Security news roundup: 4 Nov 2026

The stories security teams are following today. Each link goes to the original report.

Headlines

• Zyxel fixes zero-day exploited to hack nearly 1,000 network switches (BleepingComputer)
• SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records (The Hacker News)
• APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits (The Hacker News)
• More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus (The Record)
• DreamHost confirms data breach exposed FTP logins and webmail sessions (BleepingComputer)
• Vercel rolls out new protection against stolen session cookie attacks (BleepingComputer)
• Canadian extradited to US for allegedly hacking schools in at least four states (The Record)
• French bank confirms cyber heist, hackers suspected to have stolen an estimated $133 million (The Record)
• Cyberattack disrupts blood storage refrigeration systems in France (BleepingComputer)
• Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root (The Hacker News)