Cybersecurity and other IT news aggregator

Kalshi says it’s cutting ties with Donald Trump Jr. over his firm’s big investment in rival Polymarket 2026-11-12 at 22:03 By Ariel Zilber Reuters reported that the $40 billion startup mutually agreed to end its advisory contract with the president’s son. This article is an excerpt from Latest Technology News | New York Post View…

ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories 2026-11-12 at 20:57 By A search result isn’t always safe. An access request isn’t always harmless. And a familiar account doesn’t always mean a familiar person is using it. Simple things to remember. Yet a surprising amount of this week’s trouble starts…

New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access 2026-11-12 at 20:57 By Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of concept, called SignDrop, targets a log-authentication feature added to the driver last…

Commerce Dept’s Lutnick, Kessler under fire over inaction on Nvidia’s Megaspeed ‘spy’ fiasco 2026-11-12 at 20:51 By Thomas Barrabi Rumblings on “bad findings about Megaspeed” swirled within the Commerce Department at least as far back as the summer of 2025, according to a recently departed former official at the agency who spoke to The Post…

Get paid to play ‘GTA VI’: Kalshi dangles up to $135K for dream gaming gig 2026-11-12 at 20:09 By Ariel Zilber The New York-based company is advertising a remote contract position for a “GTA VI Researcher.” This article is an excerpt from Latest Technology News | New York Post View Original Source

Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them 2026-11-12 at 20:07 By Security teams have more alerts, logs, and monitoring tools than ever. Yet when an attack happens, one simple question can still take too long to answer: Who or what is behind this activity, and what…

Security Lessons for Every Organization: Panel Discussion 2026-11-12 at 19:00 By The 2026 SECURITY 500 Conference will feature an Afternoon Security Leadership Exchange moderated by James Weston.  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry 2026-11-12 at 18:27 By A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and while…

Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass 2026-11-12 at 18:19 By Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denial-of-service (DoS) or an authentication bypass. The critical vulnerabilities that impact NetScaler ADC and NetScaler Gateway are…

186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers 2026-11-12 at 18:19 By Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence (AI) tools are being used to serve ClickFix-style lures, browser-hijacking malware, and a set of extensions that hijack user searches. This delivery pattern has been codenamed…

SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack Paths 2026-11-12 at 18:19 By The ongoing campaign targeting ConnectWise ScreenConnect deployments involves the exploitation of a now-patched critical security flaw in the remote access software, and not a new vulnerability, it has emerged. Blackpoint Cyber’s Adversary Pursuit Group (APG), which shared the details with…

Alleged Chinese spy Alice Huang got her wings clipped by Singapore before Nvidia affair was revealed 2026-11-12 at 17:59 By Emily Lefroy Alice Huang, the alleged Chinese spy who was having an affair with Nvidia CEO Jensen Huang, was banned from Singapore over her company’s shady dealings, authorities revealed. Singapore investigated Huang over her role…

Social Security Numbers, Medical Data Compromised in Amplifon Breach 2026-11-12 at 17:20 By A wide range of data was stolen, including medical information, financial information, and Social Security numbers.  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them 2026-11-12 at 15:59 By Security teams have more alerts, logs, and monitoring tools than ever. Yet when an attack happens, one simple question can still take too long to answer: Who or what is behind this activity, and what…

New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access 2026-11-12 at 15:59 By N-able on Thursday said it’s investigating a new public disclosure containing claims of additional vulnerabilities in on-premise versions of N-central running version 2026.4.1 HF2. “Based on our initial review, the server issue described depends on a non-default…

Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign 2026-11-12 at 15:59 By Since mid-August 2026, a phishing operation has been stealing live Google sessions from corporate users. Every check defenders normally lean on to judge a link came back clean, and the operator designed it that way on purpose. The Threat Research…

PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution 2026-11-12 at 15:59 By PTC has released patches for a new critical vulnerability impacting Windchill and FlexPLM software that, if successfully exploited, could result in remote code execution. The security flaw, tracked as CVE-2026-126325, carries a CVSS v4 score of 9.2 out…

Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs 2026-11-12 at 14:09 By Google Cloud VMs on AMD Turin chips need a guest OS patch and a stop-and-start to protect against three CPU side-channel flaws, Google said this week. The company has already applied mitigations against attacks between VMs,…

This new gaming phone looks straight out of a sci-fi movie, and there’s more to it than meets the eye 2026-11-12 at 14:00 By Nishka Dhawan REDMAGIC debuts the 12 Pro with a 185Hz display, 8,400mAh battery and built-in turbo fan. Learn how to save $30 before the Nov. 18 public launch. This article is…

Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data 2026-11-12 at 13:23 By A flaw fixed in Node.js this week lets unauthenticated clients crash servers that use the runtime’s built-in HTTP/2 support on the 24.x and 26.x release lines. A second HTTP/2 flaw can cause a server to send…

How AI Revived a Stalled Attack on a U.S. Retailer 2026-11-12 at 13:00 By Threat Hunter Team After hand-typed commands against a U.S. retailer’s web server were blocked, the attackers switched to what appears to be AI-generated commands and began harvesting credentials and moving laterally within minutes. This article is an excerpt from SECURITY.COM View…