News
Cybersecurity news roundup (Nov 2, 2026)
• Malicious Claude code extension served in Cursor supply chain attack • Polymarket returns $3.9 million to traders as DebugBear cites DNS hijack • Google introduces $250,000 root‑in‑cloud bug bounty reward • Chainalysis discloses data breach following AI‑driven cyberattack • FBI flags over 600 addresses tied to North Korea’s Binance heist • Ivanti patches two more zero‑days exploited in Connect Secure attack chain • Revolve data breach impacts at least 180,000 people • Northstar Security exits stealth with $7 million to expose toxic risk combinations • PHP2Shell attacks root Palo Alto firewalls but fail against WordPress • $6 billion Binance hack bears hallmarks of North Korea’s TraderTraitor • TeamViewer flaw could let malicious hosts take over support technicians’ machines • $2 million+ drained from Polymarket traders in new supply chain attack • Drupal Commerce core vulnerability exploited against online stores • Max‑severity GitLab vulnerability exploited against Alpine Linux