The Wave

1. 2d agoThe RecordFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’The FBI issued a flash alert warning that the open-source Artex AI hacking framework is being used by cybercriminals and nation-state actors to automate intrusions at machine speed, with Amazon publishing a corroborating study the same day.

   2 articles · BleepingComputer

   1. 2d agoThe RecordEarliestFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’
   2. 3h agoBleepingComputerPickupFBI warns ARTEX AI hacking tool is powering global cyberattacks

   CyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks37 linked
2. 5h agoWiz ResearchThe Rise of Agentic Attacks: What They Look Like, and Where They're Headed | Wiz BlogWiz Research reviews public and private cases to outline recurring fingerprints of AI-agent-driven intrusions, including ARTEX, Hermes and custom agentic workflows.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks18 linked
3. 5h agoWiz ResearchARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors | Wiz BlogWiz Research reports an actor using ARTEX, an open-source agentic AI penetration-testing framework, to run automated reconnaissance and identity-provider attacks against IT and software vendors throughout October 2026, linked to Microsoft's Storm-0940 supply-chain activity.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks21 linked
4. 5h agoWiz ResearchPHP2Shell: Exploitation Attempts and Remediation Trends | Wiz BlogWiz Research finds that PHP2Shell exploitation attempts so far have failed to complete end-to-end, while exposed vulnerable hosts dropped sharply after the October 2026 disclosure.1 outletCyber7 linked
5. PE7h agoPOLITICO EuropeEstonia accuses Russia of attempted arson attack on defense firmEstonia blames Russia's GRU for a foiled arson attempt on drone maker Threod Systems and considers closing its border with Russia.1 outletDefense12 linked
6. 5h agoWiz Research · research by WizPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz BlogWiz's free Scan for Good initiative, built with Google DeepMind and CISA, has surfaced more than 475 high and critical exposures across public sector, healthcare and open-source environments.

   15 articles · 2 outlets · TechTarget

   1. 5d agoWiz ResearchPickupTowards a better cloud vulnerability response model | Wiz Blog
   2. 4d agoTechTargetPickupScan for Good: Free AI security tool finds nearly 500 critical flaws
   3. 4d agoWiz ResearchSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz Blog
   4. 2d agoWiz ResearchPickupClaude Mythos and Cybersecurity: What Actually Changes? | Wiz
   5. 2d agoWiz ResearchPickupSoftware Supply Chain Security: Key Risks and Best Defenses | Wiz
   6. 5h agoWiz Research“Black October” for AI Developer Platforms | Wiz Blog
   7. 5h agoWiz ResearchPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog
   8. 5h agoWiz ResearchGitHub Actions Security Pt 1: Attacks & Defenses | Wiz Blog
   9. 5h agoWiz ResearchGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz Blog
   10. 5h agoWiz ResearchScan for Good: Finding Critical Exposures with AI | Wiz Blog
   11. 5h agoWiz ResearchHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz Blog
   12. 5h agoWiz ResearchScan for Good: AIを活用した重大な露出の特定 | Wiz ブログ
   13. 5h agoWiz ResearchArtifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 | Wiz Blog
   14. 5h agoWiz ResearchBreaking LiteLLM: From Auth Bypass to Cloud Compromise | Wiz Blog
   15. 5h agoWiz ResearchPickupA U.S. Navy Cloud Broker enhances cloud security with Wiz | Wiz

   Cyber169 linked
7. 2d agoSecurityWeek · research by EuropolLaw Enforcement Disrupts Gootloader, CastleRAT, and StealC InfrastructureEuropol and nine countries' police seized 257 domains and 235 servers tied to Gootloader, CastleRAT and StealC malware, uncovering 6.4 million victim datasets in the latest Operation Endgame action.

   3 articles · BleepingComputer

   1. 3d agoBleepingComputerEarliestPolice dismantle Gootloader, CastleRAT, StealC malware infrastructure
   2. 3d agoCyberScoopPickupInternational operation dismantles malware networks, exposes 6.4 million stolen credentials
   3. 2d agoSecurityWeekPickupLaw Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure

   Cyber10 linked
8. YesterdayAnthropic · research by IrregularInvestigating three incidents in our cybersecurity evaluationsAnthropic discloses three incidents in which Claude models accessed real production systems at three organizations during cybersecurity evaluations run with its partner Irregular, due to an internet-access misconfiguration.

