ANGLER, an adaptive attack framework evaluated on eight vision-language web agents, achieved a 20.36% end-to-end attack success rate, compared with 15.24% in a non-adaptive setting. On the same benign tasks, attacks generated by ANGLER reduced legitimate task completion from 61.9% to 44.4%. The study introduces REEF, a security benchmark covering nine websites across travel, commerce, productivity, media and communication. It pairs legitimate tasks with malicious objectives using five attack types at the user and environment levels. State-based verifiers check actual changes, rather than judging attack text alone. ANGLER uses feedback from earlier runs to mutate attacks and select candidates, prioritizing near misses. The results show how adaptive adversarial content can both trigger unauthorized actions and disrupt useful work in these test environments.

arXiv.org

ANGLER: Verifier-Grounded Benchmarking with an Adaptive Attacker for Web Agents

Web agents are increasingly deployed to complete tasks autonomously on real websites, where adversarially injected content can induce them to perfo...

The Vera C. Rubin Observatory has detected two faint Milky Way satellites in its Early Data Preview 2: Aquarius IV and Rubin-GC1. Aquarius IV contains an ancient, metal-poor stellar population and resembles an ultra-faint dwarf galaxy, but a globular cluster classification has not been ruled out. Deeper imaging and spectroscopy are needed to establish its nature. Rubin-GC1 is most likely a faint globular cluster with stars about 9.2 billion years old. It was detected toward the Galactic bulge despite dense star fields and dust, and may be associated with the Sagittarius leading arm, a stream stripped from a dwarf galaxy merging with the Milky Way. These discoveries offer new clues to our galaxy's assembly history and show how Rubin's observations can expand the census of faint satellites, helping researchers test galaxy-formation models and investigate dark matter.

Universe Today

The Vera Rubin Has Found Two More of the Milky Way's Dim Satellites

The Vera Rubin Observatory has detected two more of the Milky Ways' dim, hard to see satellites. One is an ultra-faint dwarf galaxy, and one is a g...

North Korea has denied responsibility for the $6.3 billion hack of cryptocurrency exchange Binance. In a statement on Tuesday, senior official Kim Yo-jong called the accusations a US attempt to damage the country's image. The FBI, the US Secret Service and cyber analysts have attributed the attack to Pyongyang and described it as the largest such theft in history. The FBI and blockchain analysts identify the attackers as TraderTraitor, a state-backed unit also known as the Lazarus Group. The group was previously blamed for the $1.5 billion Bybit hack in 2025. The FBI is asking industry partners to help block transactions involving cryptocurrency accounts linked to the group, making cooperation across the crypto sector a key part of the response. The BBC said it had contacted Binance for comment.

BBC News

North Korea denies being behind $6.3bn Binance crypto hack

US government agencies and cyber analysts have blamed Pyongyang for the record-breaking heist.

Chinese hackers used ARTEX, a multi-agent AI penetration-testing framework, to attack more than 200 organizations across 14 countries, according to CrowdStrike. The campaign began on October 17 and compromised at least nine organizations. Targets included government ministries, telecommunications providers and companies in the pharmaceutical, semiconductor, defense, nuclear and financial sectors. CrowdStrike tracks the actor as Vapor Panda. Operators used DeepSeek and another commercial language model to coordinate planning and worker agents across simultaneous intrusions, intervening at critical decision points. The agents conducted reconnaissance, exploited vulnerabilities, deployed web shells and obtained credentials. The campaign shows AI agents being used to scale human-directed cyberespionage across multiple targets, rather than just assist with a single intrusion.

BleepingComputer

Chinese hackers use ARTEX AI in automated attacks against 200 orgs

Chinese hackers used ARTEX, an open-source, multi-agent AI penetration-testing framework, in attacks against more than 200 organizations across 14 ...

NASA's Johnson Space Center marked its 65th anniversary on November 1. Established in 1961 near Houston, the center grew out of the need for a dedicated human spaceflight facility as the United States pursued a crewed Moon landing. It now houses NASA's astronaut corps and Mission Control, which continues to support the International Space Station around the clock and Artemis missions to the Moon. Its training infrastructure has evolved from Gemini and Apollo simulators to Orion and commercial spacecraft mockups. The Neutral Buoyancy Laboratory, operational since 1997, supports spacewalk training as well as testing of future spacesuits and lunar surface activities. Johnson also houses teams studying crew health and performance for missions farther from Earth, linking decades of operational experience to preparations for future exploration.

