Wednesday, 4 November 2026Global tech news & guides — what changed, and what it means for you.

South Korea Arrests Seven in Its First Large-Scale AI-Assisted Hacking Case

Original editorial illustration of a hooded figure at a laptop in a dark room, glowing file-folder icons streaming from the screen toward the silhouettes of ordinary buildings — a clinic, a school, a golf clubhouse — in a teal-and-amber grade

In brief Seoul police arrested seven people over an AI-assisted hacking campaign that hit 90 organizations and stole 8.2 million records. The alleged ringleader, a 32-year-old with no formal IT education, taught himself hacking from YouTube videos and online blogs, police say — then added an AI coding agent and an autonomous penetration-testing tool in … Read more

Keystone Is Destroying 18,835 Hardware Wallets After Hackers Stole Its Device Verification Key

Original editorial illustration of hardware wallet devices on a dark workbench beside a pile of destroyed units, with two glowing amber authenticity seals — the check that can no longer be trusted, dark background, teal and amber accents

In brief Keystone will destroy 18,835 hardware wallets after hackers stole the key that proves a device is genuine. If you own one, check when it arrived before using it. An attacker reached Keystone’s website on October 20, 2026 through a flaw in a third-party data monitoring tool, then escalated privileges and took customer data … Read more

University of Copenhagen Breach: 525,000 People, and the Test System That Held Their Data

Original editorial illustration of a university building at dusk with a side door ajar and a glowing keypad, while a translucent test-server rack behind it holds rows of identity cards, dark background, teal and amber accents

In brief Hackers accessed a University of Copenhagen test environment holding data on 525,000 people, including national ID numbers. Then 20,000 door PINs turned it physical. The exposed data includes full names, Danish national identity numbers (CPR numbers), work and home telephone numbers, and personal email addresses. The university detected the intrusion on Tuesday, October … Read more

IBM Gives AI Agents an Identity: What Its New Controls Actually Do

Original editorial illustration of a control room of software-agent figures, each wearing a distinct glowing badge, with one figure's badge dimmed and its connection line cut, dark background, teal and amber accents

In brief IBM announced verified agent identities and short-lived credentials at TechXchange 2026. What is live now, what is preview, and why it matters. The centerpiece, IBM Agent Identity, is generally available now. It keeps an authoritative record for each agent: who owns it, whether it is active, and what authority it has been granted. … Read more

Are Free VPNs Safe? What the Research Actually Shows

Original editorial illustration of a smartphone on a cafe table with a cracked amber padlock leaking envelope and location-pin data streams toward shadowy hands, and a solid glowing cyan padlock behind it, dark photorealistic 3D style, amber/teal grade

In brief 88% of the 100 most popular free Android VPNs leaked data in 2024 tests; 71% shared data with third parties. The freemium exceptions — and how to spot them. There are two kinds of free VPN, and the safety question has a different answer for each: totally-free apps funded by your data, and … Read more

Aokigahara Malware Targets ChatGPT, Claude and Cursor Credentials

Original editorial illustration of a dark developer workstation at night: a laptop screen glowing with a generic chat interface, shadowy thread-like tendrils reaching from the screen toward scattered key and token shapes on the desk, amber and teal grade

In brief Check Point’s Aokigahara infostealer harvests AI tool logins and cloud keys from infected PCs. Not a breach of ChatGPT or Claude — what to revoke first. This is not a breach of OpenAI, Anthropic or any other AI provider. The malware collects files stored on an infected computer. If those files hold a … Read more

Node2Shell in Go: Brotli Flaw Expands to Traefik, Fiber, Iris

Original editorial illustration of a dark server room where one glowing compression pipeline splits into three parallel colour-coded pipes — blue, amber, and cyan — with the cyan pipe newly lit and a small patch seal closing over a crack in it

In brief Node2Shell is not Node.js-only: Sweet Security found the same Brotli flaw class in Go, with a fix pushed Oct 23. What Traefik, Fiber and Iris users must check. The Go Brotli library is a direct or indirect dependency of major HTTP frameworks including Traefik, Fiber and Iris, with combined GitHub adoption above 130,000 … Read more

Sweden’s Government Blocks ChatGPT and Claude on Work Computers — but Approves Copilot

Original editorial illustration of a calm government office at dusk where a row of work computers shows a single approved assistant window glowing softly, while two other browser windows fade to grey behind a thin security gate

In brief From Oct 26, Sweden’s Government Offices blocked ChatGPT and Claude on staff computers, directing staff to Copilot. The models are not gone — the browser route is. Staff are directed instead to Microsoft Copilot, which the Government Offices reviewed and then tightened the security settings on before making it available. The specific tightened … Read more

PHP2Shell Patch Lag: Millions of Scans a Day as Fixes Still Roll Out

Illustration: a vast nighttime server hall with one foreground rack glowing red among green racks, as dotted probe lines sweep across the floor

In brief One week after PHP2Shell, mass scanning runs at millions of attempts a day while vendors still ship fixes and unpatched sites stay exposed. Cloudflare chief executive Matthew Prince said attempts on Cloudflare’s network rose from thousands before disclosure to millions afterward, according to Reuters coverage. Most observed activity so far is scanning for … Read more