access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
(g+) Sicherheitslücke in der Firmware: PHP2Shell bleibt in Firewalls und Industriegeräten gefährlich
Bei Firewalls, Routern und Industrieanlagen können Admins verwundbares PHP oft nicht selbst patchen. Selbst nach einem Update bleibt deshalb Handlungsbedarf. First seen on golem.de Jump to article: www.golem.de/news/sicherheitsluecke-in-der-firmware-php2shell-bleibt-in-firewalls-und-industriegeraeten-gefaehrlich-2611-214898.html also interesting: Sicherheitslücke in der Firmware: PHP2Shell bleibt in Firewalls und Industriegeräten gefährlich How are you securing your communications in the wake of the Volt Typhoon revelations?…
-
CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands
Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger unwanted subscriptions. CTM360 reveals how these campaigns use deceptive verification steps and affiliate networks to generate revenue without delivering the promised rewards. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ctm360-exposes-fake-gift-card-scams-exploiting-trusted-brands/ also interesting: 5 things…
-
The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call
Escalating hacks affecting blood labs and grocery stores show the very real risks to critical infrastructure that come from basic security lapses involving internet-connected devices. First seen on wired.com Jump to article: www.wired.com/story/kernel-panic-refrigeration-hacks-internet-of-things/ also interesting: Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as Cyber Agencies Offer Prevention Tips Against Telecom Spying Attacks When…
-
Amsterdam: Eskalation vor Microsoft-RZ-Baustelle endet mit 200 Festnahmen
Tags: microsoftWas als Demonstration gegen ein neues Rechenzentrum begann, mündete in Amsterdam in einen der größten Polizeieinsätze der jüngsten Zeit. First seen on golem.de Jump to article: www.golem.de/news/amsterdam-eskalation-vor-microsoft-rz-baustelle-endet-mit-200-festnahmen-2611-214961.html also interesting: Microsoft makes all new accounts passwordless by default Proofpoint Buys Hornetsecurity, A Microsoft 365 Security Specialist For $1 Billion Microsoft Defender Antivirus vs McAfee: Which Is…
-
British soldier ignored order to pull his SIM card, then got blackmailed
Tags: unclassifiedSoldier told repeatedly to lock down devices before deploying, got sextorted, court-martialed. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/11/british-soldier-ignored-order-to-pull-his-sim-card-then-got-blackmailed/ also interesting: Datenschutzbarometer – 37 Prozent empfinden den Datenschutz als übertrieben Resilienzlücken schließen – Commvault startet Clumio auf AWS Westcon-Comstor gains minority backer in General Atlantic You were onto something with “It’s the Climb,” Miley
-
(g+) Surveillance Pricing: Wie weit dürfen Händler Preise personalisieren?
Tags: unclassifiedEin Produkt, zwei Kunden, zwei unterschiedliche Preise: Wir erklären, wann Händler in der EU Kundendaten zur Preisgestaltung nutzen dürfen und wo Datenschutz- und Verbraucherrecht Grenzen setzen. First seen on golem.de Jump to article: www.golem.de/news/surveillance-pricing-wie-weit-duerfen-haendler-preise-personalisieren-2611-214937.html also interesting: Website der Tourismusgesellschaft einer australischen Insel entstellt [Video] CCCAMP 2015 – Basics of hydroponics Türkischer Rüstungssektor im Visier von…
-
Java unter Beschuss: 53 Schwachstellen und zwei Notfall-Patches innerhalb von 5 Tagen
53 Java-Sicherheitslücken und zwei Notfall-Patches in fünf Tagen: Warum KI-Angriffe das Patch-Management verändern und Security-only-Updates wichtiger werden. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/java-unter-beschuss-53-schwachstellen-und-zwei-notfall-patches-innerhalb-von-5-tagen/a47036/ also interesting: OpenAIs Aardvark soll Fehler im Code erkennen und beheben Cybercrime Inc.: Wenn Hacker besser organsiert sind als die IT Bug in Open WebUI macht Kostenlos-Tool zur Backdoor Beating…
-
U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog
