November 2026

Google, along with industry collaborators, has successfully dismantled the XCPE malware botnet, which comprises over 1.3 million Android TV streaming boxes. The company claims that the manufacturer intentionally infected these devices with malware to profit from cybercriminal activities. Google confidently links the botnet to the Chinese manufacturer Videostrong Technology Co., accusing it of deliberately embedding…

The landscape of vulnerabilities is continually growing. Between 1999 and September 2026, around 383,000 software vulnerabilities have been revealed across various platforms and technologies; however, only about 2,000 CVEs (approximately 0.5%) have been associated with actual exploitation in the real world. These vulnerabilities exhibit distinct patterns. Malicious actors tend to focus on weaknesses that facilitate…

A critical security vulnerability affecting Siemens SIMATIC IoT2050 Advanced devices has been actively exploited, according to VulnCheck. This vulnerability, identified as CVE-2026-58115 (CVSS score: 10.0), involves a lack of authentication for an essential function, which can be leveraged by an unauthenticated remote attacker to execute arbitrary code. Siemens stated in an advisory issued in August…