IT Security News: Morning roundup, 2026-11-12 Summary The most pressing thread in this window is attacks on trusted infrastructure that other organizations rely on: a mass GitHub credential-theft campaign, a Red Hat Quay flaw exposing container images, critical bugs in…
Microsoft confirms Windows security updates installation issues
Microsoft has confirmed reports that the November 2026 security updates are failing to install on Windows 11 systems with the October preview update. […]
Qilin Ransomware Gang Leader Allegedly Identified as 36-Year-Old Russian Man
The administrator of the Qilin ransomware operation has allegedly been identified as Aleksey Mikhailovich Yakovtsev, a 36-year-old St. Petersburg…
Hackers Deploy Malware in Fresh ScreenConnect Campaign
The attackers exploited a vulnerability in a legitimate extension to bypass ScreenConnect authentication.
Palo Alto Networks Patches PAN-OS Vulnerability Allowing Remote Code Execution With Root Privileges
Palo Alto Networks has released fixes for CVE-2026-0330, a remote code execution vulnerability affecting PAN-OS software running on Panorama. The flaw…
IT Security News Hourly Summary 2026-11-12 12h : 15 posts
15 posts published in the last hour 10:33Transcending the trust boundaries: how a cloud pentest works 10:32OpenAI builds a kill switch for its research models 10:32Photos: IRISSCON 2026 cybercrime conference 10:32Exploring Microsoft’s AI foundation models 10:31Anyday Launches Free ExploitTotal AI…
Transcending the trust boundaries: how a cloud pentest works
This is the first article in a series on cloud penetration testing. We’ll cover the three cloud layers (External, Overlay, and Underlay), common…
OpenAI builds a kill switch for its research models
How much damage can a rogue agent do in 35 seconds? Asking cos that’s how long it might take to shut one down
Photos: IRISSCON 2026 cybercrime conference
IRISSCON 2026, the annual cybercrime conference organized by IRISSCERT, took place at the Aviva Stadium in Dublin on November 11. The all-day event gives…
Exploring Microsoft’s AI foundation models
When Microsoft started to deploy AI models in what is now its Foundry platform, it was building on its partnership with OpenAI. OpenAI was able to use…
Anyday Launches Free ExploitTotal AI Tool With 200+ Reported Exploits
Anyday’s free ExploitTotal platform offers AI-generated proof-of-concept exploits to help defenders test vulnerabilities and validate security controls.
NCSC Launches Cyber Adversary Testing to Boost Resilience
The UK’s National Cyber Security Centre has launched a new Cyber Adversary Simulation (CyAS) scheme
The sketch Qwen refused to write: How abliteration restores local AI control
As consumer-grade hardware makes hosting local AI practical for both developers and enterprises, many are discovering that popular open-weight models come…
London hotel put admin login for booking website on whiteboard behind the front desk
You could check out more than your room
Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover
A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trigger a crash on the database server. The crash occurs…
AWS Emulator: Open-source tool for testing AWS apps locally, built by autonomous AI agents
Amazon Web Services has released AWS Emulator, a free tool that simulates AWS services on a developer’s laptop, a development server or in a continuous…
Hackers plant GSocket on Linux servers for persistent access
Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux servers even after patching the…
Hackers Target N-central Zero-Days as N-able Rushes Patches
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Truth or consequences: What your AI strategy is standing on
AI acts on bad asset data as confidently as good. Verify the foundation first.
Critical Red Hat Quay Vulnerability Could Expose Private Container Images
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
IT Security News Hourly Summary 2026-11-12 11h : 18 posts
18 posts published in the last hour 09:32Exchange for breakfast: Turla’s Cereal tricks are not for kids 09:32Maersk Reveals Data Breach as Extortion Group Demands $5m 09:32Hackers Hijack 4,837 GitHub Accounts to Target 61,764 Repositories With CI Secret-Stealing Malware 09:3212…
Exchange for breakfast: Turla’s Cereal tricks are not for kids
ESET Research describes Turla’s Cereal toolset, featuring a novel Exchange email collection module, a unique C&C mechanism, and sophisticated .NET…
Maersk Reveals Data Breach as Extortion Group Demands $5m
Maersk has revealed a threat actor extracted data from one of its legacy systems
Hackers Hijack 4,837 GitHub Accounts to Target 61,764 Repositories With CI Secret-Stealing Malware
A threat actor has used stolen GitHub credentials to push a secret-stealing payload into tens of thousands of code repositories. The activity began on…
12 Adversarial Exposure Validation Tools: The 2026 Buyer’s Verdict Guide
Adversarial exposure validation (AEV) is the label the market settled on for the merged territory of breach-and-attack simulation, autonomous penetration…