Tags: authentication, cisa, cve, cybersecurity, exploit, flaw, infrastructure, kev, service, vpn, vulnerabilityU.S. CISA adds SonicWall SonicOS SSLVPN vulnerability CVE-2026-19868 to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a SonicWall SonicOS SSLVPN flaw, tracked as CVE-2026-19868 (CVSS score of 7.5), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-19868 is an authentication bypass vulnerability affecting the SSL VPN service in SonicWall SonicOS.…
-
Leipzig: Fahnder suchen mutmaßlichen Drohnen-Täter mit KI-Gesicht
Tags: aiNach dem Drohnenanschlag auf den Flughafen Leipzig suchen Generalbundesanwalt und BKA mit einem ungewöhnlichen Mittel nach einer unbekannten Person. First seen on golem.de Jump to article: www.golem.de/news/leipzig-fahnder-suchen-mutmasslichen-drohnen-taeter-mit-ki-gesicht-2611-214948.html also interesting: Vibe Hacking Not Yet Possible Researchers Reveal Six New OpenClaw Vulnerabilities The Future of Modern Observability No more blind trust: Identity controls for AI agents
-
Claude Code’s >>Don’t Ask Again<< Feature Exposes 2,539 Secrets Across 1,994 GitHub Repositories
A newly identified 2,539 distinct secrets across 1,994 public GitHub repositories, tracing exposure to coding-agent configuration files, Git history, and saved transcripts. Their November 5 research describes how Claude Code’s “Yes, and don’t ask again” approval can persist credential-bearing shell commands inside .claude/settings.local.json. Exposed material included production database passwords, cloud credentials, API tokens, and SSH…
-
Claude Code’s >>Don’t Ask Again<< Feature Exposes 2,539 Secrets Across 1,994 GitHub Repositories
A newly identified 2,539 distinct secrets across 1,994 public GitHub repositories, tracing exposure to coding-agent configuration files, Git history, and saved transcripts. Their November 5 research describes how Claude Code’s “Yes, and don’t ask again” approval can persist credential-bearing shell commands inside .claude/settings.local.json. Exposed material included production database passwords, cloud credentials, API tokens, and SSH…
-
Claude Code’s “Don’t Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them.When a user selects “Yes, and don’t ask again,” Anthropic’s AI coding assistant can save the command, word-for-word, including the secret, in a project settings file.Software security company Apiiro said yesterday…
-
Hackers Exploit WordPress Core RCE Vulnerability in Over 240,000 Attack Attempts
Attackers have launched more than 240,000 exploit attempts against a WordPress Core upgrade-process flaw that can enable unauthenticated remote code execution. Wordfence researcher István Márton reported that targeting began on October 28, 2026. Tracked as CVE-2026-119977, the high-severity issue carries a CVSS score of 8.1 and affects unpatched branches spanning WordPress 4.7 through 7.1.3. The…
-
WorkOS Confirms Data Breach After ARTEX AI Agent Escapes Security Researcher’s Sandbox
WorkOS confirmed that an ARTEX security agent escaped a researcher’s isolated testing environment and accessed an internal application, exposing customer business information. In its November 6 update, the company attributed the incident to unintended activity during cybersecurity benchmark evaluations, rather than a malicious operation. WorkOS accepted responsibility and cooperated with investigators. The incident highlights the…
-
Hackers Exploit SonicWall SSL-VPN Vulnerability to Bypass Multi-Factor Authentication in Active Attacks
SonicWall has disclosed an SSL-VPN authentication enforcement flaw that could let attackers bypass SAML authentication and associated multi-factor authentication controls. Tracked as CVE-2026-19868, the issue carries a CVSS score of 7.1. Advisory SNWLID-2026-0014, published November 6, 2026, states that SonicWall PSIRT investigated a report indicating potential exploitation. That wording signals suspected malicious activity, rather than…
-
Hackers Use Fake GitHub Security Tools to Spread Malware, Infecting Over 2,000 Computers
Tags: access, backdoor, blockchain, computer, credentials, crypto, cyber, cybersecurity, github, hacker, malware, threat, toolThreat actors are distributing malware through GitHub repositories masquerading as security utilities, infecting more than 2,000 computers. According to Doctor Web’s November 5 investigation, the campaign targets cybersecurity professionals alongside blockchain gaming enthusiasts, weaponizing Visual Studio projects and Python and Go scripts to deploy remote access backdoors, cryptocurrency clippers, and credential stealers. The operation initially…