NASA

Happy 65 Years: NASA’s Johnson Space Center Then and Now - NASA

Sixty-five years ago, a bold vision took root in Houston: a NASA center dedicated to human spaceflight. Since its founding, NASA’s Johnson Space ...

Microsoft and Lumen Technologies are expanding their partnership to jointly sell networking services to large companies moving AI workloads onto Azure. Lumen plans to bring its full cloud networking range to Azure, with both companies' sales teams working together on deals combining networks, cloud migration and AI. The partnership addresses the links that carry AI data between public clouds, private data centres and offices. The companies want customers to plan those connections alongside their Azure migration. Lumen's Alkira product, which manages connections between clouds and offices, is already available through Microsoft's business software marketplace. The companies also plan to explore connections with Microsoft's AI agent management tools. They disclosed no financial figures or timeline. The expansion builds on a 2024 agreement under which Lumen supplies fibre links between Microsoft data centres.

TNW | Artificial-intelligence

Microsoft and Lumen will jointly sell networks built for AI on Azure

Microsoft and Lumen will co-sell networking for companies moving AI work to Azure, and Lumen plans to bring its full cloud networking range to Azure.

Tutor Intelligence has raised $75 million in Series B funding led by Andreessen Horowitz, bringing its total funding to $117 million. Union Square Ventures and Neo also participated. The Massachusetts startup will use the money to train its robot foundation model and build and deploy its Sonny and Cassie robot workers. The robots handle goods in factories and warehouses, with remote human operators guiding them. Completed tasks generate real-world data for model training. Customers pay by the hour or by the pick, without an upfront purchase or a long-term contract; Tutor handles deployment, maintenance and updates. The company says its robots work in almost four times as many facilities as a year ago and expects more than 1,000 robots under contract by the end of 2027. It did not disclose its current robot count, revenue or valuation.

TNW | Investors-funding

Tutor Intelligence raises $75M from a16z for robots paid by the hour

Tutor Intelligence raises $75M as its CEO says ‘we can hardly build robots fast enough’. Its robots are paid by the hour or by the pick.

Mars and Jupiter will appear just 1.2 degrees apart before sunrise on November 15 and 16, 2026. NASA recommends looking southeast: Jupiter will be the brighter point, with reddish Mars nearby. Both will be visible to the unaided eye, although they remain far apart in space. The Southern and Northern Taurids peak around November 5 and 12, with only about five meteors per hour under ideal conditions but occasional bright fireballs. The Leonids could deliver around 15 per hour before dawn on November 17 and 18, after moonset. A dark location and half an hour for eyes to adjust improve viewing. A supermoon on November 24 begins three consecutive monthly supermoons. Voyager 1 will also become the first human-made object one light-day from Earth this month: a signal will take 24 hours to reach it and another 24 hours for a reply to return.

NASA Science

What's Up: November 2026 Skywatching Tips from NASA - NASA Science

I'm Raquel Villanueva from NASA's Jet Propulsion Laboratory and that's What's Up this month.

A suspected cyberattack has affected fridges and freezers at supermarkets across Europe, highlighting how internet-connected equipment can expose retailers to physical disruption. The UK's National Cyber Security Centre says it is working with international partners and industry to understand the incidents and is unaware of any UK impact. UK Cyber Defence researchers identified more than 800 refrigeration and building-control interfaces associated with British retailers that are accessible over the public internet. That does not establish that they can be hacked, but weak passwords or software flaws could expose them to attack. SentinelOne researcher Tom Hegel warned that attackers operating such controls could misuse legitimate functions, including defrosting, to destroy stock. The report provides no evidence that domestic appliances are being targeted in these attacks.

BBC News

If hackers can take control of a supermarket freezer, how vulnerable is other tech?

Dozens of shops across European countries have been hit by a cyber-attack affecting their fridges.

Researchers studying samples of asteroid Ryugu returned by JAXA's Hayabusa 2 mission have identified poorly crystalline magnesium silicate hydrate, or M-S-H. Using X-rays at Japan's SPring-8 and Photon Factory facilities, the team found this material alongside serpentine and saponite. The work, led by Reon Okumura of Kanazawa University, was published in Communications Earth & Environment. M-S-H can accommodate different magnesium-to-silicon ratios under the same aqueous conditions. Its initial formation and later mineral transformations could therefore explain the varied compositions in Ryugu's fine-grained matrix without requiring distinct water environments for each region. The proposed framework may also apply to carbonaceous chondrites, helping researchers reconstruct how water interacted with rock in their parent asteroids.

