File JG · News11 entries
News
Cybersecurity and AI news: what happened, with sources, and what to do
Newest first11 entries
● BREAKING
News
Cybersecurity and AI news: what happened, with sources, and what to do
● Newscyberattackbankingvendorssupply chainphishing
Crédit Mutuel Arkéa cyberattack: attackers came in through a vendor
French bank Crédit Mutuel Arkéa suffered an attack that allowed fraudulent transfers from its own account. The attackers got in through a service provider's platform. What we know, what we don't and what to learn.
November 8, 2026 at 10:37 AM UTC · 3 min readRead article →
● Newsclaude codesecretsgithubai securityapi keys
Claude Code leaks keys on GitHub: the settings.local.json problem
Claude Code's "don't ask again" option can save passwords and API keys in .claude/settings.local.json. Apiiro found 1,122 public copies on GitHub with secrets inside. What we know and what to do.
November 7, 2026 at 9:11 AM UTC · 5 min readRead article →
● Newschatgptlockdown modeprompt injectionai securityopenai
ChatGPT Lockdown Mode bypass: flaw allowed zero-click chat theft
Check Point got around ChatGPT's Lockdown Mode and pulled out entire chat histories, with zero clicks in the desktop app. OpenAI fixed it on September 18. What happened, what we don't know and what to do if you use ChatGPT at work.
November 6, 2026 at 4:14 PM UTC · 4 min readRead article →
● Newsamadeusdata breachairlinesphishingsuppliers
Amadeus data breach: affected airlines and what passengers should do
Unauthorized access to Amadeus, the Spanish booking technology provider, has exposed passenger data from Japan Airlines, ANA, Cathay Pacific, Singapore Airlines and others. There's no sign of card data being accessed. The real risk is fake emails that know your flight.
November 5, 2026 at 10:49 AM UTC · 6 min readRead article →
● Newswordpressvulnerabilitiescybersecuritypatchingsmall business
Exploited WordPress flaw: CISA warns, time to update your site
Attackers are exploiting a flaw in WordPress core, CVE-2026-119977, to run code on the server during updates without a password. CISA confirmed active exploitation on November 3. It affects versions 4.7 through 7.1.3. It is fixed in 7.1.4 and in patches for older versions.
November 5, 2026 at 7:51 AM UTC · 7 min readRead article →
● Newsnode-redindustrial cybersecurityvulnerabilitiessiemensot
Node-RED: first attacks on CVE-2026-58115 and what to check
Since October 30, attackers have been looking for Node-RED installations with no password so they can run commands on them. VulnCheck has seen 16 attempts from one IP so far and no victims have been reported, but checking is cheap: close outside access and turn on login.
November 4, 2026 at 1:50 PM UTC · 5 min readRead article →
● Newsai agentscyberattackai securitycybersecuritynews
AI agents attack more than 200 organizations: the ARTEX case
An espionage group used ARTEX, an AI agent framework built for penetration testing, against more than 200 organizations in 14 countries in 11 days, according to CrowdStrike. In one case it took twelve minutes to take over a server. How it works and what to do in your company.
November 3, 2026 at 10:16 AM UTC · 8 min readRead article →
● Newscyberattackcybersecurityinternet of thingssupermarketssmall business
Supermarket fridge cyberattack in Europe: what we know
Since November 2, attackers have remotely changed the temperature of fridges and freezers in more than 100 stores across at least nine European countries, Portugal included. What we know, which equipment was hit and what to do if your business has connected refrigeration.
November 2, 2026 at 3:49 PM UTC · 8 min readRead article →
● Newsivantivpnvulnerabilitiescybersecuritypatching
Ivanti Connect Secure: three exploited flaws and how to stay safe
Attackers are chaining three flaws in the Ivanti Connect Secure VPN to take full control of the device without a password and steal credentials. CISA confirmed active exploitation on October 30, and Ivanti has released a patch that fixes all of them.
November 1, 2026 at 12:30 PM UTC · 4 min readRead article →
● Newsartificial intelligencerobots.txtgeoopenaigoogle
OpenAI and Google back one rule to opt out of AI training
On October 30, OpenAI and Google said they will honor a shared robots.txt signal that lets any website say, with a single rule, whether its content can be used to train AI models. It isn't live yet: OpenAI plans to roll it out in the coming months and Google in 2027.
October 31, 2026 at 10:20 AM UTC · 4 min readRead article →
● Newsbinancecryptohackcybersecurityscams
Binance hack: what we know about the $6.3 billion theft
Binance suffered a theft of about $6.3 billion on October 29, the largest in crypto history. The FBI attributes it to North Korean hackers and, according to Binance, it all began with a fake job interview targeting an engineer. The company says it will absorb the losses and has reopened withdrawals.
October 30, 2026 at 7:31 AM UTC · 10 min readRead article →
No. 113 min
Crédit Mutuel Arkéa cyberattack: attackers came in through a vendor
French bank Crédit Mutuel Arkéa suffered an attack that allowed fraudulent transfers from its own account. The attackers got in through a service provider's platform. What we know, what we don't and what to learn.