-
Insignary Releases Free Insignary-Chk Tool to Detect PHP2Shell and Node2Shell Exposure
Toronto, Canada, November 6th, 2026, CyberNewswire Free, read-only scanner helps organizations find Linux servers and container images exposed to two actively exploited vulnerabilities in PHP and Node.js Insignary, a global open-source security company, today released insignary-chk, a free tool that checks for PHP2Shell and Node2Shell, two recently disclosed runtime vulnerabilities affecting PHP and Node.js. PHP2Shell…
-
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/ also interesting: Cisco Firewall and VPN Zero Day Attacks: CVE-2025-20333 and CVE-2025-20362 Top 7 zero-day exploitation trends of 2024 CVE-2024-55591: Fortinet Authentication Bypass Zero-Day Vulnerability Exploited…
-
OpenAI Hopes to Ease Backlash Against AI Data Centers
Community Commitments Leave Questions About Future AI Compute Capacity. OpenAI is promising to cover power costs and give communities more say over data center construction after an election backlash. The commitments apply to campuses it owns and operates, leaving questions about partner-built capacity and the pace of enterprise AI expansion. First seen on govinfosecurity.com Jump…
-
Anthropic IPO to Test AI Industry’s Financial Viability
Potential $1.5 Trillion Valuation Raises Stakes for Frontier Model Makers and AI Supply Chain. The Anthropic IPO represents the first true test of the longevity and financial viability of AI as a sector, and it may affect how other companies within the AI supply chain may or may not benefit from the monster-sized investment Anthropic…
-
How the $6.3B Proofpoint-Varonis Acquisition Came Together
Tags: ceoA Look at How Efforts to Get Competing Suitors to Pursue Varonis Came Up Empty. The largest security acquisition of 2026 started with initial outreach 20 months ago and included extensive, unsuccessful efforts to get counteroffers from other tech and private equity firms. Thoma Bravo Partner Chip Virnig first requested a meeting with Varonis CEO…
-
Runaway AI hacking agent behind WorkOS breach after escaping sandbox
WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing environment and unintentionally attacked the company. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/runaway-ai-hacking-agent-behind-workos-breach-after-escaping-sandbox/ also interesting: Cybercriminals take malicious AI to the next level Cybercriminals take…
-
US Warns Hospitals of Attacks on Refrigeration Systems
Agencies and AHA Warn of Risks to Blood Supplies, Critical OT Systems. U.S. officials are urging healthcare organizations and other critical infrastructure operators to strengthen cyber protections for internet-connected refrigeration systems amid a wave of attacks in Europe that have disrupted cold storage equipment, including systems used to preserve blood supplies. First seen on govinfosecurity.com…
-
White House Network Appears in Global Residential Proxy Traffic
Layer3 found residential proxy traffic using the White House network, raising concerns about potential exposure of internal systems. Layer3 Intel says it found residential proxy traffic leaving through the White House network. The researchers spotted it while browsing their new Residential Proxy Observatory, a tool that gives a global view of residential proxy and anonymized…
-
Three men charged in US with using AI to impersonate CEOs and steal millions
Men allegedly impersonated voices and images of executives to convince employees to send large paymentsThree foreign nationals were arrested and charged with using AI to allegedly impersonate corporate CEOs and attorneys to steal over $100m, according to an indictment that was newly unsealed by the US Department of Justice.According to a <a href=”https://www.justice.gov/usao-sdny/pr/three-foreign-nationals-arrested-and-charged-scheme-use-super-intelligence-defraud#ref-ftn1″>press release from…
-
Operação de influência russa tem como alvo generalizado a América Latina
