Channels

Top 100 Trending New

Categories

Crypto Gaming News Entertainment Music Sports Tech Gambling Bots and mini apps Finance Business Education Lifestyle Health Travel Auto Fashion Jobs Dating Deals and shopping

Stickers

Stickers Emoji Themes Wallpapers

Bots Gifts Tools

EN

Interface language

Theme

CurrencyUSD

$US DollarUSD ₽Russian RubleRUB €EuroEUR ₴Ukrainian HryvniaUAH ₸Kazakhstani TengeKZT ₺Turkish LiraTRY złPolish ZlotyPLN ₪Israeli New ShekelILS AEDUnited Arab Emirates DirhamAED R$Brazilian RealBRL RpIndonesian RupiahIDR RMMalaysian RinggitMYR ¥Japanese YenJPY ₩South Korean WonKRW CN¥Chinese YuanCNY

Português (Brasil)

Bahasa Indonesia

Беларуская

Українська

Channels Categories Stickers Bots Gifts Tools

Premium Wiki Glossary Legal

Notifications Settings Log in

An open web layer over public Telegram — search, stats and channel reading right in your browser, no account, no install.

Not affiliated with Telegram FZ-LLC; all data comes from public sources.

Catalog

Top channels Categories Countries Search

Content

Stickers Emoji Gifts Themes Wallpapers

Help

Tools Wiki Glossary Blockchain Safety Premium Advertisers Advertising

© 2026 TG.ME · G.MEDIA network· Updated 11/02/2026 · v0.2.0 · d35ceca

Privacy Terms DMCA & complaints Report a violation

Cybersecurity News Everyday (@cybernotif) — Telegram — TG.ME

Cybersecurity News Everyday

@cybernotif

News Aggregator about Cybersecurity, Don't forget to activate Telegram Notifications to get the latest news.

Show more

Open in Telegram

Information

Username@cybernotif

Linkt.me/cybernotif

Posts Media Stats Similar Reviews

⌘K

Newest first

Newest first Oldest first

Share channel “Cybersecurity News Everyday”

The short link opens the channel straight in the Telegram app — not in a browser tab.

tg.me/go/cybernotif

Is this your channel? Add @tgme as admin — and see how many people click your links. Get the stats →

Channel history

We have been tracking it since November 2, 2026

In all that time the channel has changed neither its name, nor its @username, nor its avatar.

We show only what we have seen ourselves.

Posts Media Stats Similar Reviews

Where to next

Hamster Kombat Announcement19.8M subscribers

Blum: All Crypto – One App13M subscribers

Proxy MTProto11.9M subscribers

Telegram Tips10.7M subscribers

Major Community10.2M subscribers

Pavel Durov10.2M subscribers

Pavel Durov10.2M subscribers

tapswap community9.7M subscribers

This roundup covers new cybersecurity and privacy developments, including Norway’s HIGH national cyber risk level and recommended controls, NIST’s post-quantum migration deadlines, breach-risk guidance, AI-agent safeguards and data-protection policy changes.
🔗 https://cyber.hendryadrian.com/article/13730/cybersecurity-and-privacy-roundup-norway-raises-risk-level-nist-sets-pqc-timeline

Alpine Linux rebuilt its GitLab server and reset passwords after attackers targeted CVE-2026-97229, causing worker crashes. It found no package tampering or confirmed code execution, but missing logs prevented ruling out compromise.
🔗 https://cyber.hendryadrian.com/article/13698/alpine-linux-rebuilds-gitlab-after-attempted-exploitation-of-critical-rce-flaw

The FBI attributed the October 29 theft of about $6.36 billion from Binance to North Korean group TraderTraitor. Binance linked the breach to a compromised DevOps engineer’s laptop and says it has covered about 95% of the affected amount.
🔗 https://cyber.hendryadrian.com/article/13697/fbi-attributes-6-3-billion-binance-heist-to-north-korean-hackers

CVE-2026-112816 lets an attacker with API network access and a trusted client's public certificate impersonate that client in LXD or MicroCloud. Canonical released fixes; no public exploitation is known.
🔗 https://cyber.hendryadrian.com/article/13644/critical-lxd-and-microcloud-flaw-enables-trusted-client-impersonation

32Nov 1

Morphisec analyzed an order-themed email campaign that uses obfuscated JScript to drop LuaJIT and a Lua loader, execute XLoader in memory, then transfer it into an x86 process via shared-section mapping and thread-context redirection.
🔗 https://cyber.hendryadrian.com/article/13643/order-themed-emails-deliver-xloader-through-luajit-and-shared-section-injection

Northstar Security raised $7 million to develop AI agents that connect security and IT data, identify risky combinations across systems, and help teams investigate and carry out supervised fixes.
🔗 https://cyber.hendryadrian.com/article/13625/northstar-security-emerges-from-stealth-with-7-million-for-ai-security-platform

