Security news roundup: 3 Nov 2026

The stories security teams are following today. Each link goes to the original report.

Headlines

• The 4 Elements of Exposure Prioritization and How to Operationalize Them (The Hacker News)
• UK school estate hit by 3AM ransomware in suspected AI-assisted attack (BleepingComputer)
• Android’s November 2026 Updates Patch Over 200 Vulnerabilities (SecurityWeek)
• Critical Node-RED Flaw Exploited in Attacks (SecurityWeek)
• Google adds new $250,000 Cloud VRP reward for Root-in-Cloud bugs (BleepingComputer)
• Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing (The Hacker News)
• Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware (The Hacker News)
• Harvard University data breach exposed info of 851,000 accounts (BleepingComputer)
• Russia dismantles infrastructure of VasyGrek cybercrime group, detains three suspects (The Record)
• Russia-linked cyber spies target Ukraine's war crimes investigations, military aid routes (The Record)