Tags: mailA operação, que contou com o uso de inteligência artificial, utilizou e-mails falsos, documentos governamentais falsificados e a criação de uma organização local para atacar escolas no Peru e no Equador, entre outras ações. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/opera-o-de-influ-ncia-russa-tem-como-alvo-generalizado-a-am-rica-latina also interesting: Void Blizzard nimmt NATO-Organisationen ins Visier Microsoft-Lücke ermöglicht E-Mail-Versand ohne Authentifizierung…
-
UK Wades Into Tech Sovereignty Amid AI Policy Changes
The UK is betting on domestic AI and cyber investment to reduce reliance on US tech, but security leaders question whether the funding is too fragmented and too late. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/uk-tech-sovereignty-ai-policy also interesting: Palo Alto Networks Announces $25 Billion Acquisition of CyberArk Deepfake AI scammers target the Big Yin…
-
OpenAI’s new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs
OpenAI has revealed GPT-6 Cyber, a new artificial intelligence model that has discovered 81 previously unknown high-severity Firefox vulnerabilities and developed working exploits for 948 distinct Linux kernel flaws. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/openais-new-gpt-6-cyber-ai-finds-81-firefox-flaws-948-linux-bugs/ also interesting: OpenAI Unveils GPT-6 Cyber With Stronger Exploit Skills OpenAI’s new GPT-6 Cyber AI finds 81 Firefox…
-
OpenAI’s new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs
OpenAI has revealed GPT-6 Cyber, a new artificial intelligence model that has discovered 81 previously unknown high-severity Firefox vulnerabilities and developed working exploits for 948 distinct Linux kernel flaws. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/openais-new-gpt-6-cyber-ai-finds-81-firefox-flaws-948-linux-bugs/ also interesting: OpenAI Unveils GPT-6 Cyber With Stronger Exploit Skills OpenAI’s new GPT-6 Cyber AI finds 81 Firefox…
-
Chainalysis says hackers stole credentials and tokens for all of its customers
Company said a “multifront cyberattack” included AI agents and an on-path data snatch. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/11/chainalysis-says-hackers-stole-credentials-and-tokens-for-all-of-its-customers/ also interesting: API Security is Not a Problem You Can Solve at the Edge Data Security Predictions for 2025: Putting Protection and Resilience at Center Stage Hackers impersonate DeepSeek to distribute malware OpenAI Finds…
-
When Trust Becomes The Attack Vector
Rethinking modern insider risk and telling malice from mistakes First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/blogs/when-trust-becomes-attack-vector-p-4239 also interesting: WordPress RCE Risk: How Malicious HEIC Uploads Can Execute Server Code Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management Healthcare Cyberattacks Hit Harder, Cost More Pierluigi Paganini answers questions about the PHP2Shell…
-
AI Gave Your Incident Archive a Second Job
Security records are increasingly being used by vendors to train their models, creating new risks for enterprises. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/ai-gave-your-incident-archive-second-job also interesting: The Silent Threat to the Agentic Enterprise: Why BOLA is the #1 Risk for AI Agents Software developers: Prime cyber targets and a rising risk vector for CISOs…
-
Fake security tools on GitHub push backdoors and infostealers
Cybersecurity professionals are being targeted with infected security projects on GitHub that deploy a backdoor and information stealer malware. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fake-security-tools-on-github-push-backdoors-and-infostealers/ also interesting: Modern supply-chain attacks and their real-world impact Modern supply-chain attacks and their real-world impact Security researchers caution app developers about risks in using Google Antigravity Security…
-
Free Chinese AI Models Are Getting Scary Good at Hacking
An experiment in which AI models were asked to break into simulated networks showed the hacking skills of DeepSeek and GLM to be not far behind OpenAI’s most advanced cyber model, which isn’t public. First seen on wired.com Jump to article: www.wired.com/story/free-chinese-ai-models-are-getting-scary-good-at-hacking/ also interesting: Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and…
-
Free Chinese AI Models Are Getting Scary Good at Hacking
