IT Security News: Afternoon roundup, 2026-11-10 Summary Ten days after the Amadeus breach first surfaced, the period's stories cluster around three threads: supply-chain and third-party exposure, AI platforms and their tooling becoming both targets and security products, and governments and…
BYOD Ransomware Group Allegedly Claims Toyota Data Breach
The BYOD ransomware group has allegedly claimed a Toyota data breach, saying it obtained personal information and access involving kiosk devices. A…
Microsoft November 2026 Patch Tuesday Fixes 1,093 Vulnerabilities, Including Outlook Zero-Day
Microsoft has released its November 2026 Patch Tuesday updates, fixing 1,093 newly released vulnerabilities across Windows, Office, SQL Server,…
CVE-2026-124848 – Incorrect default permissions on session transcripts and prompt history in Kiro CLI
Bulletin ID: 2026-178-AWS Publication Date: 11/10/2026 12:00 PM PST Description: Incorrect default file permissions in Kiro CLI before version 2.27.0 on…
Hackers Can Exploit SAP PROXYGATE and ICM2SHELL Flaws for Unauthorized Full System Access
SAP has released fixes for PROXYGATE and ICM2SHELL, critical security flaws that could let attackers take control of SAP systems without signing in.…
Fireworks AI Confirms Wider Breach Affecting Customer Datasets, Model Weights and Notion AI Chats
Fireworks AI disclosed on Monday that its investigation into a security incident first reported early last month uncovered further malicious activity,…
SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI’s inference servers last…
Hackers exploit trusted AWS access to breach multiple cloud environments
A threat actor used compromised identity and access management (IAM) credentials for a Qubole big data platform’s AWS account to access and exfiltrate…
Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones
A flaw in Git can let a malicious repository run an attacker’s code on a computer that clones it recursively, together with its submodules. The Git…
People Are Getting Weird About AI
Dark Reading Confidential Episode 22: You can love AI without being blind to cybersecurity being sacrificed for utility.
Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild.…
Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day
Today is Microsoft’s November 2026 Patch Tuesday, with security updates addressing a record-breaking 1,235 flaws, including one actively exploited…
Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem
Three distinct threat activity clusters with shared infrastructure and malware code similarities have been observed targeting telecommunications…
IT Security News Hourly Summary 2026-11-10 21h : 8 posts
8 posts published in the last hour 19:32The November 2026 Security Update Review 19:31Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft 19:31Microsoft Patch Tuesday November 2027 , (Tue, Nov 10th) 19:03CVE-2026-126087 – Untrusted search path in OpenJD Sessions for…
The November 2026 Security Update Review
The penultimate month of 2026 bring with it the usual storm of patches from Microsoft and Adobe. I’ve been prototyping some new ways to display this data,…
Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
CVE-2026-124194 is the Outlook zero-day for which Microsoft says it’s aware of active exploitation.
Microsoft Patch Tuesday November 2027 , (Tue, Nov 10th)
Microsoft continues its AI-induced patch surge, addressing 1,260 different vulnerabilities this month. 68 of these vulnerabilities are considered…
CVE-2026-126087 – Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent
Bulletin ID: 2026-177-AWS Publication Date: 11/10/2026 10:45 AM PST Description: Untrusted search path in the cross-user process launcher in Open Job…
Barracuda’s email security gateways bitten by make-me-root vulns
Someone’s fishing for exposed devices
Windows 11 KB5132061 & KB5131087 cumulative updates released
Microsoft has released the Patch Tuesday Windows 11 and cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security vulnerabilities and bugs,…
AI Coding Agents Leak Thousands of Secrets to GitHub
A command in Claude Code inadvertently saves files with credentials and other sensitive data to public Git repositories, creating security gaps for…
IT Security News Hourly Summary 2026-11-10 20h : 11 posts
11 posts published in the last hour 18:32What’s New in Wordfence 9.1.0: Security News, Faster Rules and Smarter Alerts 18:32Adobe Patches 110 Vulnerabilities Across 9 Products 18:32Digital sovereignty at re:Invent 2026: Sessions you won’t want to miss 18:31Beyond Connectivity: Building…
What’s New in Wordfence 9.1.0: Security News, Faster Rules and Smarter Alerts
Wordfence 9.1.0 is now available. It adds the new Wordfence Security News Widget, which brings the latest WordPress security alerts and research to your…
Adobe Patches 110 Vulnerabilities Across 9 Products
Adobe has fixed vulnerabilities in AEM, Premiere, Photoshop, After Effects, Connect, Audition, Dimension, Content Credentials SDK, and Media Encoder.
Digital sovereignty at re:Invent 2026: Sessions you won’t want to miss
AWS re:Invent returns to Las Vegas for cloud and AI’s biggest week from November 30–December 4, 2026. This year we have over 2,200 sessions, 70 percent of…