet disruption in Tehran and other parts of Iran

DPRK says it's policy is to oppose all malicious activities in cyberspace - KCNA

Germany warns government officials that their iPhones may have been compromised by sophisticated spyware capable of infecting devices without users clicking anything

Hosting provider Beget suffered a large-scale cyberattack overnight on November 2, disrupting some of its services. The company officially confirmed the breach and said it had already restored operations on some servers

India's Spandana Sphoorty Financial reports cyberattack involving its bank account

Brazil's largest crypto exchange Mercado Bitcoin, with 4.8 million users, has reportedly been hacked for over $40,000,000.

Data center operators in Russia have been ordered to reserve 10% of their capacity to ensure the operation of information resources when necessary. Russian President Putin signed the corresponding decree

A cyberattack causes million-dollar losses in dozens of supermarkets in Belgium and Sweden by raising the temperature of the refrigerators

Fridges and freezers at some supermarkets in Belgium, Luxembourg and Sweden were hacked overnight. Hackers changed the temperature settings to as high as 70°C (158°F), causing food to spoil. The damage is expected to run into the millions

Russian Emergency Situations Ministry resources and regional operational headquarters channels were hacked, sending Russians false alerts claiming that nuclear warheads had been launched toward Russia

Russia's Rosstat has been hit by a major cyberattack. Silent Crow and Belarusian Cyberpartisans claim to have stolen 23 TERABYTES of data from Russia's Federal State Statistics Service, allegedly including classified records of Russian military losses in Ukraine. Rosstat has acknowledged the cyberattacks but denies its databases were compromised

North Korea is behind the $6.36 billion Binance hack, the biggest in crypto history, according to TRM Labs

$AAVE freezes lending markets on Avalanche to prevent Binance hacker from borrowing funds

Binance issues statement following suspected crypto hack. "Our teams are aware of reports of a potential security issue and are actively investigating. At this stage, we have not confirmed any impact to user funds. Our security teams are reviewing all relevant information with urgency, and we will provide updates through official Binance channels as soon as we have verified information

US Department of Justice (DOJ) National Fraud Enforcement Division just announced Operation Ghostbusters indictments targeting a nationwide "ghost student" scam tied to a Kenyan network. Criminals stole identities of Americans who never attended college, submitted fake FAFSA applications, enrolled phantom students, and diverted leftover federal aid funds overseas after colleges took their cut.Five defendants charged so far, more than &036;750,000 in crypto seized, and a team is now on the ground in Kenya. Running since 2021, it has likely cost taxpayers hundreds of millions while blocking aid for real students

Polymarket users are reporting their accounts are being drained of funds, sparking fears the platform is compromised

Polymarket users report that frontend may be compromised, and assets are being withdrawn without permission: Discord

A Chinese businesswoman who had a close relationship with Nvidia's CEO, Jensen Huang, was found to be passing intelligence to Beijing

The Pentagon suspects a cyberattack may be behind a series of freezer malfunctions that spoiled food at US military bases across the country in August, Reuters reports, citing four officials familiar with the matter

PHP2Shell exploited in real-world attacks. An attacker chained PHP2Shell with a Linux kernel flaw to gain root access to 25 servers across four countries, including three in a U.S. government-affiliated environment. The intrusion extended into the internal network, where the attacker targeted Active Directory. Suspected China nexus. Signs of AI-assisted tooling

A hacker is attempting to breach the US Federal Election Commission's systems and that agency has had to 'temporarily shut down' its web-facing services as a result, according to an email seen by Reuters

Trump: In short order, we will be officially BANNING the term, "AI/Artificial Intelligence," in all relevant documents, and everything else, due to its inaccuracy

Moldova's government digital services remain disrupted following a large-scale cyberattack. Authorities recorded approximately 11 MILLION access requests during an attack targeting personal data on October 22. A second intrusion attempt was blocked on October 25. Several government platforms remain offline, including systems handling permits and official authorisations. Moldovan authorities suspect the attacks could be part of a broader hybrid campaign. Attribution remains unconfirmed

Confirmed: Network data show internet connectivity has been knocked out in occupied Crimea, amid power outages following Ukrainian drone attacks targeting energy infrastructure

Andy Burnham told Trump Ukraine must have full access to Starlink in their call this afternoon

After PHP2Shell comes Node2Shell, a critical bug found by OpenAI's Codex Security that can let attackers run code in Node.js apps. It was successfuly demonstrated on the official Node.js 24.22.0 image. Node 20, 23 and 25 (all EoL) get no fix

Russian fishing vessels are suspected of spying on critical undersea communication cables linking Britain with Europe and the US. Over 500 suspicious movements involving 17 vessels have been identified, with ships repeatedly slowing down, changing direction and following cable routes. British officials fear this activity could help Moscow identify targets for future sabotage

Oracle published a security alert for Java today: CVE-2026-91403, CVSS 9.1. It's in JSSE (Java's TLS) and is exploitable over the network without credentials. Affected versions listed: Java SE 8u511, 11.0.33, 17.0.21, 21.0.13, 25.0.5 and 27.0.1, and GraalVM