IT Security News: Afternoon roundup, 2026-11-09 Summary The afternoon news cycle is dominated by the evolving risks of AI, ranging from the emergence of autonomous attacking agents to the urgent need for updated professional education. High-impact financial and data breaches…
Help defend against memory poisoning in Amazon Bedrock AgentCore with multi-layer write validation
Amazon Bedrock AgentCore Memory helps AI agents maintain context across sessions through persistent short-term and long-term memory. Because memory…
Investment scams with potential victims in at least 50 countries: over 100 servers seized
Led by the German Itzehoe Public Prosecutor’s Office (Staatsanwaltschaft Itzehoe), the operation targeted a company suspected of supplying fraudulent…
Binance calls alleged “ShinyHunters” post a scam attempt
Sergiu Gatlan reports: Binance, the world’s largest crypto exchange, has denied claims of a new security breach made by a threat actor using the…
Nvidia Backs Jensen Huang as Board Examines Espionage Reports
Nvidia backs Jensen Huang as its board investigates espionage reports. Here’s what IT buyers should watch on security, supplier risk, and AI chip access.
France blames Iran for mass-hacks targeting freezers in grocery stores and blood banks
France’s foreign minister blamed Iran for launching at least two waves of cyberattacks targeting industrial refrigerated and freezer units across France…
France blames Iranian hackers for supermarket attacks that sparked fires
France has linked October cyberattacks that disrupted refrigeration systems at more than 700 supermarkets and other retail locations to Iranian…
27 arrests and 248 potential victims identified in action week against labour exploitation
Europol, the European Labour Authority (ELA), and 34 participating countries today announced the results of an action week targeting human trafficking for…
Vanderbilt cybersecurity incident impacting campus devices and systems
Vanderbilt University announced a cyberattack, warning students and employees that campus devices and systems may be impacted by the incident.
Between Two Nerds: Why PHP2Shell fizzled
In this edition of Between Two Nerds Tom Uren and The Grugq talk about why PHP2Shell failed to live up to its hype. A critical bug in a very widely used…
France blames Iran for fridge cyberattacks, says some caused fires
In the first attribution since the October attacks, the French authorities identified the perpetrators as part of Shahid Kaveh, an IRGC cyber unit…
IT Security News Hourly Summary 2026-11-09 20h : 15 posts
15 posts published in the last hour 18:34Attackers Crash Claude’s ‘Office Party’ Flaw to Run Malicious Code on Linux 18:33Notepad++ 8.9.9 Released With Fixes for 6 Vulnerabilities Allowing Plugin Command Execution 18:33Attackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th)…
Attackers Crash Claude’s ‘Office Party’ Flaw to Run Malicious Code on Linux
Attackers can exploit a flaw in Claude’s document-processing tool by creating a temporary file that Anthropic’s AI assistant can access and run on a…
Notepad++ 8.9.9 Released With Fixes for 6 Vulnerabilities Allowing Plugin Command Execution
Notepad++ released version 8.9.9 on November 6, 2026, fixing six security flaws across Windows message handling, protected file saving, clipboard…
Attackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th)
Just saw a new (to me) URL in our honeypot data today:
Alpine Linux SSH Flaw: Long Passwords Can Bypass Authentication
An OpenSSH flaw lets oversized passwords bypass authentication on certain Alpine Linux systems. Learn who is affected, how to patch, and what to check.
Hackers Exploit Qubole’s Trusted AWS Access to Breach Customer Accounts and Steal Data
An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud…
New Abe Office Malware Bypasses Chrome App-Bound Encryption to Steal Browser Passwords and Cookies
A new remote-access trojan called Abe Office can steal browser passwords and cookies, even from Chrome’s App-Bound Encryption. It poses as an office…
MS&AD Data Breach Tops 1 Million Records as Japan Insurers Report New Leaks
MS&AD Insurance Group reports more than 1 million exposed records after new breaches involving Mitsui Sumitomo Insurance and a third-party provider.
Hackers Compromise Ethersphere’s bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware
Attackers used the Ethersphere project’s own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage…
GhostAction Hackers Compromise 500+ GitHub Accounts to Steal AWS, OpenAI, and Cloud Credentials
A new wave of the GhostAction campaign has hit more than 500 GitHub accounts. The attackers use those accounts to plant a fake security workflow in tens…
The Cold Chain on Fire : Unpatched Danfoss controllers exploited
This post has no text preview — click the link below to read the original article. This article has been indexed from Sekoia Blog Read the original article: The Cold Chain on Fire : Unpatched Danfoss controllers exploited
Not a game: Europol and partners target terrorist role-playing online
Europol’s European Union Internet Referral Unit (EU IRU) coordinated together with Spain a Referral Action Day targeting violent extremist and terrorist…
Claude Code is accidentally exposing secrets all over GitHub
“Do not ask again” prompt leads to passwords, API keys, and more being shared.
Researchers pwn automakers’ Android apps to remotely unlock cars, honk horns
Pair of researchers chain WAF bypasses and default logins to command vehicles in Australia and the US