Cybersecurity Headlines

China planning broad AI guardrails
https://www.bloomberg.com/news/articles/2026-11-03/china-plans-broad-ai-guardrails-after-global-security-lapses
UK predicts "routine" use of AI in nation-state attacks
https://www.ft.com/content/131d9506-04b1-49b8-ba79-b0d783219c40?syn-25a6b1a6=1
https://bsky.app/profile/joetidy.bsky.social/post/3mzfvc75l222g
Ukraine's war crime investigations hit with cyberattack
https://therecord.media/russia-linked-cyber-spies-target-ukraine-war-support
Details about the Binance hack
https://thehackernews.com/2026/11/binance-reveals-how-fake-job-interviews.html
https://www.msn.com/en-us/money/markets/north-korea-denies-links-to-binance-hack-as-researchers-trace-stolen-billions/ar-AA2gDfyp
mSecure tells users to reset passwords
https://www.theregister.com/security/2026/11/03/password-manager-msecure-tells-users-to-change-passwords-wont-say-why/5307296
OpenAI on a security sprint
https://www.wsj.com/politics/national-security/openai-hires-former-army-secretary-dan-driscoll-to-cybersecurity-role-0e5cc0a1?st=cfNEPb
https://openai.com/index/preparing-our-next-security-sprint-to-harden-openai/
LLM jacking comes with a high price tag
https://thehackernews.com/2026/11/google-warns-llmjacking-attacks-are.html
Google shuts down TV malware
https://9to5google.com/2026/11/02/google-android-tv-box-backdoor-shut-down/















Get the show notes here: https://cisoseries.com/cybersecurity-news-november-4-2026/ 
Huge thanks to our episode sponsor, ESET

Is your business ready to embrace AI with confidence? Explore how companies are balancing rapid AI adoption with growing cyber risk, and where resilience strategies are falling short. Access the full research from ESET's SMB Cyber Readiness Index report for free today at eset.com.

European supermarkets report freezer hacks
https://www.bloomberg.com/news/articles/2026-11-02/belgian-swedish-supermarkets-report-new-suspected-freezer-hack
BTCPay warns of hot wallet thefts
https://www.bleepingcomputer.com/news/security/btcpay-server-warns-of-hot-wallet-thefts-targeting-outdated-instances/
GDPx puts AI agents through harder tests
https://newsletter.semianalysis.com/p/gdpx-measuring-frontier-model-capabilities
Hackers send false emergency alerts
https://www.bloomberg.com/news/articles/2026-11-02/ukraine-and-russia-report-cyberattacks-on-emergency-alert-apps
https://theprint.in/world/ukraine-and-russia-say-emergency-alert-apps-were-hit-by-hacks/3088251/
https://apnews.com/article/717372f7bbf4e8a805bc918f06f9730f
DarkBlinders targets Israel and Iraqi Kurdistan
https://thehackernews.com/2026/11/darkblinders-compromises-israeli-target.html
Chinese hackers use AI across simultaneous attacks
https://www.bleepingcomputer.com/news/security/chinese-hackers-use-artex-ai-in-automated-attacks-against-200-orgs/
Business groups push to renew cyber sharing law
https://cyberscoop.com/business-groups-cisa-2015-renewal-ndaa-cybersecurity/
Ransomware gang claims Michigan State data
https://therecord.media/michigan-state-university-byod-gang-cyber-incident
Get the show notes here:
https://cisoseries.com/cybersecurity-news-november-3-2026/
Huge thanks to our episode sponsor, ESET

ESET MDR is a 24/7 threat management service combining AI and human expertise to achieve an industry-leading 6-minute threat response and containment, removing the need to maintain in-house security specialists. You don't need a security team the size of a Fortune 500. You need ESET. Supervised Cybersecurity for the AI Era. Built to be effortless.

NetamLoader malware targets government Windows systems in Asia
https://thehackernews.com/2026/11/netamloader-malware-targets-government.html
Northflank warns of security breach
https://www.bleepingcomputer.com/news/security/northflank-security-breach-leads-to-abuse-of-customers-ai-api-keys/
Russian home goods chain Poryadok suffers cyberattack
https://therecord.media/russian-home-goods-chain-faces-disruptions
Android SMS of Death zero-click warning
https://www.bleepingcomputer.com/news/security/new-android-sms-of-death-exploit-can-remotely-crash-unpatched-phones/
Data of more than 41,000 homeland security workers leaked
https://www.theguardian.com/us-news/2026/oct/28/homeland-security-data-leak
Fashion retailer Revolve suffers data theft
https://therecord.media/resolve-fashion-retailer-data-breach-payment-cards
British spy agency cannot account for thousands of data storage devices
https://therecord.media/gchq-cannot-account-for-thousands-of-data-devices
UK landline phones to be disconnected in two months
https://www.theregister.com/networks/2026/11/01/landline-phones-will-switch-off-across-britland-in-100-days-no-extensions-openreach/5306673
Get the show notes here: https://cisoseries.com/cybersecurity-news-november-2-2026/
Huge thanks to our episode sponsor, ESET

Managed detection and response used to be built for big enterprises with big budgets. Not anymore. ESET is bringing effortless cybersecurity as a service to businesses of every size, with twenty-four-seven monitoring, automated threat containment, and real experts behind it, all without the overhead. You don't need a security team the size of a Fortune 500. You need ESET. Supervised Cybersecurity for the AI Era. Built to be effortless.

Read the full stories at CISOSeries.com. 
This week's Department of Know is hosted by Rich Stroffolino, with guests Jason Elrod, CISO, MultiCare Health System, and DJ Schleen, head of infrastructure and security, Boats Group.
Missed the live show? Check it out on YouTube.
The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.
Big thanks to our sponsor, GuardSquare

Guardsquare delivers mobile app security without compromise, providing advanced protections for both Android and iOS apps. From app security testing to code hardening to real-time visibility into the threat landscape, Guardsquare solutions provide enhanced mobile application security from early in the development process through publication. Learn more about how to protect your app at Guardsquare.com.

French energy company ENGIE suffers data breach
https://securityaffairs.com/201985/data-breach/engie-data-breach-exposes-customer-details-and-energy-contracts.html
NIST publishes guidance to meet federal post-quantum deadlines
https://www.infosecurity-magazine.com/news/nist-guidance-post-quantum/
MR ROBOT Malware-as-a-Service targets Indian bank customers
https://www.infosecurity-magazine.com/news/robot-malware-indian-bank-customers/
Hackers exploit Cisco SD-WAN flaw to install encryption key stealing malware
https://thehackernews.com/2026/10/hackers-exploited-cisco-sd-wan-flaw-to.html
Japan Airlines warns of data breach
https://therecord.media/japan-airlines-warns-of-breach-country-grapples-with-incidents
GitHub launches npm firewall to block malicious packages before installation
https://thehackernews.com/2026/10/github-launches-npm-firewall-to-block.html
Pentagon treating military base freezer malfunctions as suspected cyberattack
https://www.reuters.com/technology/pentagon-treating-military-base-freezer-malfunctions-suspected-cyberattack-2026-10-29/
 Get more info here: https://cisoseries.com/cybersecurity-news-french-energy-breach-pentagon-freezer-hack-japan-airlines-breach/

Attackers are treating your mobile app like an open book. Sixty-three percent of security leaders recently detected app tampering, cloning, or unauthorized modifications. When your code runs in an untrusted environment, you need runtime self-protection and code hardening to keep attackers out. Address tampering before it starts. Learn more at Guardsquare.com.