Cyber Khabar — Live cyber news, Hinglish mein

Wed, 4 Nov, 2026Aakhri update 7:30 am IST60 khabrein · 13 sources · 774 CVE / 24h

Live · abhi ki sabse badi khabar · 4 Nov, 12:33 am IST

Chainstack ko cyber attack hua jisme attacker ne kuch infrastructure tak unauthorized access pa liya, customer emails aur password hash leak hue (AI‑powered campaign ka hissa).

Poori khabar padho Saari khabrein ↓

Philippine Overseas Employment Administration ka 69GB data breach, migrant worker info leak huaDark Reading7:30 am Germany police ne crime‑as‑a‑service investment fraud outfit ko bust kiyaDark Reading3:27 am AI policy experts ne 'sovereign agents' ko civilization ke liye threat batayaThe Register1:03 am European supermarkets ke refrigeration systems par hack, freezers ka temperature badlaThe Record11:13 pm Barracuda me do critical vulnerabilities, chain karke root access mil sakta haiThe Hacker News9:29 pm Frontline Education data breach se 1.3 million staff aur students ka data leak huaSecurityWeek8:02 pm Russia‑linked hackers ne Ukraine ke war crimes investigations aur aid routes ko target kiyaThe Record7:09 pm Astra tool se Qwen model ke weights read/write karne ki claim ko galat bataya gayaHacker News5:51 pm Red Hat aur Ubuntu ne Linux TCP use‑after‑free bug (CVE‑2026‑98432) ke liye patches release kiyeThe Hacker News4:53 pm Google ne 1.3 million Android devices ka XCPE botnet takedown kiyaSecurityWeek2:52 pm

cPGuard update server hack se backdoor aur data‑stealing script deploy huiBleepingComputer3:48 am WorkOS data breach me attacker ne internal sales app tak pahunch banayiBleepingComputer2:58 am Chainstack ke production systems me breach, customer emails aur password hashes leak huer/cybersecurity12:33 am Qwen 3.8 27B model laptop pe weights interpret kar sakta hai, AI capability updateHacker News11:10 pm cPGuard update server hack se backdoor aur password hash chori huiThe Hacker News8:46 pm 3AM affiliate ne AI‑like loops ka istemal kiya European school attack meDark Reading7:30 pm Police ne investment scam crackdown me 100+ servers seize kiyeBleepingComputer7:03 pm Node‑RED me critical flaw ka exploitation, multiple attacks dekhe gayeSecurityWeek5:40 pm Gorbag hackers ne WinRAR flaw ka istemal karke Ukrainian orgs ko data-stealing malware se target kiyaThe Hacker News4:30 pm BTCPay Server ke purane versions me hot wallet thefts ka khatraThe Hacker News2:01 pm

European supermarkets ke refrigeration systems par hack, freezers ka temperature badlaDark Reading3:46 am Binance fake job interview se $6.3 billion crypto chori ka daavaBleepingComputer1:35 am LLMjacking attacks se cloud AI charges me $1 million se zyada ka nuksanBleepingComputer12:21 am Binance fake job interview se $6.3 billion crypto chori ka daavaThe Hacker News10:25 pm Barracuda ke do critical flaws se attackers ko root access mil sakta haiBleepingComputer8:36 pm UK school estate par 3AM ransomware ne 37 machines encrypt kiBleepingComputer7:30 pm Pass‑ta‑key golden attack se Google Password Manager ke synced passkeys chori ho sakte hainr/cybersecurity6:01 pm CISA ne ek naya actively exploited WordPress vulnerability catalog me add kiyaCISA5:30 pm Harvard University alumni data breach se 851,000 accounts ka info leak huaBleepingComputer4:23 pm TRAI ne telecom me AI agents ko 24x7 support ke liye allow kiya, human oversight zarooriMediaNama · India1:40 pm

North Korean fake job interview se $6.3 billion Binance crypto chori ka daavaThe Register3:34 am Google ne Android TV boxes me X.CPE botnet ka takedown kiyaThe Record1:18 am Apple ne German lawmakers aur staff ko spyware target hone ki warning diThe Record12:14 am Binance ke CEO ne $6.3 billion crypto theft ka daava kiya, North Korea fake job interview seThe Record10:12 pm Hybrid AI ransomware attack UK schools me dekha gayar/cybersecurity8:09 pm Russia ne VasyGrek cybercrime group ka infrastructure tod diya aur teen suspects ko giraftar kiyaThe Record7:20 pm Android November 2026 update me 200+ vulnerabilities, critical remote code exec fixSecurityWeek5:51 pm CISA ne Subnet Solutions PowerSYSTEM Center ke multiple CVE ke liye exploitation warning diCISA5:30 pm Prusa Buddy firmware <7.0.0 me RCE vulnerability discover huir/cybersecurity3:34 pm OpenAI alignment team ne agent safety evaluation gaps ka research paper publish kiyaOpenAI Alignment1:30 pm

Kahan kya toot raha hai.

