More than 1,000 internet-facing GitLab servers remain unpatched against CVE-2026-97229, a maximum-severity vulnerability being actively exploited, according to Shadowserver. The flaw is an integer overflow in the CI/CD Regular Expression Compiler. Under certain conditions, an unauthenticated attacker can execute arbitrary code through a specially crafted regular expression in a pipeline configuration. GitLab released fixes on October 12 in Community and Enterprise Edition versions 19.4.2, 19.3.5 and 19.2.8, and urged self-managed installations to upgrade immediately. GitLab.com is already patched, and GitLab Dedicated customers need no action. CISA has added the flaw to its Known Exploited Vulnerabilities catalog. The remaining exposed servers show that an available fix has not yet eliminated the risk of remote code execution.

BleepingComputer

Over 1,000 GitLab servers vulnerable to ongoing RCE attacks

Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks.

Greece’s ERMIS-3 CubeSat has established a laser link with the Holomondas Optical Ground Station, marking the first optical link from Greece to a satellite in low Earth orbit. Developed by the National and Kapodistrian University of Athens, the 8U satellite carries Astrolight’s ATLAS-1 optical terminal. The demonstration took place only weeks after commissioning and validated precise pointing, acquisition and tracking. Laser links offer high data rates but require both terminals to track one another as the satellite moves at several kilometres per second; clouds and atmospheric turbulence remain challenges. Such links could help small satellites transfer growing volumes of Earth-observation imagery. ESA supported ERMIS-3 with technical expertise, environmental testing and optical alignment at ESTEC. The mission belongs to Greece’s National Space Programme, implemented by ESA on behalf of the Greek government.

CubeSat achieves challenging laser link to ground

Despite it being a complex operation, ERMIS-3, an 8U CubeSat developed by the National and Kapodistrian University of Athens, has established a lin...

The FBI has attributed the theft of more than $6 billion from Binance on or around October 29 to North Korean hacking group TraderTraitor, according to The Next Web. Binance estimates its losses at about $6.3 billion. Bloomberg reports that investigators believe attackers compromised a software engineer’s laptop, gaining access to systems that process withdrawals. Security experts cited by Bloomberg suspect AI may be helping North Korean hackers research targets, identify weaknesses and manipulate employees. Its use in this theft has not been confirmed. One tactic described by Quorum Cyber involves fake job interviews that persuade exchange engineers to install malicious code. The case highlights the risk that compromised employee devices pose to sensitive financial systems; AI’s specific contribution remains uncertain.

TNW | Security

North Korean hackers used AI in crypto heists record $6bn Binance theft

Security experts believe North Korean hackers use AI for target research and social engineering, as the FBI blames them for the $6bn+ Binance theft.

Chainalysis says an external attacker used offensive agentic techniques to gain unauthorized access to its systems and internal tools, resulting in a data breach. Exposed customer information included user IDs, full names, email addresses and organization role labels for users on its platform. The blockchain analytics company has not disclosed how many people may be affected, and its investigation into the full scope is ongoing. According to Chainalysis, investigation content, transaction and query results, cleartext passwords and other credentials or secrets were not compromised. Its teams are patching vulnerabilities and hardening systems, with support from external cybersecurity experts. Because names and email addresses were exposed, the company advises users to watch for unexpected authentication prompts and password reset requests, and to enable multifactor authentication.

SecurityWeek

Chainalysis Discloses Data Breach Following AI-Driven Cyberattack

Chainalysis has disclosed a data breach after hackers used offensive agentic techniques to access its systems.

Bitcoin held above its 100-day simple moving average on Monday after ending October down 7.3%. Its recent low near $76,300 remained intact around the monthly close, while the moving average had risen to $76,548. BTC also reclaimed its 100-week exponential moving average, at $77,759, before the month ended. The next tests include Tuesday’s US midterm elections and Friday’s October payrolls report. Economists expect 65,000 additional jobs, following 29,000 in September. These events could shift interest-rate expectations and risk appetite. Bitcoin fell in the fourth quarter of each of the previous three midterm-election years, but all three also coincided with Bitcoin bear markets; that historical pattern does not establish what happens next.

Cointelegraph

Bitcoin Price Holds $76.3K Lows Into US Midterms Week

Bitcoin heads into the US midterm elections holding its 100-day moving average as markets brace for more US tech earnings volatility.

