Today's brief_
The five threats defenders should see today
- 01
LEAKMediumBANKCrédit Mutuel Arkéa says supplier compromise enabled account transfersCrédit Mutuel Arkéa said attackers used its account for transfers after compromising a supplier. ZachXBT estimated losses above $133 million. - 02
CVEHighBTCBTCPay Server hot wallets had Bitcoin and Litecoin stolenBTCPay Server received reports of Bitcoin and Litecoin being stolen from hot wallets on Nov 1, targeting servers on version 2.4.1 or earlier. - 03
CVEHighRCEGoogle Android flaw CVE-2026-58868 could enable remote code executionGoogle patched CVE-2026-58868, a critical Android Framework flaw that could enable remote code execution without user interaction on Android 14 through 17. - 04
SUPPLYMediumAISECBinance said campaign culminated in $6.43 billion in assetsBinance said a multi-stage campaign culminated in $6.43 billion in assets being taken from the cryptocurrency exchange, involving two engineers and an internal AI tool. - 05
AI-ATKMediumAINCSC warned AI ransomware could target UK critical infrastructure by 2028The NCSC said AI-powered malware is highly likely to be used in ransomware attacks against Britain’s critical national infrastructure by 2028. It published the warning on Nov 3, 2026.