Cybersecurity and other IT news aggregator

LATEST FEEDS

  • Attackers breached 10 organizations with an open-source AI pentest framework

    Attackers breached 10 organizations with an open-source AI pentest framework 2026-11-12 at 17:00 By Mirko Zorz Chinese-speaking attackers used Cairn, an open-source AI penetration testing framework, to run 25 operations against at least 19 organizations in August and September 2026. Palo Alto Networks’ Unit 42 found that the attackers gained unauthorized access or pulled data…

  • Jensen Huang resigns as NVIDIA CEO and board member

    Jensen Huang resigns as NVIDIA CEO and board member 2026-11-12 at 16:16 By Cointelegraph by Yohan Yun Colette Kress will remain Nvidia’s chief financial officer while serving as interim CEO as the board searches for a permanent successor. This article is an excerpt from Cointelegraph.com News View Original Source

  • Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them

    Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them 2026-11-12 at 15:59 By Security teams have more alerts, logs, and monitoring tools than ever. Yet when an attack happens, one simple question can still take too long to answer: Who or what is behind this activity, and what…

  • New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access

    New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access 2026-11-12 at 15:59 By N-able on Thursday said it’s investigating a new public disclosure containing claims of additional vulnerabilities in on-premise versions of N-central running version 2026.4.1 HF2. “Based on our initial review, the server issue described depends on a non-default…

  • Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign

    Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign 2026-11-12 at 15:59 By Since mid-August 2026, a phishing operation has been stealing live Google sessions from corporate users. Every check defenders normally lean on to judge a link came back clean, and the operator designed it that way on purpose. The Threat Research…

  • PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution

    PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution 2026-11-12 at 15:59 By PTC has released patches for a new critical vulnerability impacting Windchill and FlexPLM software that, if successfully exploited, could result in remote code execution. The security flaw, tracked as CVE-2026-126325, carries a CVSS v4 score of 9.2 out…

  • Bit Digital stock falls 5% in pre-market after Q3 revenue miss

    Bit Digital stock falls 5% in pre-market after Q3 revenue miss 2026-11-12 at 15:52 By Cointelegraph by Zoltan Vardai Bit Digital’s $27 million third-quarter revenue came in 16% below analyst consensus estimates, marking an over $5 million shortfall. This article is an excerpt from Cointelegraph.com News View Original Source

  • Thailand proposes $148K daily cap on stablecoin deposits and withdrawals

    Thailand proposes $148K daily cap on stablecoin deposits and withdrawals 2026-11-12 at 15:44 By Cointelegraph by Helen Partz Thailand’s SEC would set separate daily caps for stablecoin deposits and withdrawals and require customers to use wallets they own. This article is an excerpt from Cointelegraph.com News View Original Source

  • Chrome, Firefox Updates Patch Over 180 Vulnerabilities

    Chrome, Firefox Updates Patch Over 180 Vulnerabilities 2026-11-12 at 15:42 By Ionut Arghire Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160. The post Chrome, Firefox Updates Patch Over 180 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign

    Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign 2026-11-12 at 15:39 By Eduard Kovacs Using thousands of hijacked accounts, the wfx-loot campaign planted a CI secret stealer that ran in over 1,800 GitHub repositories. The post Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign appeared first on SecurityWeek. This article is an excerpt…

  • Operation Endgame malware takedown turns up over 6 million stolen logins

    Operation Endgame malware takedown turns up over 6 million stolen logins 2026-11-12 at 15:34 By Mirko Zorz Police in nine countries, working with Europol, took down servers behind the Gootloader, CastleRAT and StealC malware operations this week and recovered more than 6 million credentials stolen from infected computers. Europol announced the action as the latest…

  • Crypto hack losses equal 57 cents per $1 earned onchain: Ark’s Valente

    Crypto hack losses equal 57 cents per $1 earned onchain: Ark’s Valente 2026-11-12 at 15:31 By Cointelegraph by Zoltan Vardai Crypto hackers stole $8.7 billion so far in 2026, surpassing the projected annual onchain revenue generated across the industry, according to ARK’s research director. This article is an excerpt from Cointelegraph.com News View Original Source

  • Daylight Lands $80 Million for AI-Powered Security Operations

    Daylight Lands $80 Million for AI-Powered Security Operations 2026-11-12 at 15:12 By Ionut Arghire The company plans to accelerate product development, hire new talent, expand its US presence, and enter new markets. The post Daylight Lands $80 Million for AI-Powered Security Operations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original…

  • Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs

    Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs 2026-11-12 at 14:09 By Google Cloud VMs on AMD Turin chips need a guest OS patch and a stop-and-start to protect against three CPU side-channel flaws, Google said this week. The company has already applied mitigations against attacks between VMs,…

  • This new gaming phone looks straight out of a sci-fi movie, and there’s more to it than meets the eye

    This new gaming phone looks straight out of a sci-fi movie, and there’s more to it than meets the eye 2026-11-12 at 14:00 By Nishka Dhawan REDMAGIC debuts the 12 Pro with a 185Hz display, 8,400mAh battery and built-in turbo fan. Learn how to save $30 before the Nov. 18 public launch. This article is…

  • Stablecoin supply falls $14.2B in biggest 30-day drop since June 2022

    Stablecoin supply falls $14.2B in biggest 30-day drop since June 2022 2026-11-12 at 13:38 By Cointelegraph by William Suberg Crypto markets were left with “less fuel” to rally after the market cap of major stablecoins saw its biggest 30-day drop in over four years. This article is an excerpt from Cointelegraph.com News View Original Source

  • Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections’ Data

    Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data 2026-11-12 at 13:23 By A flaw fixed in Node.js this week lets unauthenticated clients crash servers that use the runtime’s built-in HTTP/2 support on the 24.x and 26.x release lines. A second HTTP/2 flaw can cause a server to send…

  • Notion Customer Data Compromised in Fireworks AI Hack

    Notion Customer Data Compromised in Fireworks AI Hack 2026-11-12 at 13:08 By Ionut Arghire The attackers accessed chat transcripts for fewer than 1% of Notion workspaces. Most transcripts were unattributable. The post Notion Customer Data Compromised in Fireworks AI Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Microsoft Entra adds a seven-day safeguard against irreversible identity deletion

    Microsoft Entra adds a seven-day safeguard against irreversible identity deletion 2026-11-12 at 13:04 By Anamarija Pogorelec Microsoft Entra’s Hard Deletion Protection, now in preview, gives administrators a seven-day window to recover selected identities before they can be permanently erased. The feature is designed to help organizations respond to accidental or malicious deletion of critical directory…

  • Stolen Claude API keys can turn Claude Code into a remote-controlled implant

    Stolen Claude API keys can turn Claude Code into a remote-controlled implant 2026-11-12 at 13:00 By Mirko Zorz Darktrace researchers turned Claude Code into a remote-controlled implant in a lab test, steering the coding agent through the memory stores feature of Anthropic’s Claude platform and pulling a 1 GB file out through the Claude Files…

  • Tron and Tether bring in Chainalysis after T3 crime unit folds

    Tron and Tether bring in Chainalysis after T3 crime unit folds 2026-11-12 at 13:00 By Cointelegraph by Zoltan Vardai The group will focus on illicit USDT activity on Tron and help law enforcement investigate suspicious transfers and freeze funds faster. This article is an excerpt from Cointelegraph.com News View Original Source

  • How AI Revived a Stalled Attack on a U.S. Retailer

    How AI Revived a Stalled Attack on a U.S. Retailer 2026-11-12 at 13:00 By Threat Hunter Team After hand-typed commands against a U.S. retailer’s web server were blocked, the attackers switched to what appears to be AI-generated commands and began harvesting credentials and moving laterally within minutes. This article is an excerpt from SECURITY.COM View…

  • Hackers Deploy Malware in Fresh ScreenConnect Campaign

    Hackers Deploy Malware in Fresh ScreenConnect Campaign 2026-11-12 at 12:39 By Ionut Arghire The attackers exploited a vulnerability in a legitimate extension to bypass ScreenConnect authentication. The post Hackers Deploy Malware in Fresh ScreenConnect Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Ethlabs drops Hegotá slot proposal in push for 2027 quantum readiness

    Ethlabs drops Hegotá slot proposal in push for 2027 quantum readiness 2026-11-12 at 12:30 By Cointelegraph by Ezra Reguerra Ethlabs’ roadmap aims to help Ethereum withstand quantum attacks and give users a way to protect their accounts by 2027. This article is an excerpt from Cointelegraph.com News View Original Source

  • Attackers turn NIKKE’s game launcher into malware

    Attackers turn NIKKE’s game launcher into malware 2026-11-12 at 12:22 By Florin Cristian COCOLAS Bitdefender researchers investigated a credential theft campaign that delivered a full-featured info stealer via the NIKKE game launcher. This article is an excerpt from Bitdefender Labs View Original Source

