Compromised Qubole AWS credentials abused to steal customer secrets 
Default ForgeRock Password Exposed Two Automakers’ Connected-Car Accounts 
Agentic AI framework used to exploit exposed credentials in cloud environments 
Azure Linux 3.0.2022 bundles more than 470 CVE references 
Google Disrupts XCPE Botnet Linked to 1.3 Million Android TV Boxes 
CrowdStrike Adds Seraphic Browser Security to the Falcon Platform
CrowdStrike says Falcon Seraphic Enterprise Browser is now natively available through its Falcon platform, bringing browser-session protections into the same...
Vercel adds device-bound sessions and opens AI security review to public beta
Vercel is rolling out Device Bound Session Credentials (DBSC) to help protect user sessions from replay after browser-cookie theft, while...
CrowdStrike expands Falcon Cloud Security from CI/CD to runtime defense
CrowdStrike announced a set of generally available updates to Falcon Cloud Security on Nov. 4, 2026, positioning the changes as...
Unit 42 outlines espionage, extortion and AI-enabled threat activity
Unit 42’s November 2, 2026 threat intelligence overview describes three activity areas for security teams to monitor: cyberespionage, financially motivated...
Cyberhaven introduces controls for tracking AI agents’ use of company data
Cyberhaven has introduced Agentic Data Security (ADS), a product module intended to help organizations monitor and control how AI agents...
Fake OpenAI, SpaceX and Anthropic invitations target Microsoft and Google accounts
Fake invitations to events associated with OpenAI, SpaceX and Anthropic are being used to draw employees into phishing attacks, according...
Agencies urge organizations to assess vendor readiness for post-quantum cryptography
A joint guidance effort from the U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Australian Signals Directorate’s Australian Cyber Security...
Rising security budgets leave gaps in AI oversight, DNSFilter survey finds
Many organizations are increasing cybersecurity spending, but stronger budgets have not resolved uncertainty about how artificial intelligence tools are being...
Northstar Security Emerges with $7M to Tackle ‘Toxic’ Risk Combinations via AI Agents
Security startup Northstar Security has officially exited stealth mode, announcing a $7 million seed funding round led by Wing Venture...
CISA Expands Known Exploited Vulnerabilities Catalog with Ivanti Connect Secure Flaws
Critical Updates for Ivanti Connect SecureThe Cybersecurity and Infrastructure Security Agency (CISA) has officially updated its Known Exploited Vulnerabilities (KEV)...