IT Security News: Evening roundup, 2026-11-14 Summary This period was dominated by software supply chain and developer tooling risk. Cursor's breach let attackers push a malicious Claude Code extension, and the ChainDrop attack hit open-source maintainers. These stories sit alongside…
Macfinger ClickFix campaign sends DownTheDRAIN infostealer for macOS, (Fri, Nov 13th)
Introduction
Physicists use laser light to unlock a crystal’s hidden electrical powers
Scientists have discovered how to use flashes of laser light to organize tiny electrical regions inside a crystal, solving a decades-old mystery about how…
AntiFox AI Pentest Tool Linked to AWS Production Secret Theft
Cybersecurity researchers have linked the open-source, AI-driven penetration-testing platform AntiFox to real-world intrusions involving AWS credential…
Risky Bulletin: Chinese APT exploits SS7, Diameter to spy on targets
A Chinese APT exploits the SS7 and Diameter protocols, a remote code execution bug hits Apache, Brazil’s largest port suffers a cyberattack, and Europol…
Hackers Exploit New N-able N-central Zero-Day Hours After PoC Release
Hackers began exploiting a new zero-day vulnerability in N-able N-central within hours of a proof-of-concept exploit becoming public. The flaw, called…
IT Security News Daily Summary 2026-11-14
83 posts published today 19:00IT Security News Hourly Summary 2026-11-14 20h : 7 posts 18:31ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178, (Fri, Nov 13th) 18:032026-11-12: SmartApeSG ClickFix campaign pushes CNCmachineRMS RAT 18:03US seizes North Korean hacking infrastructure, $1.2 billion…
IT Security News Hourly Summary 2026-11-14 20h : 7 posts
7 posts published in the last hour 18:31ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178, (Fri, Nov 13th) 18:032026-11-12: SmartApeSG ClickFix campaign pushes CNCmachineRMS RAT 18:03US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance 18:03Cursor confirms…
ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178, (Fri, Nov 13th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178,…
2026-11-12: SmartApeSG ClickFix campaign pushes CNCmachineRMS RAT
This post has no text preview — click the link below to read the original article. This article has been indexed from Malware-Traffic-Analysis.net – Blog Entries Read the original article: 2026-11-12: SmartApeSG ClickFix campaign pushes CNCmachineRMS RAT
US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance
The infrastructure, said to belong to APT38, contained footage used to fool victims over video calls.
Cursor confirms security breach led to malicious Claude Code extension
Cursor confirmed it suffered a security breach that let hackers distribute a malicious Claude Code extension through its marketplace after stealing…
The OpenSourceMalware Show #29
Jared Wray, maintainer of Keyv and Cachable, talks about what it was like to be at the center of the ChainDrop software supply chain attack.
Transportation secretary blames ‘routine’ equipment upgrade for grounding flights nationwide
FAA administrator Bryan Bedford also said there’s “zero evidence of anything AI-related.”
IT Security News Hourly Summary 2026-11-14 19h : 5 posts
5 posts published in the last hour 17:31Extortion Group Claims Theft of Nearly One Billion Expedia Traveler Records 17:31Upcoming Speaking Engagements 17:06IT Security News Roundup: 2026-11-14 Afternoon 17:02PostgreSQL’s Largest Ever Security Release Patches 52 Flaws, Including a 22-Year-Old Bug Any…
Extortion Group Claims Theft of Nearly One Billion Expedia Traveler Records
Russian extortion group n0n claims to have stolen nearly one billion Expedia traveler records through a compromised third-party provider. A newly formed…
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I’m speaking at the Catalyst Summit in Brampton, Ontario, Canada, on Wednesday, November…
IT Security News Roundup: 2026-11-14 Afternoon
IT Security News: Afternoon roundup, 2026-11-14 Summary Between noon and six on 14 November, the stories clustered around three threads: third-party and supply-chain exposure, AI tools becoming both an attack vector and a defensive product, and state-linked or organized criminal…
PostgreSQL’s Largest Ever Security Release Patches 52 Flaws, Including a 22-Year-Old Bug Any Logged-In User Could Weaponize
The PostgreSQL Global Development Group shipped security updates on November 12 for all five supported major versions, issuing fixes for 52…
IT Security News Hourly Summary 2026-11-14 18h : 6 posts
6 posts published in the last hour 16:33New Falcon Cloud Security Innovations Secure the Cloud AI Runs On 16:33Uber Data Breach: Driver Licenses Stolen via Fireworks AI 16:03How Adversaries Are Turning the Vulnerability Ecosystem Against Defenders 16:02US disrupts North Korean…
New Falcon Cloud Security Innovations Secure the Cloud AI Runs On
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: New Falcon Cloud Security Innovations Secure the Cloud AI Runs On
Uber Data Breach: Driver Licenses Stolen via Fireworks AI
Vivek reports: Uber is notifying thousands of US drivers that their personal and driver’s license information was stolen in October 2026, after hackers…
How Adversaries Are Turning the Vulnerability Ecosystem Against Defenders
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: How Adversaries Are Turning the Vulnerability Ecosystem Against Defenders
US disrupts North Korean campaign behind $400 million crypto theft
The U.S. government has disrupted a North Korean social engineering campaign called ‘FaceStealer’, responsible for stealing more than $400 million in…
CrowdStrike Brings Enterprise Browser Security to the Falcon Platform
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Brings Enterprise Browser Security to the Falcon Platform