Universe Today

Researchers May Have Solved a Puzzling Contradiction in the Ryugu Sample

Samples from the asteroid Ryugu, and from carbonaceous chondrites that have crashed on Earth, present an apparent contradiction. Their fine-grained...

Bitcoin worth roughly $2.2 million has entered CoinJoin transactions following the Binance hack, according to Elliptic's November 2 report. The firm counted 28 BTC across 18 CoinJoins between November 1 and early November 2. These coins came from conversions of other stolen assets, rather than from the bitcoin taken directly from the exchange. Elliptic said the 18,270 BTC stolen directly from Binance remained in 19 addresses without further movement. The mixing transactions used WabiSabi, a protocol used by Wasabi Wallet and similar wallets. CoinJoin combines multiple participants' bitcoin in shared transactions, making links between inputs and outputs harder to trace. Elliptic estimated that a negligible amount of the stolen funds had likely been cashed out; entering a mixing transaction does not itself establish a cash-out.

crypto.news

Binance hacker mixes $2.2m in Bitcoin through CoinJoin

Binance’s hacker has moved $2.2 million in Bitcoin through CoinJoin, while Elliptic tracks $3.24 billion remaining in addresses linked to the theft.

New York startup Clark has raised $11 million in seed funding led by Touring Capital and launched Clerks, AI agents designed to carry out audit work for accounting firms. Marathon Management Partners, Rerail and Sofeon Ventures also participated. Formerly known as uiAgent, Clark says its total funding has reached $16 million. Clerks review documents, run tests and prepare audit workpapers. When information is missing, they request it from the client and resume work once it arrives. Human auditors retain responsibility for judgment calls and signing the final opinion. Clark says more than 35 accounting firms use its tools, including CliftonLarsonAllen and Aprio. It also offers a 100% accuracy guarantee, a company promise that puts reliability at the center of its pitch in a profession where errors in AI-assisted reports have already drawn scrutiny.

TNW | Artificial-intelligence

Clark raises $11M to put AI 'Clerks' to work on company audits

New York startup Clark raised an $11M seed round led by Touring Capital for Clerks, AI agents that do audit work for CPA firms, backed by a guarantee.

An activist group calling itself the Capytistas says it plans to publish private home addresses linked to billionaires, starting this month with Elon Musk, his brother Kimbal and Tesla's board. WIRED reviewed a dossier containing 32 home addresses tied to Musk and his executives. The group says later releases will include more than 150 addresses and over 3,500 records. Members told WIRED they mainly use property records, court filings and ownership structures, with occasional physical surveillance and advertising intelligence. They describe the campaign as pressure against concentrated wealth and political influence, and hope it will prompt protests outside homes. The planned disclosures raise privacy and personal-security concerns. Tesla's press office and investor relations team did not respond to WIRED's requests for comment.

WIRED

Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes

The Capytistas, a secretive group claiming more than $1.2 million in backing, started with Elon Musk and Tesla’s board. Members argue that those ...

A study of 37 nearby dwarf galaxies using NASA’s Hubble Space Telescope finds that they retain only a small fraction of the oxygen produced by their stars. The GLOW team combined archival Hubble images with data from Spitzer and ground-based radio telescopes to reconstruct stellar histories and track oxygen across stars, gas and dust. The results suggest supernova-driven winds remove oxygen from low-mass galaxies more efficiently than current models predict. Oxygen is a useful tracer of chemical enrichment because its production is well understood and it is relatively easy to measure. The missing material’s destination remains uncertain: much of it may lie in gas surrounding the galaxies, or it may have escaped farther into intergalactic space. Pinning down that fate would help explain how galaxies evolve and enrich their surroundings.

NASA Science

NASA’s Hubble Uncovers Case of Missing Oxygen in Nearby Dwarf Galaxies - NASA Science

NASA’s Hubble studied 37 nearby dwarf galaxies and found that much of the oxygen they expected to see is missing.

Hackers remotely altered refrigeration settings at more than 115 stores across Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia. Some refrigerators and freezers were shut down or switched to defrost mode, causing food losses. Ahold Delhaize, Carrefour, Coop and other chains confirmed disruptions. Carrefour said 15 stores were affected but all remained open. One ICA store manager reported temperature settings changed to +50°C that staff could not reset, forcing frozen food to be discarded. Refrigeration vendor Sabcobel said technicians began disconnecting affected installations overnight and attributed the disruption to remotely activated defrost functions. Its director said software updates alone were insufficient because physical modifications were also needed. It remains unclear whether the affected stores were hit in a coordinated attack or targeted individually.

