Skip to main content
IMMUNITYSEC

Cybersecurity News & Intelligence

News on actively exploited vulnerabilities, hacking and extortion campaigns, AI security incidents, and patching priorities, written for a general tech audience.

Updated

Browse by Category

4 categories

AI Security News & Analysis

3 articles

News and analysis of security incidents involving large language models, AI agents, and AI infrastructure. Covers prompt injection, reward hacking, agent sandbox escapes, supply chain attacks through AI coding agents, and the mitigations that contain them.

Defensive Engineering News & Analysis

3 articles

News on how organizations respond to actively exploited vulnerabilities: patch deadlines set through the CISA Known Exploited Vulnerabilities catalog and federal directives, checks for compromise after an attack, and the guidance vendors and agencies publish.

Threat Intelligence News & Analysis

9 articles

News on active threat actors and campaigns, including state-sponsored operations, data theft and extortion, and law enforcement takedowns. Articles cover who was targeted, what the attackers took, how companies and agencies responded, and the advice that followed.

Vulnerability News & CVE Analysis

5 articles

News on serious security flaws in widely used software and services. Articles explain in plain terms what each flaw allows, which products and versions are affected, whether attackers are exploiting it in the wild, and which updates and vendor guidance fix it.

Latest Articles

20 total
Vulnerability News & CVE Analysis
2026-11-05•4 min read

OpenAI says its AI agents found and exploited 948 Linux kernel flaws for $1.2 million

OpenAI said on November 4, 2026, that an automated pipeline of AI agents running an upcoming cyber model built working exploits for 948 local privilege escalation flaws in the Linux kernel, flaws that let a user with an ordinary account take full control of a system. The October run cost $1.2 million in API credits. OpenAI said it has sent hundreds of reports and patches to Linux maintainers and is sending fixes for the rest in stages.

Threat Intelligence News & Analysis
2026-11-05•4 min read

French bank Crédit Mutuel Arkéa confirms cyberattack after investigator traces $133 million in crypto withdrawals

French banking group Crédit Mutuel Arkéa said on November 4, 2026, that attackers used the bank's own account to carry out fraudulent transactions, and that the money was then potentially converted into cryptocurrency. The bank did not confirm reports that 118 million euros ($133 million) was taken, a figure first traced by on-chain investigator ZachXBT, but said it could validate the order of magnitude. Customer accounts were not affected, according to the bank, and the Paris prosecutor's office has opened an investigation.

Threat Intelligence News & Analysis
2026-11-04•4 min read

Sekoia says Russia's APT29 hijacked websites and a Ukrainian analytics service to target unpatched phones

French security company Sekoia said on November 4, 2026, that APT29, a hacking group widely attributed to Russia's foreign intelligence service, ran a campaign that tried to break into unpatched iPhones and Android phones whose owners visited compromised or fake websites. For one week from August 27, the attackers also tampered with a tracking script from Plerdy, a Ukrainian analytics service loaded by thousands of websites. Every flaw the attackers used had already been fixed, and Sekoia said fully updated devices are safe.

Vulnerability News & CVE Analysis
2026-11-04•3 min read

CISA says attackers are exploiting WordPress flaw that lets them run code during updates

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) said on November 3, 2026, that attackers are exploiting CVE-2026-119977, a flaw in WordPress core that could let someone without an account run code on a web server while WordPress installs a full update. WordPress fixed the flaw in version 7.1.4 on October 28, 2026, and CISA gave U.S. federal civilian agencies until November 6 to apply the fix.

Threat Intelligence News & Analysis
2026-11-03•6 min read

Attackers heat up fridges and freezers at more than 100 stores across Europe, spoiling food

Attackers remotely changed the settings on refrigeration controls at more than 100 supermarkets and food shops in Belgium, Sweden, Ireland, Luxembourg, the Netherlands, Estonia, and other European countries overnight into Monday, November 2, 2026, warming fridges and freezers and forcing some stores to throw away food. The attacks followed a similar wave that hit hundreds of French supermarkets three weeks earlier. No one has claimed responsibility, and Belgium's federal prosecutor has opened a criminal investigation.

Threat Intelligence News & Analysis
2026-11-03•4 min read

Zelensky says Ukraine hacked Russia's emergency alert app after fake nuclear warnings hit Ukrainians

Hackers hijacked Ukraine's Air Alert app late on November 1, 2026, and sent false warnings of a nuclear threat, radiation, chemical attacks, and street fighting to users across the country. Hours later, attackers sent fake alerts about launched nuclear warheads through the mobile app of Russia's Emergency Situations Ministry, which said the message reached 33 of Russia's 89 regions. Ukrainian President Volodymyr Zelensky told PBS News on November 2 that Ukraine hacked the Russian app in response to the attack on its own system.