Ivanti has patched two more Connect Secure vulnerabilities used in a zero-day attack chain active since at least October 1. CVE-2026-111357 enables privilege escalation, while CVE-2026-118527 allows authenticated attackers to upload files. Attackers combined them with CVE-2026-104935, an authentication bypass that Ivanti patched in October to close the primary exploitation path. Volexity reported that the actor it tracks as UTA0576 used the chain to gain unauthenticated root-level code execution on fully patched gateways. The attackers deployed no malware or web shell: they re-exploited devices for each command and altered logs, evading Ivanti's Integrity Checker Tool. Shadowserver tracks more than 5,000 Internet-exposed Connect Secure instances, but how many are protected against these attacks remains unknown.

BleepingComputer

Ivanti patches two more Connect Secure zero-days chained in attacks

Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks sinc...

The FBI has attributed the October 29 Binance cryptocurrency theft to North Korea’s TraderTraitor group. Binance estimates the losses at about $6.3 billion. In an October 31 alert, the FBI identified 608 Ethereum addresses, 19 Bitcoin addresses and one Solana address linked to the stolen funds, and urged crypto service providers to refuse associated transactions. Binance says its investigation found additional breach points beyond an initially suspected compromised laptop. It has pledged to absorb the losses and says about 95% of the stolen amount has been replaced with company funds. Elliptic reports around-the-clock laundering and rerouting through new wallets when a bridge refused deposits. The firm says blockchain data cannot determine whether this automation uses AI agents or conventional scripts.

SecurityWeek

FBI Flags Over 600 Addresses Tied to North Korea's Binance Heist

The FBI attributed the Binance hack to North Korea’s TraderTraitor and published over 600 attacker addresses as laundering continues.

Bitcoin recovered to nearly $78,600 during Monday’s Asian trading session after losing more than 7% in October. U.S. spot Bitcoin ETFs recorded $643.2 million in outflows on October 30, leaving the month with roughly $516 million in net redemptions despite positive monthly flows into BlackRock’s IBIT fund. The November 3 U.S. midterm elections and November 6 employment report are key events for the week. Control of Congress could affect expectations for financial regulation and government spending. Economists expect about 62,000 new jobs and unemployment near 4.2%. Stronger employment could reinforce expectations of a December Federal Reserve rate increase, potentially weighing on Bitcoin through higher Treasury yields and a stronger dollar. These are possible market effects, not established outcomes.

crypto.news

Crypto week ahead: 4 events Bitcoin traders should watch

Bitcoin faces a busy crypto week as U.S. midterm elections, October jobs data, Fed commentary and major tech earnings follow a volatile October.

Ivanti has patched two more Connect Secure zero-days used alongside an authentication bypass in attacks against a limited number of customers. The three-flaw chain gave attackers unauthenticated code execution with root privileges on VPN appliances that were fully patched at the time. Volexity observed credential theft, data exfiltration, network scanning and log tampering. The newly fixed flaws, CVE-2026-111357 and CVE-2026-118527, enable privilege escalation and file uploads to a predictable location, respectively. Fixes are available in versions 25.1.1.3 and 22.8R2.6. Organizations that installed the previous releases to address the authentication bypass need to upgrade again. CISA added both vulnerabilities to its Known Exploited Vulnerabilities catalog, with federal remediation deadlines of November 2 and November 13, respectively.

SecurityWeek

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain

Ivanti has patched CVE-2026-111357 and CVE-2026-118527, two Connect Secure zero-days chained with CVE-2026-104935 in attacks.

Bitcoin recovered to about $78,053 on November 2 after a recent low near $76,173 following the October 29 Binance hack, according to crypto.news. The rebound has not restored its earlier trading range above $80,000. Its latest weekly close near $78,229 marked a seventh consecutive week above the 50-week moving average, around $75,728. The recovery remains technically fragile: Bitcoin is below its 20-day and 50-day exponential moving averages, near $80,155 and $80,212. Its daily relative strength index was 38.97, below the neutral 50 threshold. US spot Bitcoin ETFs also recorded $643.2 million in net outflows on October 30, led by BlackRock's IBIT with $233.7 million. Those withdrawals ended four consecutive sessions of inflows and left the funds with a $202.4 million weekly net outflow.

crypto.news

Bitcoin price rebounds after Binance hack, but can it reclaim $80K?

