IT Security News: Evening roundup, 2026-11-12 Summary Between 18:00 and midnight CET, the dominant thread was attacks on the infrastructure that other organizations depend on: a remote-monitoring platform used by managed service providers, a ransomware-hit university, a shipping giant's legacy…
AI Pentest Tool AntiFox Abused To Steal AWS Credentials
Arctic Wolf saw attackers use the AntiFox pentest platform to hit IIS servers and AWS accounts. Arctic Wolf Labs has published research on attackers using…
New Falcon Cloud Security Innovations Secure the Cloud AI Runs On
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: New Falcon Cloud Security Innovations Secure the Cloud AI Runs On
PostgreSQL security update fixes 52 vulnerabilities, ends support for PostgreSQL 14
The PostgreSQL Global Development Group released PostgreSQL 18.7, 17.12, 16.16, 15.20 and 14.25 on November 12, fixing 52 security vulnerabilities and…
CrowdStrike Brings Enterprise Browser Security to the Falcon Platform
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Brings Enterprise Browser Security to the Falcon Platform
Fake Zillow pages use ClickFix NetSupport RAT to target apartment hunters
EfficientIP Research Labs traced a ClickFix campaign that used fake Zillow apartment-review pages to install NetSupport RAT on visitors’ Windows…
How Adversaries Are Turning the Vulnerability Ecosystem Against Defenders
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: How Adversaries Are Turning the Vulnerability Ecosystem Against Defenders
CrowdStrike Extends the Agentic SOC to Detect and Stop Agent Insider Threats
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Extends the Agentic SOC to Detect and Stop Agent Insider Threats
N-able Takes N-central Platform Offline After Discovery of 33 Flaws
The RMM provider also released a hotfix as a recommended mitigation to address public exploits for the alleged zero-days, which allow for attacker…
The School Bomb Threats Came From Accounts Already in Stolen Data
Hudson Rock researchers found that two university addresses tied to Italy’s school bomb threats were in infostealer data. On 11 November, bomb-threat…
New worm-like ‘SCKit’ malware targets MSPs in ScreenConnect attacks
A new worm-like malware toolkit named SCKit was deployed in the recent ScreenConnect attacks targeting managed service providers (MSPs), designed to…
CVE-2026-100307 – Missing authorization on the external management API in mcp-gateway-registry enables privilege escalation to registry administrator
Bulletin ID: 2026-179-AWS Publication Date: 11/11/2026 12:30 PM PST Description: Missing authorization in the external management API in Amazon…
Microsoft Patches 1,235 Security Flaws: Outlook Zero-Day Already Under Attack
Microsoft fixes 1,235 security flaws in November’s Patch Tuesday, including an actively exploited Outlook zero-day. Here’s what Windows users need to know.
CrowdStrike Introduces Agentic Adversary Emulation to Counter AI-Enabled Adversaries
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Introduces Agentic Adversary Emulation to Counter AI-Enabled Adversaries
Attackers Say ‘Hello’ to a Different Scale of Cloud Attack
Researchers dubbed an attack chain “Greeter” after discovering that attackers deliberately covered their trail by leaving “hello” messages in logs.
WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data
Maersk confirms a data breach involving a legacy system, while WhiteArmor claims 100GB of stolen data and demands a $5 million ransom. A.P. Moller Maersk,…
Hackers compromise 4,800 GitHub accounts to steal cloud credentials
A new campaign dubbed ‘wfx-loot’ has unfolded on GitHub where threat actors used 4,837 compromised accounts to probe 61,764 repositories, open pull…
CVE-2026-125926 – Server-side request forgery in the server registration and update API in mcp-gateway-registry
Bulletin ID: 2026-180-AWS Publication Date: 11/11/2026 13:00 PM PST Description: MServer-side request forgery (SSRF) in the server registration and update…
Ring Introduces Drone and Rover Cameras for Homes and Businesses
Ring introduces flying and wheeled security cameras for homes and businesses. Compare US prices, shipping dates, subscriptions, privacy controls, and…
IT Security News Hourly Summary 2026-11-13 00h : 36 posts
36 posts published in the last hour 22:55IT Security News Daily Summary 2026-11-12 22:36Vanderbilt restores systems after cyberattack as hackers claim data theft 22:35When Market Data Can’t Be Trusted: Why Feed Integrity Matters to Order-Flow Analysis 22:35Mt. Gox – The…
IT Security News Daily Summary 2026-11-12
200 posts published today 22:36Vanderbilt restores systems after cyberattack as hackers claim data theft 22:35When Market Data Can’t Be Trusted: Why Feed Integrity Matters to Order-Flow Analysis 22:35Mt. Gox – The Missing Bitcoin and Who Was Convicted of What 22:35Five…
Vanderbilt restores systems after cyberattack as hackers claim data theft
Vanderbilt University is restoring campus technology, but has not confirmed the attackers’ claims of stolen student and employee data.
When Market Data Can’t Be Trusted: Why Feed Integrity Matters to Order-Flow Analysis
Missing trades, delayed quotes and wrong timestamps distort order-flow analysis. Learn how market data feed integrity affects charts and trading apps.
Mt. Gox – The Missing Bitcoin and Who Was Convicted of What
Mt. Gox said in 2014 that about 850,000 bitcoins had disappeared. What the courts found, who was charged, and how far repayments had got by October 2026.
Five Signs Your MDR is All Alert, No Action
Your managed detection and response (MDR) provider flags suspicious activity, and your analyst spends the next hour finding the account, checking logs,…