ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories The U.K. National Cyber Security Center (NCSC) warned that widely available AI-powered cyber tools have "almost certainly" driven a significant increase in zero-day vulnerability discovery, while a Microsoft analysis of roughly 383,000 CVEs disclosed from 1999 through September 2026 found median patch times exceed a year for network appliances. Microsoft reported the median vulnerability is patched in about two weeks on Windows workstations, more than a month on Windows Servers, 10+ weeks on Linux Servers and macOS applications, and beyond a year on network appliances, with about 2,000 CVEs (roughly 0.5%) linked to real-world exploitation. Separately, Europol reported seven arrests and more than 100 servers seized on 3 November 2026 in an investment fraud scheme run by a Cyprus- and Israel-based company that claimed victims in more than 50 countries and caused estimated losses of at least $4.5 million. How much damage can someone do without breaking much? Quite a lot, it seems. A stolen login can open doors across several systems. A trusted setting can be used to lock people out. Even a simple file copy can reach places it shouldn’t. And while new tools are helping find security holes faster, some important systems are still taking months, sometimes over a year, to get patched. Not exactly a great match. The stranger part is how little some attacks now need. Ransom demands without encrypted files. Fake websites that look real enough to steal money. AI tools picking up dangerous instructions while trying to help. Even the attackers are making mistakes in their own code. This week’s stories are a reminder that the biggest problems don’t always come from clever tricks. Sometimes the easy way works just fine. Here’s what else happened. The threats change every week. Subscribe, and we’ll alert you when each new ThreatsDay Bulletin is out. 1. AI Accelerates Zero-Day DiscoveryThe U.K. National Cyber Security Center NCSC has warned that the widespread availability of AI-powered cyber tools has “almost certainly” led to a significant increase in the discovery of zero-day vulnerabilities. “Defensive AI-cyber tools have reduced the window of a vulnerability moving from zero-day to an n-day vulnerability, and have made patching a quicker process,” NCSC said https://www.ncsc.gov.uk/report/artificial-intelligence-and-cyber-intrusion . “However, without correct and widespread configuring of this technology, many systems are still vulnerable to attackers using AI-cyber tools to identify and exploit system weaknesses. Additionally, an organisation’s internal patching and testing processes will need to evolve to meet the pace of accelerating vulnerability discovery. Attackers have subsequently displayed less caution over losing an access to achieve an objective, as the cost to replace is minimal.” 2. Critical Systems Face Prolonged ExposureAn analysis of roughly 383,000 CVEs disclosed from 1999 through September 2026 has found that the median time to patch a vulnerability exceeds a year for network appliances. About 2,000 CVEs roughly 0.5% have been linked to real-world exploitation. “The median vulnerability is patched in about two weeks on Windows workstations but in more than a month on Windows Servers,” Microsoft said https://www.microsoft.com/en-us/security/blog/2026/11/02/exploited-vulnerabilities-common-data-driven-analysis-real-world-attacks/ . “It stretches to 10+ weeks on Linux Servers and for applications running on macOS, and beyond a year on network appliances. That gap is the threat actor’s window, widest on the critical systems that stay exposed the longest.” The tech giant also said threat actors disproportionately target flaws that maximize impact and exposure and enable system takeover, particularly remote code execution, privilege escalation, and authentication bypass. 3. $4.5 Million Fraud Network BustedAuthorities have arrested seven people https://www.eurojust.europa.eu/news/international-investment-fraud-scheme-dismantled-seven-arrests allegedly involved in an investment fraud scheme that claimed potential victims in more than 50 countries, according to Europol. The operation caused estimated losses of at least $4.5 million. The “crime-as-a-service” offering was run by a company from Cyprus and Israel, and allegedly provided cybercrime groups with an assortment of trading websites and fraudulent call centers tasked with tricking victims into transferring their savings. These call centers operated from Albania, Kosovo, and North Macedonia. “More than 100 servers were seized and seven suspects arrested during coordinated action on 3 November 2026,” Europol said https://www.europol.europa.eu/media-press/newsroom/news/investment-scams-potential-victims-in-least-50-countries-over-100-servers-seized . “Authorities searched 17 locations and seized servers, other evidence and assets.” Like other fraudulent investment schemes, the operation leveraged deceptive advertisements to funnel people towards fraudulent investment platforms, promising them substantial, quick returns from cryptocurrency trading and foreign currencies. Although victims were encouraged to transfer a small amount, they displayed illusory gains to push them into transferring increasingly large sums. The operators resorted to delaying tactics to block payments when they attempted to withdraw their funds. “Behind seemingly legitimate platforms, supposed brokers used fictitious profits and sustained psychological pressure to persuade victims to invest more,” Europol said. “Personal data collected through this process was sold to criminal groups operating call centers. Operators then contacted potential victims with supposed investment opportunities, turning their initial interest into repeated demands for money.” 4. $250K Bounty for Critical Cloud FlawsGoogle has expanded https://bughunters.google.com/about/rules/google-friends/cloud-vulnerability-reward-program-rules root-in-cloud-technical-validation its Cloud Vulnerability Reward Program VRP with a new top-tier reward for high-impact architectural security flaws, allowing researchers to earn $250,000 for Root-in-Cloud bugs, including tenant-isolation bypasses and complex cross-service logic flaws that let attackers gain full administrative control over arbitrary Google Cloud organizations. “To earn this premier reward, you must demonstrate full administrative control, the equivalent of ‘roles/owner’ or complete IAM control, over arbitrary Google Cloud organizations or projects with no prior access or special project setup,” Google said https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-introducing-new-tier-for-google-cloud-vrp . “Additionally, valid vulnerability reports demonstrating remote code execution RCE in underlying Google production infrastructure Borg or achieving root-in-prod will automatically be evaluated by the Google Cloud VRP panel for root-in-cloud eligibility.” 5. Edge Blocks Scam Notification AbuseMicrosoft has announced that its Edge browser will now automatically disable notifications from sites that push scam or scareware notifications, such as fake virus warnings or security alerts. “As of last month’s rollout of Edge 156, when Microsoft Defender SmartScreen or Scareware blocker detects a scam that was pushed through a notification, Edge will automatically disable notifications from the site that sent it,” Microsoft said https://blogs.windows.com/msedgedev/2026/11/02/client-side-threat-detection-how-scareware-blocker-uncovered-malicious-notification-abuse/ . “The next time Edge starts, an information bar explains what happened. If you believe a site was blocked incorrectly, you can review sites with blocked notifications and unblock them from Edge Settings, keeping you in control.” 6. University Cryptojacking ChargesTwo Canadian men, Ryan James Roach, 35, and Mathiew James Stubbings, 41, have been indicted in the U.S. for hacking multiple U.S. universities and using the access to mine cryptocurrency. Both have been charged with conspiracy to obtain information from a protected computer and to cause damage to a protected computer, obtaining information from a protected computer, and intentional damage to a protected computer, which carry a maximum penalty of 10 years in prison and a $250,000 fine. “Between June 2016, and December 2019, Roach and Stubbings conspired to engage in a scheme to hack into computers, steal login credentials, and secretly mine cryptocurrency for financial gain,” the Justice Department said https://www.justice.gov/usao-wdny/pr/canadian-man-extradited-us-his-role-computer-hacking-scheme-targeting-universities . “They used virtual private servers in multiple countries, which were registered under false names. These servers transmitted malware and mining software to victim computers and stored stolen login credentials. Victims of the scheme included educational institutions in New York, Tennessee, North Carolina, and Massachusetts.” 7. Ransomware Extortion Without EncryptionCybersecurity researchers have detailed an encryptionless extortion attack involving PAYLOAD ransomware targeting a manufacturing organization in the Middle East. “The threat actor obtained domain admin-equivalent control of the organization’s Active Directory environment and authored a malicious Group Policy Object GPO named PAYLOAD, linking it at the domain root,” Kaspersky said https://securelist.com/tr/payload-ransomware-via-group-policy/121335/ . “Through that single object, the actor delivered ransom notes, hijacked the desktop wallpaper and lock screen, enforced a logon banner, and disabled the local administrator account across every domain-joined Windows workstation — all without dropping a ransomware binary or encrypting any data. The only ransomware we found in this incident was a PAYLOAD sample targeting ESXi on Linux servers.” The attack represents a convergence of two trends: Living-off-the-land abuse of trusted AD infrastructure and a surge in extortion-only incidents. 8. AI Sandbox Escape Exposes Sensitive FilesA vulnerability impacting Docker Sandboxes CVE-2026-103916 could have been exploited to bypass file access restrictions, potentially exposing cloud credentials and other sensitive files on a developer’s machine through a routine copy command. “The command used to copy files between a sandbox and the developer’s computer sbx cp does not enforce these access restrictions,” Endor Labs said https://www.endorlabs.com/learn/docker-sandboxes-vulnerability-lets-ai-agents-access-sensitive-files-outside-their-sandbox-cve-2026-103916 . “An agent can exploit this weakness using what is known as a symbolic link, essentially a shortcut that points to another file or folder. By placing a malicious shortcut inside an approved workspace, the agent can trick a subsequent copy command into accessing files outside the sandbox’s approved boundaries.” The issue has been addressed in Docker Sandboxes version 0.51.0. 9. Smart TVs Keep Tracking After Opt-OutDoes Opting Out of ACR Work? A new study has revealed that smart TVs running operating systems from Samsung, Vizio, and Roku continue to transmit data to automatic content recognition ACR endpoints even after users opt out of tracking in the devices’ settings. “Opting out fully worked on only four operating systems. On Samsung and Vizio, traffic consistent with ACR kept flowing, and Roku’s opt-out doesn’t cover its own streaming service,” according to a group of academics from Northeastern University. “VIDAA OS sends ACR data to servers run by Unruly over MQTT without encryption, so anyone on the network path between the TV and those servers can read it.” 10. Cryptographic Proof for AI OutputsAnthropic has revealed that it’s working on an open-source system called FlashProve to cryptographically verify an AI response came from a given model. “FlashProve is a system for provable inference of large Mixture-of-Experts MoE language models,” Anthropic said https://www.anthropic.com/research/provable-inference . “FlashProve involves two parties: the model provider the prover and a user the verifier . It is split into two phases: In the offline phase, the prover publishes a commitment to the model weights, which is a short fingerprint to pin down one exact choice of weights while the weights themselves remain hidden. The later inference claims will be checked against that commitment, i.e., the weight model committed to in this phase. In the online phase, upon requests from the verifier i.e., prompts and the corresponding output tokens , the prover produces a proof file proving the following statement: The committed model produces these output tokens when evaluated. Anyone who holds the commitment, the prompt, and the reply can check it, without the weights and with limited compute power, and be convinced that the committed weights, run on this prompt, produce exactly these tokens.” 11. FTP and Webmail Credentials ExposedDreamHost has warned of a data breach after an unauthorized third party gained access to the server that runs its web-based File Manager at files.dreamhost.com between August and October 23, 2026. “The unauthorized third party exploited a vulnerability in that software and was able to access the FTP/SFTP usernames and passwords of individuals who logged into this File Manager between approximately August 2026 and October 23, 2026,” the company said