Bitcoin price has recovered above $78,000 after the Binance hack, but weak daily momentum and resistance near $80,000 could limit further gains.

A water-ice cloud near Mars’s Arsia Mons volcano can stretch into a tail more than 1,500 kilometers long as winds carry it downstream. Known as the Arsia Mons Elongated Cloud, it appears only in the morning during spring and summer. NASA’s Viking Orbiter 2 first recorded it in 1977; an image taken in 2018 by ESA’s Mars Express shows the structure in greater detail. Its formation remains a puzzle. The familiar process in which ice crystals grow around dust particles would fail in the thin, dust-poor upper Martian atmosphere described in the NASA account. A leading hypothesis is that dust is not involved, but this is not presented as a settled explanation. Understanding how the cloud forms could also help scientists build a fuller picture of cloud formation on Earth.

NASA Science

APOD: 2026 November 2 - A Long Cloud on Mars - NASA Science

Researchers propose a unified analytical framework linking explainable AI and neuro-symbolic AI for anomaly detection in Internet of Things systems. Organized around five complementary dimensions, it is intended to characterize existing approaches, identify capability gaps and design trade-offs, and guide the design of new systems. The study applies the framework to three representative studies and illustrates its use in designing a Medical IoT anomaly detection system. Its premise is that detection accuracy alone is not enough in critical environments: systems also need explanations, domain knowledge and reasoning, compatibility with IoT constraints, and support for human decisions. The abstract presents an analytical and design framework, not a measured improvement in detection accuracy. The eight-page paper is accepted for the 2026 IEEE Annual Congress on Artificial Intelligence of Things.

arXiv.org

A Unified XAI-NSAI Analytical Framework for Trustworthy IoT Anomaly Detection

The widespread deployment of Internet of Things (IoT) devices in critical environments makes anomaly detection essential for identifying abnormal b...

A study in Scientific Reports links the sky in Vincent van Gogh's The Starry Night to the pre-dawn sky over Saint-Rémy around July 22, 1889. Researchers from SLLAB and Kyung Hee University identify the central stars as the Hyades cluster in Taurus, near Venus and a waning crescent Moon. That lunar phase fits the painting better than the waning gibbous Moon on the traditionally proposed June date. The team combined field visits in France with a statistical shape analysis of five central stars. The Hyades match was even closer in Van Gogh's later pen drawing. The findings suggest that the painted sky drew on real observations, while offering a method for testing celestial patterns in other historical artworks. The researchers also report a possible Summer Triangle match in Café Terrace at Night.

Universe Today

New Research Resolves the Mystery Behind Van Gogh's The Starry Night

The sky in Vincent van Gogh’s The Starry Night (1889) matches, in both observation and shape, the pre-dawn sky over Saint-Rémy around 22 July 18...

Binance customers withdrew more than $3.6 billion in assets when the cryptocurrency exchange reopened on Sunday after a cyberattack. The incident affected $6.3 billion worth of digital assets and prompted the company to suspend all transactions. The FBI and other organisations have accused North Korea of carrying out the attack. Binance says it has covered around 95% of the stolen assets, while sourcing the remainder may take longer. It has pledged to cover all losses linked to the breach. The company reported an initial spike in withdrawals that later declined and said withdrawals were stabilising. Bitcoin and Ethereum withdrawals have resumed, with further services set to return in phases after security checks. The reopening restores access to funds while those checks and the effort to cover remaining losses continue.

BBC News

Binance hack: Users withdraw $3.6bn after record crypto heist

The exchange froze transactions following the incident which has been linked to a North Korean group.

Linus Torvalds has released the first candidate for Linux 7.4 after a merge window containing almost 20,000 commits, compared with roughly 15,000 for a typical release. He welcomed AI-related fixes arriving during the merge window rather than primarily as extra corrections during release-candidate stabilization, calling this a healthier development model. Torvalds said the release includes many fixes for problems found by AI, with AI also increasingly suggesting patches, though those patches are often rewritten. He cautioned that expectations of 7.4 becoming the next long-term support release could also explain the larger volume. AMD GPU register offsets and bit masks account for a third of the changes; other additions include improved processor support and security improvements for virtual machines.

theregister

Linus Torvalds says Linux kernel is out of

Yet machine-made patches ‘often get rewritten’

