IT Security News: Overnight roundup, 2026-11-09 Summary This period is characterized by high-stakes security incidents involving global enterprises and the continuing unpredictability of AI tools. From suspected state-sponsored espionage at NVIDIA to massive financial losses at a French bank, the…
U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses
U.S. government agencies have warned that threat actors are actively targeting industrial refrigeration and cold-chain monitoring systems globally with an…
European and Ecuadorian cooperation leads to 20 arrests in major hit against drug trafficking
The operation, codenamed Operation CANTABRIA, underscores the success of strong cooperation between European and Ecuadorian law enforcement agencies,…
IT Security News Hourly Summary 2026-11-09 08h : 11 posts
11 posts published in the last hour 06:33Companies seeking an MSP doubt their ability to spot cyberattacks 06:32NVIDIA Investigates Suspected Foreign Espionage Campaign Targeting CEO Jensen Huang 06:32CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation 06:32SonicWall…
Companies seeking an MSP doubt their ability to spot cyberattacks
Businesses looking to outsource cybersecurity want providers that can help them recover from attacks, manage AI risks, and explain what security problems…
NVIDIA Investigates Suspected Foreign Espionage Campaign Targeting CEO Jensen Huang
NVIDIA has initiated an independent investigation into reports suggesting that foreign intelligence may have targeted founder and CEO Jensen Huang. This…
CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known…
SonicWall Warns of Actively Exploited SSL-VPN Vulnerability That Bypasses SAML and MFA Protection
SonicWall has urged customers to address an SSL-VPN authentication vulnerability that can bypass SAML controls, including associated multifactor…
Wirken: Open-source AI agent gateway
Wirken is an open-source gateway that sits between messaging apps and AI agents. It assumes any agent can be turned against its owner and limits what a…
Critical React Server Components Vulnerability Allows Unauthenticated Attackers to Execute Malicious Code on Servers
A serious vulnerability in React Server Components may enable unauthenticated attackers to execute malicious code on affected servers. The advisory,…
NotC2 AI-Powered Hacking Tool Turns Amazon Bedrock Into a Cloud Command-and-Control System
NotC2, a proof-of-concept framework that combines legitimate AWS services with Amazon Bedrock to run post-compromise command-and-control operations.…
Anthropic Claude Code’s ‘Don’t Ask Again’ Feature Exposes 2,539 Secrets on GitHub
Apiiro researchers Shmulik Cohen and Matan Giladi identified 2,539 distinct secrets across 1,994 public GitHub repositories. They linked these exposures…
Hackers Begin Exploiting OpenSSH SSHole Authentication Bypass Vulnerability
Attackers have started targeting the SSHole authentication bypass affecting certain OpenSSH servers, according to new SANS Internet Storm Center findings.…
Anthropic’s Claude AI Deletes a Year of Law Professor’s Lecture Notes During Simple Editing Task
University of Chicago law professor William Baude says Anthropic’s Claude AI deleted his current syllabus and a year’s worth of constitutional law lecture…
IT Security News Hourly Summary 2026-11-09 07h : 4 posts
4 posts published in the last hour 05:31An average of 8 minutes is all hackers need to log in with stolen credentials 05:31ArmorSteal Malware Steals Passwords and Crypto Wallet Data, Hides Mining When Task Manager Opens 05:05IT Security News Roundup:…
An average of 8 minutes is all hackers need to log in with stolen credentials
Attackers used stolen credentials to log in an average of eight minutes after infection across 27 confirmed infostealer cases, according to a report from…
ArmorSteal Malware Steals Passwords and Crypto Wallet Data, Hides Mining When Task Manager Opens
ArmorSteal, a Python-based Windows malware kit. It steals credentials and crypto wallets, hijacks clipboard addresses, and runs a hidden Monero-style…
Linus Torvalds sees signs AI-prompted patch flood has peaked
Fixes are arriving faster than new bug reports for one major Linux project
Claude AI Accidentally Deletes Law Professor’s Entire Syllabus and One Year of Lecture Notes
University of Chicago law professor William Baude says Anthropic’s Claude AI deleted his current syllabus and a year of constitutional law lecture notes…
IT Security News Hourly Summary 2026-11-09 05h : 3 posts
3 posts published in the last hour 03:32NVIDIA Investigates Suspected Chinese Spy Operation Targeting CEO Jensen Huang 03:32Risky Bulletin: Pro-Kremlin hacktivists dox EU politicians, law enforcement 03:31Critical React Server Components Flaw Lets Hackers Execute Code Remotely Without Authentication
NVIDIA Investigates Suspected Chinese Spy Operation Targeting CEO Jensen Huang
NVIDIA has opened an independent investigation into reports that a foreign intelligence operation targeted founder and CEO Jensen Huang. Announced on…
Risky Bulletin: Pro-Kremlin hacktivists dox EU politicians, law enforcement
Pro-Kremlin hacktivists dox EU politicians and law enforcement personnel a Deepfake gang arrested on US charges, SonicWall patches a zero-day, and SSHole…
Critical React Server Components Flaw Lets Hackers Execute Code Remotely Without Authentication
A critical security flaw in React Server Components can let attackers run code remotely without logging in. React published the advisory, tracked as…
ISC Stormcast For Monday, November 9th, 2026 https://isc.sans.edu/podcastdetail/10170, (Mon, Nov 9th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Monday, November 9th, 2026 https://isc.sans.edu/podcastdetail/10170,…
Huawei says it’s made a 100 percent Chinese PC
PLUS: Japan declares infosec emergency; Apple’s makes biggest school Mac sale, ever, anywhere, in the Philippines; And more!