Attackers exploit Node-RED CVE-2026-58115 to deploy Linux bot and backdoors
VulnCheck detects in-the-wild exploitation of CVE-2026-58115 deploying a Linux bot and webshells.
Wednesday, November 4, 2026
Security & AI, live
Updated 03:52 UTC · 12m agoNext check 04:12 UTC2 new in the last hour
Top right now
24hTop stories
Stories
Binance hack exposes $6.34 billion theft
Binance attributes $6.34 billion theft to North Korea-linked Lazarus Group using fake job interviews and AI abuse.
1
Democrats win control of the House of Representatives
Democrats are projected to win approximately 248 seats, the first time in Trump’s second term that the party won’t control both chambers.
cPGuard Update Channel Hijacked to Install Backdoors
Attacker hijacked cPGuard update system to distribute backdoor in versions 5.88.12-5.88.19 that collected password hashes and other files from Linux servers.
Cyber-attack disrupts refrigeration in European supermarkets
Nine European countries hit as hackers set fridges to 50°C, destroying food stock.
Vani AIChat, create and build with frontier AI.Claude, GPT, Gemini and Grok in one workspace: research with sources, images and video, docs and slides, projects with memory.
GLM 5.3 Derisked for security research
An AI model for exploit, malware and vulnerability work, in chat or over the API.
Try it free
Google dismantles XCPE botnet operated by Videostrong
Google banned Videostrong from Android devices after 1.3 million set-top boxes enrolled in the botnet.
1
Apache ZooKeeper vulnerable to unbounded recursion in snapshot serialization (CVE-2026-115448)
A client can cause the server to become unrecoverable by creating znodes due to no depth limit in recursion.
Hackers hijack Ukraine and Russia emergency alert apps to send fake nuclear warnings
Ukraine's Air Alert and Russia's Emergencies Ministry apps sent false nuclear strike and radiation alerts; notifications disabled and services restored.
French blood storage units targeted in cyberattack
Attackers caused blood samples in French storage units to overheat to 110°C, destroying them.
Syrian Hacker Sentenced for Assad Regime Hacking Conspiracy
The Syrian man was sentenced to 42 months in prison for hacking 47 Western media entities, businesses, NGOs, and US government targets on behalf of the Assad regime.
1
Defense Contractor Exposed Pentagon System via Personal AI Agent
A contractor connected a personal Claude Code AI agent to a secure Pentagon system containing controlled unclassified information and sent login credentials to a third-party site.
1
Hackers Apologize for Attacking UNM Hospital and Offer $2,500 Compensation
BYOD hackers offered $2,500 to affected patients after mistakenly targeting the hospital.
German Police Disrupt Investment Fraud Crime-as-a-Service Outfit
Europol-supported operation arrests seven suspects and seizes servers in Germany, Kosovo and elsewhere, disrupting a fraud operation affecting victims in over 50 countries.
WorkOS confirms data breach exposing customer Slack conversations
WorkOS detected unauthorized access to an internal sales app on October 30, 2026, with no evidence of production service impact.
Criminals use stolen AI access to rack up $1 million cloud bills
GTIG and Mandiant report LLMJacking attacks causing bills up to $1 million via stolen cloud credentials.
1
69GB of Philippine Migrant Worker Data Leaked in Government Breach
An unknown operator exfiltrated 69GB of migrant worker and contract data from the Philippine Overseas Employment Administration to a Singapore staging server.