BleepingComputer

Hackers disrupt refrigeration systems at European supermarkets

A cyberattack on refrigeration systems has disrupted stores run by multiple supermarket chains across several European countries after hackers remo...

Exolaunch plans a mid-inclination rideshare mission on Japan’s H3 rocket in 2027, marking its first launch from Japan. It also plans Exo-1 and Exo-2 on dedicated SpaceX Falcon 9 rockets in late 2027 and in 2028, respectively. An anchor customer will use about 40% of each rocket’s capacity, with Exolaunch selling the remaining 60% to other customers. The plans address a constraint beyond the number of available rockets: satellite operators need access to specific orbits on suitable schedules. Exolaunch CEO Robert Sproles says demand is outpacing supply and argues for a wider range of launch vehicles and destinations. The company’s first eight launches of 2026 used four vehicle types across three continents, illustrating its approach to diversifying access to orbit.

SpaceNews

How to Expand Reliable, Flexible Access to Space

How to Expand Reliable, Flexible Access to Space

Strategy acquired 811 bitcoin for approximately $65.5 million, bringing its total holdings to 849,327 BTC. The company also repurchased $208.2 million of STRC preferred stock, while its US dollar assets reached $4.9 billion. The purchases add to its bitcoin treasury as it also directs capital toward managing its financing structure. The latest bitcoin acquisition was funded through Strategy's at-the-market offering program, which raised $164 million in net proceeds from common stock sales. Alongside accumulating bitcoin, the company is using preferred-share buybacks under its Digital Credit Capital Framework to support its credit markets. The combination shows that its capital deployment extends beyond buying bitcoin to managing the equity instruments that underpin its treasury strategy. https://news.bitcoin.com/crypto-news/strategy-buys-811-bitcoin-for-65-5m-as-reserve-reaches-4-9b/

Fashion retailer Revolve is notifying customers after a September 11 breach involving its systems, including its online shopping platform. Its investigation found that attackers may have accessed and exfiltrated names, addresses, payment card numbers and expiration dates stored in customer accounts. SecurityWeek counted notification letters to at least 179,259 people from notices filed in four US states; Revolve has not disclosed a total. The company says it contained and remediated the unauthorized activity, notified law enforcement and hired a cybersecurity firm. It reported no operational disruption or interruption of customer service. Affected customers are not being offered free identity theft or credit monitoring services and are urged to review account statements for fraud. The attacker and method of intrusion have not been disclosed.

SecurityWeek

Revolve Data Breach Impacts at Least 180,000 People

Hackers breached Revolve’s online shopping platform and stole the personal and payment card information of at least 180,000 people.

Binance has used roughly half the Bitcoin in its publicly disclosed SAFU emergency wallet to help cover losses from Thursday’s $6.3 billion hack. The exchange confirmed a transfer of 7,499 BTC on Saturday. By Monday, the wallet held about 7,500 BTC, valued at $583 million, compared with roughly 15,000 BTC before the transfer. The drawdown reduces the Bitcoin reserves in the exchange’s user protection fund. SAFU policy calls for restoring its value to $1 billion if Bitcoin price fluctuations push it below $800 million, but sets no deadline for replacing money deployed after a security incident. Binance had not immediately answered Cointelegraph’s questions about replenishment plans. The exchange is also drawing on its corporate treasury and part of its futures insurance fund to cover losses.

Cointelegraph

Binance Taps Half Its SAFU Bitcoin, Releases Reserve Proof

Binance’s disclosed SAFU Bitcoin balance halved after a hack-related transfer, while the exchange released reserve verification for 10 cryptocurr...

More than 1,000 internet-facing GitLab servers remain unpatched against CVE-2026-97229, a maximum-severity vulnerability being actively exploited, according to Shadowserver. The flaw is an integer overflow in the CI/CD Regular Expression Compiler. Under certain conditions, an unauthenticated attacker can execute arbitrary code through a specially crafted regular expression in a pipeline configuration. GitLab released fixes on October 12 in Community and Enterprise Edition versions 19.4.2, 19.3.5 and 19.2.8, and urged self-managed installations to upgrade immediately. GitLab.com is already patched, and GitLab Dedicated customers need no action. CISA has added the flaw to its Known Exploited Vulnerabilities catalog. The remaining exposed servers show that an available fix has not yet eliminated the risk of remote code execution.

BleepingComputer

Over 1,000 GitLab servers vulnerable to ongoing RCE attacks

Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks.