GitLab Servers Under Attack, AI Agents Run a Spy Campaign, and a TV Box Maker Gets Banned
Tuesday, November 3, 2026 · 7 min
CISA confirms attackers are exploiting a maximum-severity GitLab flaw while Shadowserver counts over 1,000 unpatched servers, CrowdStrike says a China-nexus actor ran AI agents against more than 200 organizations, and Google says it took down a botnet a TV box maker built into its own firmware.
Listen
Show notes
CISA confirms attackers are exploiting a maximum-severity GitLab flaw while Shadowserver counts over 1,000 unpatched servers, CrowdStrike says a China-nexus actor ran AI agents against more than 200 organizations, and Google says it took down a botnet a TV box maker built into its own firmware.
In this episode
- Over 1,000 GitLab servers vulnerable to ongoing RCE attacks — BleepingComputer
“On Friday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that attackers have begun exploiting the flaw in the wild and added CVE-2026-97229 to its Known Exploited Vulnerabilities (KEV) Catalog, ordering federal agencies to secure their servers by…”
- Chinese hackers use ARTEX AI in automated attacks against 200 orgs — BleepingComputer
“The AI agents performed reconnaissance, exploited vulnerabilities, deployed web shells, obtained credentials, and pursued alternative attack paths when needed. The operators explicitly instructed the agents to skip Windows machines protected by Falcon, CrowdStrike's solution for…”
- Google disrupts million-device XCPE Android malware botnet, bans TV box maker — BleepingComputer
“"We assess with high confidence that the backdoor and botnet were intentionally developed, deployed, and operated for financial gain by Videostrong Technology Co.," Google's Threat Intelligence Group (GTIG) said in a report published Monday.”