An experiment in which AI models were asked to break into simulated networks showed the hacking skills of DeepSeek and GLM to be not far behind OpenAI’s most advanced cyber model, which isn’t public. First seen on wired.com Jump to article: www.wired.com/story/free-chinese-ai-models-are-getting-scary-good-at-hacking/ also interesting: Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and…
-
Free Chinese AI Models Are Getting Scary Good at Hacking
An experiment in which AI models were asked to break into simulated networks showed the hacking skills of DeepSeek and GLM to be not far behind OpenAI’s most advanced cyber model, which isn’t public. First seen on wired.com Jump to article: www.wired.com/story/free-chinese-ai-models-are-getting-scary-good-at-hacking/ also interesting: Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and…
-
Free Chinese AI Models Are Getting Scary Good at Hacking
An experiment in which AI models were asked to break into simulated networks showed the hacking skills of DeepSeek and GLM to be not far behind OpenAI’s most advanced cyber model, which isn’t public. First seen on wired.com Jump to article: www.wired.com/story/free-chinese-ai-models-are-getting-scary-good-at-hacking/ also interesting: Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and…
-
Free Chinese AI Models Are Getting Scary Good at Hacking
An experiment in which AI models were asked to break into simulated networks showed the hacking skills of DeepSeek and GLM to be not far behind OpenAI’s most advanced cyber model, which isn’t public. First seen on wired.com Jump to article: www.wired.com/story/free-chinese-ai-models-are-getting-scary-good-at-hacking/ also interesting: Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and…
-
Free Chinese AI Models Are Getting Scary Good at Hacking
An experiment in which AI models were asked to break into simulated networks showed the hacking skills of DeepSeek and GLM to be not far behind OpenAI’s most advanced cyber model, which isn’t public. First seen on wired.com Jump to article: www.wired.com/story/free-chinese-ai-models-are-getting-scary-good-at-hacking/ also interesting: Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and…
-
7 Best Vulnerability Scanning Tools for Security Teams in 2026
Compare 7 vulnerability scanning tools for small teams, covering setup, network and app testing, prioritisation, rescans and remediation tracking. First seen on hackread.com Jump to article: hackread.com/best-vulnerability-scanning-tools-security-teams-2026/ also interesting: 7 top cybersecurity projects for 2025 Cybersecurity Snapshot: Tenable Highlights Risks of AI Use in the Cloud, as UK’s NCSC Offers Tips for Post-Quantum Cryptography Adoption…
-
Hundreds of Artex AI hacking tools found publicly exposed to the web
Security researchers found hundreds of servers hosting the penetration testing tool Artex exposed to the internet, allowing anyone access to the hacking tool. First seen on techcrunch.com Jump to article: techcrunch.com/2026/11/06/hundreds-of-artex-ai-hacking-tools-found-publicly-exposed-to-the-web/ also interesting: Getting the Most Value Out of the OSCP: After the Exam CAASM and EASM: Top 12 attack surface discovery and management tools…
-
Medical services company settles with 4 states over 2023 hack of sensitive patient records
Tags: serviceThe case, brought by AGs in Connecticut, New Jersey, New York and Michigan, targeted the medical transcription, coding and imaging subsidiaries of the Nevada-based Perry Johnson Companies. First seen on therecord.media Jump to article: therecord.media/medical-services-company-settles-with-4-state-ags also interesting: Hybrid AI Is Coming. Is Your Infrastructure Ready? South Korea probes bank breaches amid suspected AI-powered attacks Citrix…
-
Medical services company settles with 4 states over 2023 hack of sensitive patient records
Tags: serviceThe case, brought by AGs in Connecticut, New Jersey, New York and Michigan, targeted the medical transcription, coding and imaging subsidiaries of the Nevada-based Perry Johnson Companies. First seen on therecord.media Jump to article: therecord.media/medical-services-company-settles-with-4-state-ags also interesting: Hybrid AI Is Coming. Is Your Infrastructure Ready? South Korea probes bank breaches amid suspected AI-powered attacks Citrix…