IT Security News: Morning roundup, 2026-11-11 Summary This window was dominated by AI showing up on both sides of the threat picture. A financially motivated cluster is using AI-enabled pen-testing tools against banks, Citrus ransomware reportedly uses LLMs, and Claude…
Online Casino Serves Malicious Python SDK
An online casino is serving up malware via a malicious PyPI SDK package.
Windows Active Directory RCE and DoS Vulnerabilities Put Windows Systems at Risk
Microsoft disclosed two Windows Active Directory vulnerabilities on November 10, 2026, exposing affected systems to remote code execution and denial of…
Researcher Finds 100-Plus Serious Flaws in UK Government Code
A researcher found more than 100 serious flaws in UK government code. Learn what security teams should check for exposed secrets and access-control gaps.
Anthropic’s super bug-finding Mythos model is going into Cisco and IBM products
Enterprise security tools will offer its capabilities without handing customers the model itself
Three People Arrested for AI-Enhanced Impersonation Fraud
It’s hard to believe how lucrative this crime can be: According to a press release from the United States attorney’s office for the southern district of…
Hotel giant Wyndham exposed customer data after app security lapse
Exclusive: Wyndham left a hardcoded credential in its customer app, allowing anyone to access customer data. The hotel giant wouldn’t say if it has the…
Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem
A configuration file meant to store local command permissions on Anthropic’s Claude Code is exposing thousands of API keys, database credentials and other…
CVE-2026-124034, CVE-2026-124035: Issues with Amazon Braket SDK
Bulletin ID: 2026-175-AWS Publication Date: 11/09/2026 14:15 PM PST Description: Amazon Braket SDK is an open source Python library that customers use to…
Rubrik enhances DevOps Protection to preserve legitimate work during recovery
Rubrik has announced cyber recovery capabilities for DevOps platforms Microsoft Azure DevOps and GitHub. With built-in anomaly detection, blast radius…
Fortinet Patches Nearly 100 Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerability in OpenSSH: *sshole Potentially Exposes Embedded Linux, Docker Containers.
This post has no text preview — click the link below to read the original article. This article has been indexed from Security Blog G Data Software AG Read the original article: Vulnerability in OpenSSH: *sshole Potentially Exposes Embedded Linux,…
eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise
The in-house Python script behind eMudhra’s October key compromise has now cost the company 8 more of its intermediate certificate authorities (CAs), even…
BluePhishing Attack Abuses Microsoft Entra OAuth Consent to Create Hidden AI Agent Identities
“BluePhishing,” a technique that extends OAuth consent phishing to Microsoft Entra’s AI agent model. The attacker needs only one consent click to create…
France blames Iran for supermarket hack meltdowns
The ‘first cyber offensive campaign carried out purely for the purpose of sabotage on national territory’
Finite State Raises $27 Million to Secure Software and Firmware in Connected Devices
The Series C round will fund international expansion and more autonomous features for the firm’s device security platform.
We Built An Agent That Broke All of Our Security Rules. Here’s What We Learned.
We tell customers three things about securing AI agents: they need their own identities, access that fits the job they’re given, and traceability that’s…
Shipping giant Maersk probes ‘IT security incident,’ data theft
Says it ‘strongly’ suspects attack limited to legacy system, and that nothing sensitive is at risk
Bay Raises $50 Million to Control What Enterprise AI Agents Can Do
Founded by three ex-IDF Unit 8200 intelligence officers, Bay is launched to provide a control plane for AI agents.
CVE-2026-124033 – Relative path traversal in the log export commands in AWS ParallelCluster CLI
Bulletin ID: 2026-174-AWS Publication Date: 11/09/2026 13:00 PM PST Description: AWS ParallelCluster CLI is an open source command line tool, distributed…
FORGE Lab uses agentic tools to identify memory safety issues in Rust
Microsoft FORGE Lab researchers found memory-safety bugs in Rust’s core and std libraries, including cases where safe Rust code can trigger undefined…
Microsoft fixes audio issues caused by September security updates
Microsoft says the November 2026 cumulative updates resolve USB audio issues plaguing Windows users who have installed security updates released since…
CISA Announces Enhanced Reporting Form for Cyber Incidents
New questionnaire captures critical data and information that improves the agency’s ability to assess incidents, identify trends and prioritize response…
Microsoft Teams AI Phishing Detection: Rollout and Deepfake Warnings
Microsoft Teams is introducing AI phishing detection for external chats, while separate deepfake detection will require third-party providers and…
Attackers backdoor trusted AWS integrations to steal secrets
Wiz researchers uncovered the secret-stealing supply-chain attack