  • Photos: IRISSCON 2026 cybercrime conference

    Photos: IRISSCON 2026 cybercrime conference 2026-11-12 at 12:16 By Zeljka Zorz IRISSCON 2026, the annual cybercrime conference organized by IRISSCERT, took place at the Aviva Stadium in Dublin on November 11. The all-day event gives attendees a look at the cyber threats businesses are facing right now, along with practical advice on how organizations can…

  • Hackers Target N-central Zero-Days as N-able Rushes Patches 

    Hackers Target N-central Zero-Days as N-able Rushes Patches  2026-11-12 at 11:39 By Ionut Arghire The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones. The post Hackers Target N-central Zero-Days as N-able Rushes Patches  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • AWS Emulator: Open-source tool for testing AWS apps locally, built by autonomous AI agents

    AWS Emulator: Open-source tool for testing AWS apps locally, built by autonomous AI agents 2026-11-12 at 11:30 By Anamarija Pogorelec Amazon Web Services has released AWS Emulator, a free tool that simulates AWS services on a developer’s laptop, a development server or in a continuous integration (CI) pipeline. The company says autonomous AI agents wrote…

  • Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover

    Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover 2026-11-12 at 11:25 By A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trigger a crash on the database server. The crash occurs only if that server is later chosen to take over as the main server while…

  • Check your GitHub repos: A secret stealer hit tens of thousands of them

    Check your GitHub repos: A secret stealer hit tens of thousands of them 2026-11-12 at 11:24 By Mirko Zorz A threat actor using stolen GitHub credentials has pushed a credential-stealing payload into tens of thousands of repositories since November 10. In more than 1,800 of them, the malware ran and shipped GitHub Actions secrets and…

  • Critical Red Hat Quay Vulnerability Could Expose Private Container Images

    Critical Red Hat Quay Vulnerability Could Expose Private Container Images 2026-11-12 at 11:23 By Eduard Kovacs Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access. The post Critical Red Hat Quay Vulnerability Could Expose Private Container Images appeared first on SecurityWeek. This article is…

  • Maersk Confirms Data Theft Amid $5 Million Extortion Attempt

    Maersk Confirms Data Theft Amid $5 Million Extortion Attempt 2026-11-12 at 10:38 By Eduard Kovacs The WhiteArmor ransomware group claims it stole 100GB of data from the shipping giant’s systems. The post Maersk Confirms Data Theft Amid $5 Million Extortion Attempt appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories

    Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories 2026-11-12 at 10:35 By Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a secret stealer in repositories those accounts could write to, according to Aikido Security, a security software company. The stealer is built to…

  • .NET 11 security changes target the software supply chain

    .NET 11 security changes target the software supply chain 2026-11-12 at 10:23 By Anamarija Pogorelec Microsoft has released .NET 11, a Standard Term Support (STS) release that will receive two years of support. .NET 10 is still the Long Term Support (LTS) option. The release covers C# 15, ASP.NET Core, .NET MAUI, and Windows development.…

  • BlackRock Bitcoin ETF outflows hit $2B over nine sessions

    BlackRock Bitcoin ETF outflows hit $2B over nine sessions 2026-11-12 at 10:06 By Cointelegraph by Ezra Reguerra US spot Bitcoin ETF outflows rose to nearly $300 million on Wednesday, up from $95 million a day earlier, as five-session withdrawals reached $1.44 billion. This article is an excerpt from Cointelegraph.com News View Original Source

  • Can Agentic AI Investigate a Phishing Campaign? Evidence Walkthrough

    Can Agentic AI Investigate a Phishing Campaign? Evidence Walkthrough 2026-11-12 at 09:16 By Mihir Bagwe Yes, with a human signing off. An agentic AI can run most of a phishing investigation on its own. It can pull domain registration records, open the lure safely, pivot to related infrastructure, extract indicators and write up a verdict…

  • GitHub Agentic Autofix and the question of who owns a bad AI patch

    GitHub Agentic Autofix and the question of who owns a bad AI patch 2026-11-12 at 09:00 By Mirko Zorz In this Help Net Security interview, Marcelo Oliveira, VP of Product Management at GitHub, talks about who is accountable when an AI-generated patch fixes one flaw and introduces another. He explains how Agentic Autofix re-runs detection…

  • Who collects the keys when an AI agent retires?