Bitcoin miners generated $1.215 billion in October, their highest monthly revenue since November 2025, according to Newhedge data cited in the report. That total came despite a 7.3% decline in bitcoin's price during October. November 2025 had brought in $1.26 billion, while December 2025 recorded about $1.20 billion. The strong monthly total contrasts with weaker current revenue per unit of computing power. Hashrate Index data put estimated daily revenue at $33.18 per petahash per second on November 1, down 17.54% from $40.24 on October 1. Network computing power stood at 1,082.24 exahashes per second, with average block times near 9 minutes 52 seconds. These figures show why a high aggregate revenue month does not necessarily mean improving economics for individual miners: revenue per unit of capacity has fallen, putting pressure on operating margins. https://news.bitcoin.com/mining/bitcoin-mining-revenue-hits-11-month-high-despite-brutal-hashprice-decline/

OpenAI is preparing a public-relations push after the U.S. midterm elections, according to Axios reporting cited by TechCrunch. Chief global affairs officer Chris Lehane outlined proposals that include rebranding data centers as “AI compute campuses,” discussing AI “speed limits,” and encouraging the United States to help develop global standards. The proposals come amid opposition to data-center construction and a broader debate over how AI should affect daily life. Lehane called the discussion around data centers “good and healthy” and said communities should hold companies accountable for delivering transformative benefits from their projects. He expects AI to be a central issue in the 2028 presidential election. The proposed name is part of a communication strategy, not an announced change to how the facilities operate.

TechCrunch

OpenAI might rebrand its data centers as ‘AI compute campuses’ | TechCrunch

Data centers are deeply unpopular. But what if we called them something else?

Dazzle AI CEO Marissa Mayer drew criticism after asking an AI tool to help write a school-requested description of her daughter. Her example joins other personal uses promoted by tech leaders: Sam Altman has suggested personalized podcasts for children’s school commutes, while Mark Zuckerberg has suggested AI could meet social and romantic needs. In a published Equity discussion, TechCrunch journalist Amanda Silberling argued that the disconnect involves both product choices and marketing. She questioned whether automating personal interactions addresses ordinary users’ priorities, citing proposals for AI systems to coordinate between spouses or screen potential dates. The discussion highlights a tension in consumer AI: tools pitched as convenient can also replace human exchanges that people value. These are journalists’ assessments, not findings from a user study.

TechCrunch

AI can make tech CEOs’ lives easier. What about everyone else? | TechCrunch

On Equity, we discuss why tech CEO statements can seem so tone deaf.

The FBI has attributed the theft of approximately $6.36 billion in cryptocurrency from Binance to North Korean state-sponsored hackers known as TraderTraitor. According to Binance, a compromised DevOps engineer’s laptop gave the attackers access to a service container, allowing unauthorized withdrawals across ten blockchains. Most of the funds were moved within 20 minutes. The FBI says the stolen assets are being converted primarily into Ethereum and has published 628 cryptocurrency addresses associated with the theft. US authorities are asking exchanges and other virtual asset service providers to block related transactions. Binance says it has covered approximately 95% of the affected amount, with less-liquid tokens making up the remainder, and has pledged that users will not bear the losses.

BleepingComputer

FBI links $6.3 billion Binance crypto heist to North Korean hackers

The FBI has confirmed that North Korean state-sponsored hackers known as TraderTraitor were behind the $6.3 billion crypto-theft attack on Binance,...

The 18,270.2 BTC stolen from Binance on October 29 remain unmoved across 19 wallets, according to Bitcoin.com. The report values the bitcoin at $1.4 billion and says the FBI attributed the attack to North Korea's Tradertraitor operation on October 31. The precise mechanism used to extract the bitcoin remains unclear. The funds were moved through 11 transfers. Seventeen destination wallets each hold 1,000 BTC; the other two hold 832.5 BTC and 437.7 BTC. Their inactivity leaves an onchain trail but does not mean the funds have been recovered. Bitcoin has no central issuer able to freeze balances or reverse confirmed transactions. Recovery would instead require control of the private keys or intervention at intermediaries, such as exchanges or brokers, if the stolen funds reach them. https://news.bitcoin.com/featured/north-koreas-1-4b-bitcoin-haul-from-binance-hack-remains-untouched/