Security news roundup: 5 Nov 2026

The stories security teams are following today. Each link goes to the original report.

Headlines

• 5 Active Cyber Threats That Put US Enterprises at Risk in October 2026 (The Hacker News)
• Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out (The Hacker News)
• Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day (SecurityWeek)
• Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes (SecurityWeek)
• OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks (SecurityWeek)
• Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution (The Hacker News)
• Chainalysis warns all users hit in cyber breach involving ‘agentic’ techniques (The Record)
• Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns (SecurityWeek)
• Cyberattack Hits French Blood Bank Site but No Blood Products Are Compromised (SecurityWeek)
• Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws (SecurityWeek)