    Who collects the keys when an AI agent retires? 2026-11-12 at 08:32 By Help Net Security Think about the last time a good engineer left your company. Someone collected the laptop and the badge. IT revoked their logins before the end of the day. Their manager reassigned the open tickets, and HR filed their records…

  • Dagster: Open-source cloud-native data pipeline orchestrator

    Dagster: Open-source cloud-native data pipeline orchestrator 2026-11-12 at 08:30 By Mirko Zorz Dagster is an open source orchestrator for data pipelines. It decides what runs, in what order, and when. It also tracks how the tables, datasets, machine learning models, and reports it manages connect to the data they came from. When a source table…

  • Challenging Security Industry Assumptions: Panel Discussion

    Challenging Security Industry Assumptions: Panel Discussion 2026-11-12 at 08:00 By Panelists at the 2026 SECURITY 500 Conference will be pulling back the curtain to discuss what it truly looks like to lead in today’s threat landscape.  This article is an excerpt from Subscribe to Security Magazine's RSS Feed View Original Source

  • South Korea to permit crypto withdrawal freezes during hacking threats

    South Korea to permit crypto withdrawal freezes during hacking threats 2026-11-12 at 07:54 By Cointelegraph by Ezra Reguerra The move follows recent security incidents involving South Korean crypto exchanges, including GOPAX’s precautionary suspension of services and a $70,000 hot-wallet breach at Prabang. This article is an excerpt from Cointelegraph.com News View Original Source

  • CISOs say OT will survive a cyberattack, but their engineers aren’t so sure

    CISOs say OT will survive a cyberattack, but their engineers aren’t so sure 2026-11-12 at 07:30 By Mirko Zorz Ask industrial security chiefs whether their plants would keep running through a full IT compromise, and every one who answered the SANS 2026 ICS/OT survey says yes. Thirty-eight percent expect to run indefinitely on islanded ICS/OT…

  • Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

    Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely 2026-11-12 at 07:12 By A critical flaw in Apache HTTP Server’s HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71, released yesterday. Only servers with…

  • Binance CSO unwittingly foreshadowed $6.3B hack tactic months before attack

    Binance CSO unwittingly foreshadowed $6.3B hack tactic months before attack 2026-11-12 at 07:07 By Cointelegraph by Felix Ng In a July interview, Binance chief security officer Jimmy Su explained how fake coding assessments could compromise employee devices, a tactic later used in the exchange’s record-breaking hack. This article is an excerpt from Cointelegraph.com News View…

  • Bots pose as AI agents, AI agents pose as humans, and defenses believe both

    Bots pose as AI agents, AI agents pose as humans, and defenses believe both 2026-11-12 at 07:00 By Anamarija Pogorelec Over one week in October, an online marketplace took 414,210 visits from traffic wearing the name of a widely used consumer AI agent. Every visit went for the sign-in page, and every one returned errors.…

  • ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients

    ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients 2026-11-12 at 06:39 By ConnectWise has taken the precautionary step of disabling five third-party extensions in partner environments following reports of unauthorized access. In an advisory posted on its site, the company said there is no evidence that the incident involves a…

  • MSCI confirms Strategy’s removal from indexes at end of November

    MSCI confirms Strategy’s removal from indexes at end of November 2026-11-12 at 02:09 By Cointelegraph by Felix Ng Strategy, Metaplanet and Upexi are marked for deletion in MSCI’s final list, with changes taking effect after the Nov. 30 close. This article is an excerpt from Cointelegraph.com News View Original Source

  • From nursing school to Nvidia’s billionaire boss lover: The mysterious rise of alleged Chinese spy Alice Huang – as her past vanishes

    From nursing school to Nvidia’s billionaire boss lover: The mysterious rise of alleged Chinese spy Alice Huang – as her past vanishes 2026-11-12 at 01:46 By Vivi Lin Traces of alleged spy Alice Huang’s past are vanishing from China’s internet — but a few details of her incredible rise from provincial town schoolgirl to Nvidia…

  • Suiet wallet to shut down in latest exit from Sui ecosystem

    Suiet wallet to shut down in latest exit from Sui ecosystem 2026-11-12 at 01:18 By Cointelegraph by Jona Jaupi The self-custodial wallet will keep its API services running through Nov. 14. Sui’s DeFi total value locked has fallen more than 22% over the past month. This article is an excerpt from Cointelegraph.com News View Original…

  • Nvidia preparing to oust CEO Jensen Huang after affairs: WSJ

    Nvidia preparing to oust CEO Jensen Huang after affairs: WSJ 2026-11-12 at 00:44 By Cointelegraph by Felix Ng The report about Huang’s possible departure came after the New York Times reported that he had a second extramarital affair. This article is an excerpt from Cointelegraph.com News View Original Source

Browse older archives

Scroll to Top