Matrix · pichhle 7 din · Aakhri update 4 Nov, 7:30 am IST

Category pe tap karo — taaza khabrein wahin khulengi.

Hack / Leak231144 Nov, 7:30 amThe Hacker News

7:30 amPhilippine Overseas Employment Administration ka 69GB data breach, migrant worker info leak hua 3:48 amcPGuard update server hack se backdoor aur data‑stealing script deploy hui 3:46 amEuropean supermarkets ke refrigeration systems par hack, freezers ka temperature badla Is category ki saari khabrein →

Bug / Patch9694 Nov, 1:18 amThe Hacker News

1:18 amGoogle ne Android TV boxes me X.CPE botnet ka takedown kiya 9:29 pmBarracuda me do critical vulnerabilities, chain karke root access mil sakta hai

Bugs, abhi.

Duniya ke software mein jo chhed abhi mile — sabse khatarnak pehle.

Hackers abhi use kar rahe

Naye critical bugs

Har category, ek desk.

Scroll karo — India, hack, bug, scam aur AI ki khabrein ek ke baad ek khulti hain. Tab pe tap karke seedha bhi ja sakte ho.

● LIVE

TRAI ne telecom me AI agents ko 24x7 support ke liye allow kiya, human oversight zarooriMediaNama · 3 Nov, 1:40 pm IST

TRAI ne telecom operators ko AI agents se 24 ghante complaint support dene ki ijazat di, lekin har din kam se kam 16 ghante human assistance aur oversight mandatory hai.

1Sources 0Comments 0Sahi laga Poori khabar →

Khabar se aage.

774naye bugs, 24 ghante

81critical, 7 din

30hackers use kar rahe

Bug Meter, live.

Duniya mein roz hazaaron naye bugs darj hote hain. Kaunse critical hain aur kaunse hackers sach mein use kar rahe hain — ek jagah, aasaan bhasha mein.

Poora meter dekho →

Black
OctoberExplainer · ek page

Ek hafte mein kya-kya toota.

PHP2Shell, AI agents, SBI aur eMudhra — October ki poori kahani, timeline ke saath, ek page mein.

Padho →

OTP, UPI PIN, ATM PIN kisi ko mat do — chahe caller sab sahi bataye
Bank aur email par 2-step verification on rakho
Browser update rakho; certificate warning aaye to ruk jao
Fraud ho to turant 1930 par call karo

Aaj ka bachao.

Chaar cheezein jo aaj hi kar lo. Baaki sab khabar hai — yeh kaam hai.

Saari khabrein.

Aakhri update 4 Nov, 7:30 am IST · 60 khabrein

1:18 am4 Nov

Media reportBug / Patch

Google ne Android TV boxes me X.CPE botnet ka takedown kiya

Google ne bataya ki X.CPE botnet ka majority Android TV set‑top boxes me tha, aur usse kai IoT devices ko bhi infect kiya tha.

1 sourceThe Record0 comments

9:29 pm3 Nov

Media reportBug / Patch

Barracuda me do critical vulnerabilities, chain karke root access mil sakta hai

Barracuda ke products me pre‑auth authorization bypass aur command injection flaws (CVE‑2026‑116606) mil gaye, jo milke attacker ko root tak le ja sakte hain.

1 sourceThe Hacker News0 comments

8:36 pm3 Nov

Media reportBug / Patch

Barracuda ke do critical flaws se attackers ko root access mil sakta hai

Barracuda Networks ne do critical vulnerabilities disclose kiye hain jo agar exploit ho to attackers ko root privileges mil sakte hain. Patch abhi available hai.

1 sourceBleepingComputer0 comments

5:51 pm3 Nov

Media reportBug / Patch

Android November 2026 update me 200+ vulnerabilities, critical remote code exec fix

Android ne November 2026 security patch release kiya, jisme framework me remote code execution flaw (critical) fix hua.

…

Chainstack ke production systems me breach, customer emails aur password hashes leak hue

Kahan kya toot raha hai.

Bugs, abhi.

Hackers abhi use kar rahe

Naye critical bugs

Har category, ek desk.

Khabar se aage.

Bug Meter, live.

Ek hafte mein kya-kya toota.

Aaj ka bachao.

Saari khabrein.

Google ne Android TV boxes me X.CPE botnet ka takedown kiya

Barracuda me do critical vulnerabilities, chain karke root access mil sakta hai

Barracuda ke do critical flaws se attackers ko root access mil sakta hai

Android November 2026 update me 200+ vulnerabilities, critical remote code exec fix

Chainstack ke production systems me breach, customer emails aur password hashes leak hue

Kahan kya toot raha hai.

Bugs, abhi.

Hackers abhi use kar rahe

Naye critical bugs

Har category, ek desk.