French banking group Crédit Mutuel Arkéa has suffered a cyberattack that allowed fraudulent transfers from the bank's own account. What matters for any company is how they got in: according to the bank itself, the attackers went through the platform of one of its service providers and reached Arkéa directly from there.I'll update this story if the bank or investigators share more details.
Continues in the full story
No. 105 min
Claude Code leaks keys on GitHub: the settings.local.json problem
Claude Code's "don't ask again" option can save passwords and API keys in .claude/settings.local.json. Apiiro found 1,122 public copies on GitHub with secrets inside. What we know and what to do.
If you use Claude Code, check one file today: .claude/settings.local.json.
Continues in the full story
No. 94 min
ChatGPT Lockdown Mode bypass: flaw allowed zero-click chat theft
Check Point got around ChatGPT's Lockdown Mode and pulled out entire chat histories, with zero clicks in the desktop app. OpenAI fixed it on September 18. What happened, what we don't know and what to do if you use ChatGPT at work.
Check Point researchers have published how to get around ChatGPT's Lockdown Mode, the security setting OpenAI offers to stop data in a conversation from ending up outside it.
Continues in the full story
No. 86 min
Amadeus data breach: affected airlines and what passengers should do
Unauthorized access to Amadeus, the Spanish booking technology provider, has exposed passenger data from Japan Airlines, ANA, Cathay Pacific, Singapore Airlines and others. There's no sign of card data being accessed. The real risk is fake emails that know your flight.
Unauthorized access to systems at Amadeus, the Madrid-based company that supplies reservation, ticketing and check-in technology to more than 400 airlines, has exposed passenger data from several carriers.
Continues in the full story
No. 77 min
Exploited WordPress flaw: CISA warns, time to update your site
Attackers are exploiting a flaw in WordPress core, CVE-2026-119977, to run code on the server during updates without a password. CISA confirmed active exploitation on November 3. It affects versions 4.7 through 7.1.3. It is fixed in 7.1.4 and in patches for older versions.
On Tuesday, November 3, the US Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in WordPress core itself, CVE-2026-119977, to its Known Exploited Vulnerabilities catalog. That catalog only lists flaws attackers are already using.
Continues in the full story
No. 65 min
Node-RED: first attacks on CVE-2026-58115 and what to check
Since October 30, attackers have been looking for Node-RED installations with no password so they can run commands on them. VulnCheck has seen 16 attempts from one IP so far and no victims have been reported, but checking is cheap: close outside access and turn on login.
Since October 30, attackers have been looking for Node-RED installations with no password so they can run commands on them, according to VulnCheck, the company that spotted it on one of its decoy servers.
Continues in the full story
No. 58 min
AI agents attack more than 200 organizations: the ARTEX case
An espionage group used ARTEX, an AI agent framework built for penetration testing, against more than 200 organizations in 14 countries in 11 days, according to CrowdStrike. In one case it took twelve minutes to take over a server. How it works and what to do in your company.
An espionage group has used artificial intelligence agents to attack more than 200 organizations in at least 14 countries in just 11 days, according to a CrowdStrike report published on October 29.
Continues in the full story
No. 48 min
Supermarket fridge cyberattack in Europe: what we know
Since November 2, attackers have remotely changed the temperature of fridges and freezers in more than 100 stores across at least nine European countries, Portugal included. What we know, which equipment was hit and what to do if your business has connected refrigeration.
In the early hours of Monday, November 2, someone remotely changed the temperature of fridges and freezers in supermarkets across Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia.
Continues in the full story
No. 34 min
Ivanti Connect Secure: three exploited flaws and how to stay safe
Attackers are chaining three flaws in the Ivanti Connect Secure VPN to take full control of the device without a password and steal credentials. CISA confirmed active exploitation on October 30, and Ivanti has released a patch that fixes all of them.
On Friday, October 30, the US Cybersecurity and Infrastructure Security Agency (CISA) added two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities catalog, the list reserved for flaws attackers are already using.
Continues in the full story
No. 24 min
OpenAI and Google back one rule to opt out of AI training
On October 30, OpenAI and Google said they will honor a shared robots.txt signal that lets any website say, with a single rule, whether its content can be used to train AI models. It isn't live yet: OpenAI plans to roll it out in the coming months and Google in 2027.
Until now, if you didn't want an AI company training its models on your website's content, you had to go provider by provider: one rule for OpenAI's crawler, another for Google's, another for Anthropic's, and so on with every new player.
Continues in the full story
No. 110 min
Binance hack: what we know about the $6.3 billion theft
Binance suffered a theft of about $6.3 billion on October 29, the largest in crypto history. The FBI attributes it to North Korean hackers and, according to Binance, it all began with a fake job interview targeting an engineer. The company says it will absorb the losses and has reopened withdrawals.
On Thursday, October 29, Binance, the world's largest cryptocurrency exchange, suffered a theft that the company itself estimates at around $6.3 billion.
Continues in the full story