OSINT / CyberSec report 03.11.2026 00:15

1. Ivanti patched two Connect Secure zero-day flaws chained in attacks since October 1, urging immediate updates. (BleepingComputer)

2. FBI attributed the $6.3 billion Binance crypto theft to North Korean group TraderTraitor, the largest such heist on record. (The Record)

3. Hackers stole about $2.7 million from Polymarket traders via a hijacked DebugBear script, with refunds planned for 726 wallets. (TheHackerNews)

4. Chainalysis confirmed a breach where attackers used offensive agentic techniques to access internal tools and expose customer identity data. (BleepingComputer)

5. Northflank warned customers to rotate credentials after a breach led to unauthorized use of AI API keys. (BleepingComputer)

6. New VOLTA infostealer uses Claude, Gemini, and Kimi AI to rank stolen data by financial value for monetization. (TheHackerNews)

7. PapRAT cyber espionage campaign targets South Asian organizations via legitimate Windows functionality in three attack chains. (Dark Reading)

8. NetamLoader malware targets government Windows 10 systems in Asia via .NET injection in a sophisticated infection chain. (TheHackerNews)

9. Alpine Linux rebuilt its GitLab server after an attempted RCE attack exploiting a critical GitLab vulnerability. (BleepingComputer)

10. A critical Canonical LXD and MicroCloud flaw with CVSS 10.0 allows attackers to impersonate trusted clients without a private key. (TheHackerNews)

11. Android SMS of Death exploit, CVE-2026-58882, can remotely crash unpatched phones via a crafted text message. (BleepingComputer)

12. Mirage2FA stole 4,561 M365 session cookies despite MFA via AiTM proxy, linked to CVE-2026-69836 with CVSS 10.0. (Reddit)

13. Researchers disclosed remote code execution on Linux systems with multipath TCP. (Reddit)

14. WordPress pingback and Brotli RCE vulnerabilities were detailed in a security post. (Reddit)

15. Google Threat Intelligence Group reported adversaries weaponizing agentic frameworks for highly automated intrusions. (Google Cloud)

16. Microsoft Digital Defense Report identifies government agencies as prime AI attack targets but misses Microsoft bug exploitation. (Dark Reading)

17. Cloud Exposure Index 2026 mapped 484,142 open buckets, highlighting widespread cloud misconfiguration risks. (Reddit)

18. Reddit announced plans to lock content behind logins to combat data scrapers. (BleepingComputer)