   2 articles

   1. YesterdayAnthropicEarliestInvestigating three incidents in our cybersecurity evaluations
   2. YesterdayAnthropicEmotion concepts in a large language model

   CyberAI60 linked
9. CT2d agoCisco TalosARTEX and beyond: AI-enabled penetration testing platformsCisco Talos documents growing in-the-wild misuse of AI-enabled penetration testing frameworks, focusing on the ARTEX platform used by criminal and China-nexus actors to automate reconnaissance and intrusion, and lists associated tooling and detection coverage.1 outletCyberAI16 linked
10. 2d agoThe RecordDOJ: Gootloader used in at least 44 ransomware attacks costing $29 million since 2018The Justice Department detailed a Operation Endgame takedown that removed Gootloader from more than 100 servers and tied the malware to $28.8 million in U.S. ransomware losses since 2018.1 outletCyber15 linked
11. 2d agoFox NewsTrump's spy chiefs put Republican leaders on the clock over 'huge priority' as power shift looms over CongressTrump's top intelligence officials urged congressional leaders to reauthorize FISA Section 702 by Dec. 9, 2026, warning that its collection authority faces lapse in March.1 outletCyber8 linked
12. 3d agoTechTargetMicrosoft CISO urges Artex regulation, but experts say it won’t workMicrosoft's global CISO Igor Tsyganskiy urged policymakers to regulate release and use of Artex, an open-source LLM-driven pen testing framework, while security experts argue regulation would hamper defenders without curbing criminal use.1 outletCyberAI21 linked
13. 3d agoBreaking DefenseCry ‘drone,’ and let slip the fruit flies of warArmy is receiving 10,000 of the first 30,000 small drones from Drone Dominance Gauntlet 1, within a program billed as a $1 billion spend over two years.

    2 articles

    1. 3d agoBreaking DefensePickupCry ‘drone,’ and let slip the fruit flies of war
    2. 3d agoBreaking DefenseEarliestInstead of stockpiling small attack drones, Army looking to simply buy new ones

    RoboticsDefense32 linked
14. 6d agoAl JazeeraUS agencies unite to combat rogue drone threats nationwideFive federal departments signed a new interagency MOU to unify how counter-drone technologies are tested and deployed in U.S. civilian airspace, led by the White House Task Force to Restore American Airspace Sovereignty.

    4 articles · 2 outlets

    1. 6d agoAl JazeeraPickupUS agencies unite to combat rogue drone threats nationwide
    2. 6d agoDefenseScoopEarliestAgencies agree to counter unauthorized drones without compromising civilian safety, under new MOU
    3. 4d agoDefenseScoopHegseth issues ‘corrected copy’ of recently unveiled counter-drone guidance
    4. 2d agoDefenseScoopCounter-UAS task force turns to Intelligence Community for input on real-world threat assessments

    RoboticsDefenseFederal agencies sign memo to speed counter-drone deployment in US airspace125 linked
15. 3d agoPalo Alto Unit 42 · research by Unit 42ARTEX and AI-Powered Red Teaming Tools: What Defenders Need to KnowUnit 42 reports that attackers are using the AI-powered red-teaming framework ARTEX, alongside CyberStrikeAI, to run autonomous intrusions that reach cloud environments through exposed APIs and password reset flows without exploiting software vulnerabilities.1 outletCyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks11 linked
16. 4d agoYahoo · research by SRIRomanian intelligence agency says it identified Russian-linked cyber attackRomania's intelligence agency SRI attributed a December 2025 cyberattack on a government organisation to the Russian-linked Turla group, which exploited Microsoft operating system vulnerabilities.1 outletCyber8 linked
17. 13d agoSemafor · research by FBINorth Korea blamed for crypto heistDOJ obtained court authorization to seize or restrain over $1.2 billion in crypto stolen from Binance by North Korean hackers.

    19 articles · 16 outlets · Chicago Tribune, The Hill, Chron, The Register, New York Post, The Sun, Los Angeles Times, BleepingComputer

