TECHNO CHATTECH BLOG

Latest articles — page 4

Google’s November Android update fixes zero-click RCE flaws
Cloud Computing

Google’s November Android update fixes zero-click RCE flaws

Google’s November 2026 Android security update addresses more than 200 vulnerabilities across the operating system, kernel, and hardware components. Published on November 2, the bulletin includes critical remote code execution flaws that require no user interaction, and devices with security patch level 2026-11-05 or later receive all applicable fixes. Android update flaws span Framework, System, kernel, and hardware The most serious Framework issue, CVE-2026-58868, could allow remote code execution without…

Saugata Datta3 min read59
Microsoft Edge tightens scam notification blocking
Linux

Microsoft Edge tightens scam notification blocking

Microsoft Edge now automatically disables notifications from websites that send users to detected scam pages, closing one route used for fake virus warnings. The change reached Edge 156, according to Microsoft’s November 2 disclosure, and it works with Microsoft Defender SmartScreen and Scareware blocker detections. The browser can now stop further notifications from the site that led a user to a scam page. Microsoft said closing the deceptive page alone…

Saugata Datta3 min read51
Google patches an Android flaw that can run code without user action
Cloud Computing

Google patches an Android flaw that can run code without user action

A critical Android flaw could let an attacker run code on a phone remotely without any user action, according to Google’s November security bulletin. The flaw is CVE-2026-58868, and Google says it affects Android 14 through 17. Security patch level 2026-11-01 or later includes the fix for CVE-2026-58868. Phone makers and carriers deliver that update on their own schedules, and Google says older versions such as Android 12 and 13…

Saugata Datta4 min read58
Russian police arrest VasyGrek suspects and seize criminal equipment
Cybersecurity

Russian police arrest VasyGrek suspects and seize criminal equipment

Russian authorities have arrested three suspected members of the threat group known as VasyGrek and dismantled its criminal infrastructure. The group is also known as Fluffy Wolf and has targeted Russian and international companies since 2016. The Ministry of Internal Affairs of the Russian Federation, or MVD, says the suspects are believed to have stolen money from organizational accounts and created, distributed, and used malicious software. In one September 2025…

Saugata Datta3 min read51
LLMJacking technique triggers million dollar corporate cloud expenses
AI Agents and Frameworks

LLMJacking technique triggers million dollar corporate cloud expenses

Unauthorized access to corporate large language models, a technique called LLMJacking, is being used to resell AI services and generate massive cloud bills for victims. Google Threat Intelligence Group (GTIG) reported on November 2 that these attacks have affected various industries across North America, South America, and Asia Pacific, leading to costs reaching $1 million. Financial impact on victim organizations Mandiant investigated multiple 2026 incidents where stolen credentials resulted in…

Saugata Datta3 min read56
Stolen Entra ID credentials widened access to 27 organizations
Azure

Stolen Entra ID credentials widened access to 27 organizations

Todyl’s latest investigation update describes an ongoing campaign that has used stolen Microsoft Entra ID application credentials and Azure DevOps identities to reach Microsoft 365 and Azure environments. The activity has affected at least 27 organizations, and it has targeted managed service providers, or MSPs, and their customers since November 1, 2026. Attack paths across cloud tenants The operator targeted about 45 app registrations across roughly 18 organizations, and more…

Saugata Datta3 min read66
Philippine government breach exposed migrant worker data and backup records
Compliance and Privacy

Philippine government breach exposed migrant worker data and backup records

An unknown threat actor appears to have taken nearly 69GB of sensitive data from the Philippine Overseas Employment Administration, including worker information, contracts, and financial records. Hunt.io said the material was copied from backup databases through a Singaporean staging server used in the breach, and the trail ended there. Data moved through a staging server Hunt.io’s Oct. 28 analysis said the attacker copied 27 backup databases in 24 minutes. The…

Saugata Datta3 min read66
French blood plasma freezers changed settings after supplier compromise
Hacking and Exploits

French blood plasma freezers changed settings after supplier compromise

Hackers reportedly changed temperature settings on refrigeration equipment used by the French Blood Establishment, EFS, from around −30°C to 110°C after targeting its cooling service provider, Coolworld. The incident happened overnight between November 1 and 2, 2026, and it raised concerns about frozen plasma stored for patient transfusions. Staff in Bourgogne-Franche-Comté were among those who noticed the problem. France’s Health Ministry said they detected the abnormal temperatures in time and…

Saugata Datta3 min read61
Binance says fake recruiter tricked employee into wallet breach
Hacking and Exploits

Binance says fake recruiter tricked employee into wallet breach

Binance says North Korean hackers used a fake job interview to lure a software engineer into installing malware that led to the compromise of its wallet infrastructure and the theft of about $6.34 billion in digital assets. The exchange said the intrusion started in September and that the attack on October 29 used social engineering, malicious software, and compromised internal systems. The company tied the case to an incident report…

Saugata Datta3 min read63
CERT-In turns to Claude Mythos for controlled cybersecurity testing
AI Agents and Frameworks

CERT-In turns to Claude Mythos for controlled cybersecurity testing

India's cybersecurity agency, the Indian Computer Emergency Response Team, also known as CERT-In, has reportedly secured access to Claude Mythos. The Anthropic model is being used to detect vulnerabilities and weaknesses across systems, and the testing is taking place in a controlled environment. Anthropic’s cybersecurity model and CERT-In’s access Claude Mythos is Anthropic’s frontier AI model for cybersecurity, and it was released in April this year. CERT-In had demanded fair…

Saugata Datta2 min read69
Ferrari’s Luce EV reaches full allocation for 2027
Electric Vehicles

Ferrari’s Luce EV reaches full allocation for 2027

Ferrari’s Luce EV, the company’s first electric car, is fully allocated for 2027. CEO Benedetto Vigna said every Luce Ferrari plans to build next year already has a buyer, even though the model drew mockery and broad criticism when it debuted in May. Luce demand and delivery timing The five-seater EV was designed by Jony Ive, Apple’s longtime design chief. It starts at about $615,000, and the first deliveries are…

Saugata Datta2 min read61
cPGuard update compromise spreads backdoor and data theft
Cybersecurity

cPGuard update compromise spreads backdoor and data theft

OpsShield says attackers compromised the cPGuard web security suite’s update distribution infrastructure and used it to push a malicious script and a backdoor. The company said the attack began on November 2 at 02:06 UTC, affected versions 5.88.12 through 5.88.19, and may have missed some servers because update checks run at specific intervals. cPGuard update compromise OpsShield said it detected the compromise and stopped the malicious distribution within 12 hours…

Saugata Datta2 min read64
🧰

Free Tools: IP, DNS, SSL

40+ free network and other tools in one place. No signup. Click explore or visit https://technochat.in/tools

Explore