Khabar se aage.

Bug Meter, live.

Ek hafte mein kya-kya toota.

Aaj ka bachao.

Saari khabrein.

Google ne Android TV boxes me X.CPE botnet ka takedown kiya

Barracuda me do critical vulnerabilities, chain karke root access mil sakta hai

Barracuda ke do critical flaws se attackers ko root access mil sakta hai

Android November 2026 update me 200+ vulnerabilities, critical remote code exec fix

Node‑RED me critical flaw ka exploitation, multiple attacks dekhe gaye

CISA ne ek naya actively exploited WordPress vulnerability catalog me add kiya

CISA ne Subnet Solutions PowerSYSTEM Center ke multiple CVE ke liye exploitation warning di

Red Hat aur Ubuntu ne Linux TCP use‑after‑free bug (CVE‑2026‑98432) ke liye patches release kiye

Prusa Buddy firmware <7.0.0 me RCE vulnerability discover hui

Siemens IoT2050 devices me missing authentication flaw se remote backdoor ban raha hai

CryptoPayment Gateway WordPress plugin me CVE-2026-81648 se wallet credentials leak ho sakte hain

OT programming tool me max‑severity bug se Linux malware deliver hua

GoAhead TLS vulnerability se mTLS authentication bypass ho sakta hai

Critical Linux kernel TCP use‑after‑free bug (CVE‑2026‑98432) remote root allow karta hai

Microsoft ne Windows 11 October update ke baad Smart App Control bug fix kiya

LXD aur MicroCloud me critical flaw, attacker bina private key ke trusted client ban sakta hai

Air‑gap computers se RAM radio signals se data leak ka naya method research paper me

Critical Linux kernel TCP use‑after‑free bug (CVE‑2026‑98432) remote root allow karta hai

Android SMS of Death exploit se phones crash ho sakte hain

Molly Signal fork 3 mahine se update nahi, ab vulnerable hai

CISA ne Ivanti Connect Secure ke teen flaws ko KEV me add kiya, active exploit

ChatGPT share link se attacker code run ho sakta hai, private chats read ho sakti hain

Critical Linux kernel TCP use‑after‑free bug (CVE‑2026‑98432) remote root allow karta hai

Cursor IDE me Claude Code extension trojanized, security issue aaya

TeamViewer flaw fix: remote host ab viewer ko attack nahi kar sakta

Cursor marketplace me Claude Code extension trojanized, SSH backdoor lagaya

WordPress core me RCE flaw, 63,000 attacks 24 ghante me

CISA kehti hai GitLab ki max severity flaw ab wild mein exploit ho rahi hai

Supermicro BMC/IPMI CVE‑s public hue, remote exploit ka risk

WordPress me fresh high‑severity RCE vulnerability, attackers ki nazar me

CISA ne do actively exploited vulnerabilities ko KEV catalog me add kiya

Drupal Commerce Core access bypass exploit wild mein chal raha hai

CISA kehti hai GitLab ki max severity flaw ab wild mein exploit ho rahi hai

TeamViewer flaw se malicious host support technician ki machine control kar sakta hai

Drupal Commerce Core authorization bypass flaw actively exploited ho raha hai

CISA ne GitLab aur Cisco firewall ke actively exploited flaws KEV me add kiye

AI developer tools me bugs mil gaye, OpenAI aur Microsoft ke flaws abhi tak patch nahi hue

Linux kernel TCP use‑after‑free bug (CVE‑2026‑98432) Ubuntu, RHEL ko affect karta hai

CISA ne PHP2Shell chain ke liye Linux kernel flaw patch karne ki warning di

Adobe, Veeam, Juniper ne critical vulnerabilities ke patches release kiye

Telegram Android flaw se voice call pe code run ho sakta hai

PHP2Shell exploit se network me activity detect hui

Cisco ne ASA/FTD VPN flaw patch kiya, jo wild me exploit ho raha tha

XML Signature Wrapping se Moldova ke MPass SAML library mein authentication bypass ka bug mila

GitLab me CVE-2026-97229 ke attempted exploitation ka security incident

Steam platform me RCE aur LPE exploit ka detailed analysis

HTTP2Shell ka root cause undisclosed patch ka if‑statement tha

Attacker DTLS unauthenticated UDP packet se Godot game server crash kar sakta hai

Researcher ne logic bugs se Microsoft Edge ko crack karke $175k Pwn2Own jeeta

Tailscale ne emergency fix release kiya Tailworm SSH flaws ke liye

EDK2 PXE flaw (CVE-2026-97631) ka detailed analysis aur risk

China ke Gitee platform pe 7.25 million public repos scan karke secrets mile

China ke Gitee platform pe 7.25 million public repos scan karke secrets mile

Cloudflare ke /cdn-cgi/image/ endpoint me XSS vulnerability mili