Security news roundup: 2 Nov 2026

The stories security teams are following today. Each link goes to the original report.

Headlines

• Your Mobile Carrier Stores Your Call Logs for Years (BleepingComputer)
• Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk (SecurityWeek)
• Russian and Ukrainian hackers hijack emergency apps to spread fake nuclear attack warnings (The Record)
• BTCPay Server warns of hot wallet thefts targeting outdated instances (BleepingComputer)
• Cybersecurity M&A Roundup: 37 Deals Announced in October 2026 (SecurityWeek)
• DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment (The Hacker News)
• Apple warns users in 99 countries of mercenary spyware (The Record)
• Hackers disrupt refrigeration systems at European supermarkets (BleepingComputer)
• Microsoft fixes Smart App Control broken by October Windows update (BleepingComputer)
• Malicious Claude Code Extension Served in Cursor Supply Chain Attack (SecurityWeek)