IT Security News: Overnight roundup, 2026-11-14 Summary The most consequential thread in this window is third-party exposure. A breach at a service provider reached nearly 196,000 Baker Tilly clients, a third-party technology provider's records exposed Uber driver data, and attackers…
Hackers Use Falcon C2 Framework to Hijack Browsers and Steal Credentials From Government Agencies
Hackers deployed Falcon, a Node.js command-and-control framework tracked as XG or Xiàng Gē, against government entities in one Middle Eastern country and…
Japan Hit by Record Cyberattack Surge as Hackers Use AI to Exploit Security Vulnerabilities
Japan recorded 233 publicly disclosed security incidents in October 2026, approximately 2.4 times its previous monthly peak, as researchers uncovered…
IT Security News Hourly Summary 2026-11-14 08h : 4 posts
4 posts published in the last hour 06:31GTA VI isn’t out yet – and the scams are already in full swing 06:31Cyber Experts Weigh In: How to Fight Artex & AntiFox 06:31Inside Falcon AI Gateway: One Control Point for AI…
GTA VI isn’t out yet – and the scams are already in full swing
Cybercriminals attempt to cash in on the hype around the game, luring fans with malware-laced downloads and ‘early access’ that doesn’t exist
Cyber Experts Weigh In: How to Fight Artex & AntiFox
Cybercriminals using agentic pen-testing tools is a proverbial genie out of the bottle at this point, so enterprises need to get a defense plan in place…
Inside Falcon AI Gateway: One Control Point for AI Traffic
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Inside Falcon AI Gateway: One Control Point for AI Traffic
Uber Hacked – Hackers Steal Drivers’ License Personal Data
Thousands of Uber drivers in the United States are being told that their personal and driver’s license information was stolen. The data was taken in an…
CISA Warns of Check Point 0-Day Vulnerability Exploited to Gain Root Access
CISA has warned that attackers are exploiting a Check Point security flaw that lets a local user gain root access on affected appliances. The agency added…
Baker Tilly Discloses Third-Party Data Breach Affecting Nearly 196,000 Individuals
Baker Tilly Advisory Group has begun notifying clients about a data breach involving an external service provider, after an unauthorized actor obtained…
Uber Confirms Data Breach – Hackers Stole Users’ Personal Information
Uber has confirmed a data breach involving the personal information of thousands of U.S. drivers after hackers accessed records held by Fireworks AI, a…
AI Fraud is Breaking the Internet
AI-Powered Scams: Fake Sites, Fake Ads, and the New Brand Impersonation Economy | Yoav Keren (BrandShield) Host David Shipley interviews Yoav Keren, CEO…
Resource: DysruptionHub’s Cyber Incident Registry completes its historical backfill
More than 600 researched profiles now connect past coverage with ongoing follow-up, alongside new ways for Sustainers to follow the reporting. Joseph…
IT Security News Hourly Summary 2026-11-14 01h : 14 posts
14 posts published in the last hour 23:32Attackers use Crypto Exchange Names to Disguise Unauthorized Sessions on 100+ ScreenConnect Servers 23:32CVE-2026-126793 – Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go Wrapper 23:31Rogue remote-access campaign spread through ScreenConnect…
Attackers use Crypto Exchange Names to Disguise Unauthorized Sessions on 100+ ScreenConnect Servers
Fake crypto exchange sessions are showing up on ScreenConnect servers and could be bait for technicians. See what Huntress found and what to do.
CVE-2026-126793 – Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go Wrapper
Bulletin ID: 2026-182-AWS Publication Date: 11/12/2026 13:00 PM PST Description: An untrusted search path issue in Aurora PostgreSQL dialect detection in…
Rogue remote-access campaign spread through ScreenConnect add-on, researchers say
ConnectWise disabled five third-party extensions across about 400 partner environments after researchers linked a worm-like toolkit to one of them.
Five TEFAF robbery suspects added to EU Most Wanted
As of 29 October 2026, five new fugitives, four men and one woman, have been added to the EU Most Wanted list. According to the Limburg Public…
IT Security News Roundup: 2026-11-13 Evening
IT Security News: Evening roundup, 2026-11-13 Summary The 18:00–00:00 CET window was dominated by AI cutting both ways. Attackers are running open-source AI pentesting frameworks like ARTEX and AntiFox against real targets, while vendors such as OpenAI are pitching their…
ArcticRAT Cybercrime Gang Profiles Victim Finances With AI
The Android malware has expanded from focusing on crypto theft to full device control, and the attackers have added advanced analysis of stolen…
SCKit abuses ScreenConnect to deploy remote access and target technician sessions
SCKit abuses ScreenConnect to deploy unauthorized remote access and target technicians. Explore the attack chain, mitigations, and Microsoft Defender XDR…
The Department of Know: N-able’s zero-days, Signal’s formal verification, NHS post-breach fallout
Read the full stories at CISOseries.com. This week’s Department of Know is hosted by Rich Stroffolino, with guests Tom Doughty , CISO,…
TSMC has reportedly leaked the personal data of 46,000 employees, but emphasized that no evidence of intrusion was found in the system.
The following is an automated Google translation of an article that originally appeared in Chinese. Jian Yongxiang reports: TSMC, the world’s leading…
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwide
Microsoft is investigating a widespread outage affecting multiple Microsoft 365 services, including Outlook, Microsoft Teams, and Copilot, as users report…
FAA Grounds US Flights Nationwide, Citing ‘Extraordinary’ Safety Concerns
FAA grounds flights nationwide, citing extraordinary safety concerns amid air traffic control communications problems. Here’s what travelers need to know.