ThreatsDay covers fraud arrests, slow patching and a $250K cloud bounty
Original title: ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories
Europol says seven arrests and more than 100 seized servers followed fraud losses of at least $4.5 million.
A weekly bulletin reports several separate developments. The U.K. NCSC says AI tools have almost certainly increased zero-day discovery. An analysis of about 383,000 CVEs finds median patch time exceeds a year on network appliances, versus about two weeks on Windows workstations. Europol says action on 3 November 2026 arrested seven suspects in a fraud network that caused at least $4.5 million in losses.
Unconfirmed: Loss totals, the victim count across more than 50 countries, and the crime-as-a-service role are Europol's account of alleged conduct.
- About 2,000 CVEs, roughly 0.5 percent, have been linked to real-world exploitation.
- Authorities searched 17 locations and seized more than 100 servers.
- Google will pay $250,000 for flaws giving full admin control of arbitrary Cloud organizations.
- Edge 156 disables notifications after SmartScreen or Scareware blocker detects a scam.
- Call centers operated from Albania, Kosovo and North Macedonia.
- Products
- Microsoft EdgeGoogle Cloud
- Organizations
- National Cyber Security CentreEuropol
From the original article
13 min read at thehackernews.com
How much damage can someone do without breaking much? Quite a lot, it seems. A stolen login can open doors across several systems.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.