What's happening in security.
The latest breaches, malware, and privacy stories from BleepingComputer, The Hacker News, Krebs on Security, and Malwarebytes Labs — short excerpts, always linking back to the original source. Last refreshed 14 Nov 2026 · 12:54.
New York City votes to ban surveillance pricing
The bill would stop companies from using personal data to set individualized prices. Here’s what that means for shoppers.
Google pushes second Chrome update this week
Google has pushed out a second Chrome update this week, fixing security flaws that could allow attackers to run malicious code.
Worldwide Microsoft 365 outage disrupts Outlook, SharePoint, Teams, and more [updated]
A worldwide Microsoft 365 outage is having a severe impact on companies that rely on services like Outlook, Sharepoint, and Teams.
LEGO’s BrickLink taken offline: What users should know
BrickLink, the LEGO marketplace, has gone offline after detecting unusual activity, without disclosing whether customer data was affected.
Why scammers want you to allow push notifications
Browser push notifications are a common nuisance, and they can make people think their device is infected with adware.
FBI agent stole $2.47m in crypto from criminal wallets
A former FBI supervisor memorized cryptocurrency wallet recovery phrases to steal millions, then confessed because it was “eating him up inside.”
Vanderbilt restores systems after cyberattack as hackers claim data theft
Vanderbilt University is restoring campus technology, but has not confirmed the attackers’ claims of stolen student and employee data.
Remus malware claims Gmail access even after you change your password
Developers of the infostealer Remus claim their malware can retain access to a victim’s Gmail even after a password reset.
Muse sleep band users weren’t told their brain data was training AI
Muse maker Interaxon reportedly trained AI on users’ de-identified brainwave data, then revised its privacy policy after journalists asked questions.
Microsoft Patch Tuesday fixes Outlook flaw already under attack
Microsoft has fixed an actively exploited Outlook vulnerability. Check for Office updates separately.
Researcher bypassed Meta smart glasses’ safeguards to run her own code
She was able to bypass a safeguard meant to stop unauthorized software running on Meta glasses. It wasn't easy, but showed it is possible.
Update Chrome now to fix a flaw attackers are exploiting
Google has released Chrome updates for desktop and Android to patch a zero-day vulnerability already being exploited in attacks.
Before you buy an advent calendar, check these warning signs
Copied storefronts, fake urgency, and contradictory product claims are among the warning signs we found on suspicious advent calendar sites.
13.3 million people’s medical data exposed; companies pay $300,000
The New York AG reached a settlement with Perry Johnson & Associates and four related companies over a 2023 breach.
A week in security (November 2 – November 8)
A list of topics we covered in the week of November 2 to November 8 of 2026