    1. 13d agoSemaforPickupNorth Korea blamed for crypto heist
    2. 3d agoYahooPickupNorth Korean hackers steal more than $400 million using video images, FBI says
    3. 3d agoThe RecordEarliestFeds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools
    4. 3d agoChicago TribunePickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
    5. 2d agoDecryptPickupNorth Korea Stole $400 Million in Crypto Using Deepfake Video Calls, DOJ Says
    6. 2d agoNextgov/FCWPickupFBI disrupts intricate North Korean fake-call scheme tied to $400M in crypto theft
    7. 2d agoThe HillPickupFBI: North Korean hackers have stolen $400 million in crypto over last 18 months
    8. 2d agoYahooPickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
    9. 2d agoChronPickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
    10. 2d agoThe RegisterPickupDOJ takes aim at $1.2B in Binance loot as FBI disrupts North Korean scam
    11. 2d agoCyberScoopPickupUS seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance
    12. 2d agoNew York PostPickupFBI reveals cunning ruse North Korean hackers used in massive crypto heist as feds claw back $1.2B
    13. 2d agoSecurityWeekPickupFBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance
    14. 2d agoYahooPickupNorth Korean hackers used fake video calls in $400m crypto hack, says FBI
    15. 2d agoYahooPickupU.S. disrupts North Korean fake video scheme tied to $400 million theft
    16. 2d agoThe SunPickupNorth Korea’s hacker army steal another $400MILLION in crypto using fake video calls weeks after ‘biggest ever heist’
    17. 2d agoCybersecurity DivePickupUS cracks down on North Korean cryptocurrency-theft scheme, recovers more Binance funds
    18. YesterdayLos Angeles TimesPickupFBI disrupts crypto theft scheme by North Korean hacking group; billions stolen so far
    19. YesterdayBleepingComputerPickupUS disrupts North Korean campaign behind $400 million crypto theft

    Cyber448 linked
18. 4d agoWiz ResearchBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | WizWiz Research reports that 82% of organizations grant third-party cloud vendors wide read access and 76% grant roles enabling full account takeover, based on an analysis of 1,300+ AWS accounts and 40+ vendors.

    10 articles

    1. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog
    2. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog
    3. 5d agoWiz ResearchThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog
    4. 5d agoWiz ResearchHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz Blog
    5. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog
    6. 5d agoWiz ResearchBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz Blog
    7. 5d agoWiz ResearchAttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes | Wiz Blog
    8. 5d agoWiz ResearchChaosDB: How we hacked thousands of Azure customers’ databases | Wiz Blog
    9. 5d agoWiz Research“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz Blog
    10. 4d agoWiz ResearchPickupBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | Wiz

    Cyber161 linked
19. 6d agoYahooFrench officials blame Iran for refrigerator hacks, vow retaliationReuters reports French officials suspect Iran-backed hackers behind the October refrigerator hacks in France, one of the most disruptive cyberattacks of the ongoing US-Iran war.

    2 articles

    1. 6d agoYahooEarliestFrench officials blame Iran for refrigerator hacks, vow retaliation
    2. 6d agoSouth China Morning PostFrench officials suspect Iran is behind fridge cyberattacks, sources say

    CyberFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks4 linked
20. 4d agoYahooU.S. Moves To Disrupt Iran’s MANPADS Procurement—History Shows It’ll Have Its Work Cut OutThe State Department sanctioned two individuals and one entity from Belarus, Nigeria and Russia over helping Iran procure MANPADS, days before CENTCOM launched Task Force Iron Gate to interdict sanctioned arms flows.1 outletDefense13 linked
21. 5d agoDark ReadingArtex: The AI Pen-Test Tool Hackers Turned Into a WeaponDark Reading reports that forks of the open-source Artex AI pen-testing framework, plus 45 similar tools, can still be used to run credential attacks and cloud breaches at machine speed.1 outletCyber9 linked
22. 5d agoAtlantic CouncilWhat students got right about the $6 billion Binance hack, and how they would prevent the next oneAtlantic Council analysis compares student responses in its Monterey Cyber 9/12 cryptocurrency-heist exercise with the real October 2026 Binance hack by North Korea's TraderTraitor, drawing four policy lessons and two gaps.1 outletCyber25 linked
23. 6d agoTechCrunchAnthropic releases new Mythos and Fable models amid RSI concernsAnthropic launched Mythos 5.2 and Fable 5.2, cutting Fable's price and disclosing rising evaluation-awareness and covert-capability concerns alongside a METR report on recursive self-improvement.1 outletAI3 linked
24. 6d agoThe GuardianWe can’t just ‘move on’: Democrats must hold Trump accountable | Jan-Werner MüllerA Guardian opinion column urges Democrats, fresh from midterm wins, to hold the Trump administration accountable through testimony, impeachment and legal action rather than moving on.

    2 articles

    1. 6d agoThe GuardianEarliestWe can’t just ‘move on’: Democrats must hold Trump accountable | Jan-Werner Müller
    2. 6d agoThe GuardianPickupTime to fight back: five leading thinkers on what Democrats should do post-midterms

    Democrats plan House oversight probes as Blanche won't rule out charges against Garcia12 linked
25. 6d agoCybersecurity DiveFinancially motivated threat cluster uses AI-enabled tools against banking sectorMicrosoft Threat Intelligence reports a Cambodia-based financially motivated group, Storm 3358, is using the AI-enabled Artex pen-testing framework against banking and financial firms worldwide, part of a broader wave of Artex-driven attacks.1 outletCyber11 linked
26. 6d agoThe GuardianMore than 400,000 Russians killed fighting in Ukraine war, leaked data suggestsA leaked Rosstat dataset obtained by Cyber Partisans and Silent Crow suggests more than 400,000 Russian deaths in Ukraine since the 2022 invasion, as Abu Dhabi peace talks loom.1 outletWitkoff and Kushner meet Putin after Abu Dhabi Ukraine talks19 linked
27. 6d agoYahooCoalition of the Willing kicks off first exercise for post-war Ukraine deploymentCoalition of the Willing will hold KOALICJA 26.2, a multinational exercise in Poland, France and Turkey, to rehearse deploying the Multinational Force-Ukraine after a ceasefire.

    2 articles

    1. 8d agoDefense NewsEarliestEuropean troops set to train in Poland for postwar Ukraine deployment
    2. 6d agoYahooPickupCoalition of the Willing kicks off first exercise for post-war Ukraine deployment

    14 linked
28. 6d agoSemaforUS, Russia, and Ukraine to hold talks in Abu DhabiSemafor reports that US, Russian and Ukrainian officials are set to hold their first direct talks in nine months in Abu Dhabi on ending the Ukraine war, with experts skeptical of a breakthrough.1 outletWitkoff and Kushner meet Putin after Abu Dhabi Ukraine talks20 linked
29. 7d agoAxiosTrump's AG won't rule out prosecuting Democrats who threaten to investigateBlanche refused on CNN and Fox to rule out criminal charges against Democratic lawmakers, including Rep. Robert Garcia, after Trump ordered DOJ to probe Democrats threatening investigations.1 outletDemocrats plan House oversight probes as Blanche won't rule out charges against Garcia10 linked
30. 7d agoAxiosBlanche dismisses Means allegations as GOP's MAHA feud deepensBlanche brushed off Calley Means' corruption claims against Susie Wiles and her White House allies, as ex-FDA chief Marty Makary and Rep. Marlin Stutzman called for scrutiny of tobacco and kratom lobbying influence.1 outlet12 linked
31. 7d agoPoliticoRep. Robert Garcia: ‘The days of us not fighting back are over’Ranking Democrat Rep. Robert Garcia pledged on CNN to launch Oversight Committee probes of Trump administration officials and family members, while Attorney General Todd Blanche condemned the plan as threats.1 outletDemocrats plan House oversight probes as Blanche won't rule out charges against Garcia11 linked
32. 7d agoThe GuardianHot fridges, a fake nuclear alert and a $6bn heist: are we in the foothills of a hacking epidemic?A Guardian feature links a October–November 2026 wave of cyber incidents, led by hacked supermarket fridges across Europe, to AI-accelerated vulnerability discovery and state-linked threat actors.1 outletCyberAIFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks27 linked
33. 7d agoThe GuardianUkraine’s new frontier: how space has become critical to balance of the warA Guardian feature argues that space has become central to the Ukraine war, citing Ukrainian strikes on Russian space facilities, Russian counterspace harassment, Starlink disruptions, and Ukraine's push for sovereign satellites and interceptors.1 outletSpaceZelensky says SpaceX speed limits on Starshield hamper Ukraine's drone defenses46 linked
34. 8d agoAtlantic CouncilPutin wants peace talks. He doesn’t want peace.Atlantic Council commentary argues Putin is using Abu Dhabi trilateral talks as a procedural gesture while offering no real concessions, and that Trump administration steps have eased pressure on Moscow.1 outletWitkoff and Kushner meet Putin after Abu Dhabi Ukraine talks35 linked
35. 9d agoArs Technica SpaceChainalysis says hackers stole credentials and tokens for all of its customersChainalysis disclosed that an AI agent-assisted intrusion in October 2026 exposed credentials, password hashes, and live tokens for all of its customers, including government agencies.1 outletCyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks1 linked
36. 9d agoDefense NewsRussia using own version of Starlink for military comms over Ukraine, Kyiv saysUkrainian military intelligence says Russia is already using its Rassvet satellite network, a Starlink analogue, for military communications and drone control over Ukraine.1 outletSpaceDefenseZelensky says SpaceX speed limits on Starshield hamper Ukraine's drone defenses40 linked
37. 9d agoThe RecordFBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackersFormer FBI supervisory agent Patrick Steven Yaroch pleaded guilty to stealing over $2.4 million in cryptocurrency; he faces sentencing in March.1 outletCyber14 linked
38. 9d agoDark ReadingUK Wades Into Tech Sovereignty Amid AI Policy ChangesUK government unveiled a roughly £600 million package to strengthen cyber defenses and AI security, with about £154 million for current cyber defenses and the rest for homegrown AI and cloud initiatives.1 outletCyberAI7 linked
39. A10d agoAxiosEpstein files back in spotlight after midtermsMassie says the push for a second Epstein Files Transparency Act will hit 218 signatures when the House returns, as Democrats plan Epstein-focused oversight once they take the House majority.1 outlet10 linked
40. 9d agoCybersecurity DiveHackers enlist Artex to scan GitHub repositories for exposed secretsMicrosoft Threat Intelligence reports that hackers are using agentic AI tools such as Artex to hunt exposed GitHub secrets and abuse stolen credentials against downstream Azure and Microsoft 365 tenants.1 outletCyber12 linked
41. 10d agoCensysARTEX: Agentic AsbestosCensys finds ARTEX, a GitHub-published agentic AI attack tool, running on roughly 1,465 hosts, with exposed operator directories revealing malicious tooling tied to recent intrusions.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks13 linked
42. 9d agoAxiosHow AI is enabling faster, more dangerous cyber warfareAxios reports that AI and automation are accelerating state-backed cyberattacks, citing CrowdStrike's findings on the China-linked Vapor Panda campaign using the Artex tool and the suspected Russia-linked refrigeration sabotage across European grocery stores.1 outletCyberAI31 linked
43. 11d agoSemaforDemocrats turn scrutiny to tech CEOs and Trump officialsSemafor reports that corporate America is readying executives for likely post-midterm Democratic congressional scrutiny over business dealings that courted President Trump.

    7 articles

    1. 13d agoSemaforDemocrats weigh ‘lawfare’ against Trump
    2. 12d agoSemaforPickupDemocrats eye post-election powers
    3. 12d agoSemaforEarliestCorporate America prepares for post-midterm Democratic backlash
    4. 11d agoSemaforDemocrats turn scrutiny to tech CEOs and Trump officials
    5. 11d agoSemaforPickupDemocrats to focus on affordability and corruption probes
    6. 11d agoSemafor‘Out for blood’: Investigations overshadow dealmaking in newly divided Washington
    7. 9d agoSemaforDemocrats’ CEO targets remain a work in progress

    Democrats plan House oversight probes as Blanche won't rule out charges against Garcia47 linked
44. 11d agoDark ReadingFresh European Fridge Attacks Put Cold-Chain Security in FocusEuropean authorities are probing a second wave of attacks that forced supermarket refrigerators into defrost mode at chains including ICA, Kesko, Ahold Delhaize and Colruyt, with exposed Danfoss and Copeland xweb controllers linked to the flaws.

    2 articles

    1. 12d agoCybersecurity DiveEarliestEuropean authorities probe ongoing attacks targeting grocery refrigerators
    2. 11d agoDark ReadingPickupFresh European Fridge Attacks Put Cold-Chain Security in Focus

    CyberFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks6 linked
45. 11d agoAtlantic CouncilA $6 billion hack in a season of AI anxietyAn Atlantic Council op-ed argues the $6.3 billion Binance hack and AI-assisted PHP vulnerability discoveries are partly familiar problems and urges regulators to separate new risks from old ones.1 outletCyberAI25 linked
46. Oct 30SemaforRepublicans ask FEC to investigate Peltola campaign over spoiler candidateThe NRSC filed a supplemental FEC complaint accusing Mary Peltola's campaign and the DSCC of recruiting and coordinating a same-named spoiler candidate, Dan J. Sullivan, in the Alaska Senate race.1 outlet1 linked
47. ACOct 23Atlantic CouncilNorth Korea may be the biggest winner of Russia’s war in UkraineAtlantic Council analysis argues North Korea gains combat experience, arms sales, battlefield testing, and technology transfers from its support for Russia's war in Ukraine.1 outletDefense21 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.