The University of Warsaw confirmed ransomware in part of its IT infrastructure following an incident in January 2026. Officials say findings so far do not indicate unauthorized access to personal data; technical analysis continues.
🔗 https://cyber.hendryadrian.com/article/13554/university-of-warsaw-confirms-ransomware-in-it-infrastructure-no-personal-data-access-indicated-so-f

Shwapno filed a police report seven months after a reported ransomware attack on its parent company, ACI Logistics. The report says attackers demanded $1.5 million and later leaked over 410 GB of data.
🔗 https://cyber.hendryadrian.com/article/13531/shwapno-files-police-report-over-2025-ransomware-attack-and-data-leak

A hijacked DebugBear page-speed script injected malicious code into Polymarket, redirecting signed-in traders’ positions and funds. Blockchain tracing identified about $2.64 million moved; Polymarket says it is refunding affected users and adding script protections.
🔗 https://cyber.hendryadrian.com/article/13485/hijacked-debugbear-script-steals-about-2-7-million-from-polymarket-traders

The FBI attributed a record $6.43 billion cryptocurrency theft to North Korea-linked TraderTraitor. Binance has begun phased withdrawal resumption, while $2.85 billion in assets have reportedly been frozen on-chain.
🔗 https://cyber.hendryadrian.com/article/13487/fbi-attributes-record-6-43-billion-crypto-theft-to-north-korea-linked-tradertraitor

Kaspersky disclosed NetamLoader activity targeting a government-use Windows 10 build in Asia. Telemetry identified one victim; the delivery method and any data theft remain unknown, and the activity has not been attributed.
🔗 https://cyber.hendryadrian.com/article/13486/netamloader-malware-targeted-government-windows-10-systems-in-asia

Technical analysis traces a signed, three-stage IEProc chain to Golden Gh0st RAT, linking it to APT-Q-27 through a reused plugin and C2 key. The backdoor contacted app[.]probref[.]com, but received no commands in testing.
🔗 https://cyber.hendryadrian.com/article/13411/technical-analysis-links-three-stage-ieproc-chain-and-golden-gh0st-rat-to-apt-q-27

Analysis finds a signed 62 MB Windows utility hiding a 9.7 KB loader that retrieves GodRAT over raw TCP and injects it into cmd.exe. The certificate also signed a separate Golden Gh0st loader, but attribution remains undetermined.
🔗 https://cyber.hendryadrian.com/article/13405/signed-windows-utility-loader-delivers-godrat-through-process-injection

Northflank says multiple customers reported unauthorized use of AI API keys stored on its platform after a breach. It urged customers to rotate secrets; the access method and number of affected customers remain undisclosed.
🔗 https://cyber.hendryadrian.com/article/13070/northflank-breach-leads-to-reported-misuse-of-customers-ai-api-keys

CYFIRMA’s fortnightly roundup lists five vulnerabilities affecting products including Wasmtime, TOTOLINK A950RG and Signal K Server, reports a 13.69% increase over the prior two weeks, and provides prioritization and mitigation guidance.
🔗 https://cyber.hendryadrian.com/article/12966/cyfirma-s-fortnightly-exploit-radar-highlights-five-vulnerabilities

Rapid7 demonstrated CVE-2026-102764 in Remote Support 24.1.2: an anonymous customer session could forge a local MRS router ID, upload a PHP file, and execute code as msfuser. Other affected releases and fixed builds remain undetermined.
🔗 https://cyber.hendryadrian.com/article/12965/rapid7-details-unauthenticated-file-upload-to-rce-flaw-in-beyondtrust-remote-support-cve-2026-102764

Chainalysis said an external actor used “offensive agentic techniques” to access internal tools and non-sensitive customer data. The company said investigation content, credentials and session tokens were not accessed and is patching and hardening systems.
🔗 https://cyber.hendryadrian.com/article/12938/chainalysis-says-intruder-accessed-internal-tools-and-customer-data

Chainalysis says attackers accessed internal systems and customer names, email addresses, user IDs, and role labels. The company reports no evidence that investigation content or authentication credentials were accessed and is still investigating.
🔗 https://cyber.hendryadrian.com/article/12927/chainalysis-discloses-unauthorized-access-to-internal-systems-and-customer-data

Reddit plans to gradually limit logged-out access, starting with a pilot in selected markets outside the U.S., to curb scraping and unauthorized data access. The company has not set rollout details and says privacy options will remain.
🔗 https://cyber.hendryadrian.com/article/12925/reddit-plans-login-requirement-to-curb-content-scraping

A proof-of-concept targets CVE-2026-58882, a zero-click Android WAP Push flaw that can crash cellular services or trigger reboot loops. Google reportedly patched Android 14–17 in October; Android 12–13 remain vulnerable.
🔗 https://cyber.hendryadrian.com/article/12924/android-sms-of-death-flaw-can-crash-phones-with-malformed-texts

Back to top ↑