IT Security News: Morning roundup, 2026-11-07 Summary The morning period was heavily dominated by the intersection of artificial intelligence and security, with several reports highlighting how AI agents can inadvertently leak secrets or escape sandboxes. Simultaneously, critical infrastructure and web…
No need to hack when it’s leaking: Artex edition
Zack Whittaker reports: Security researchers have discovered hundreds of copies of a Chinese-made AI hacking tool publicly exposed to the internet for…
Hackers Exploit Malicious CWP Web Server to Backdoor Linux Systems
Linux backdoors have been discovered that have been maliciously implanted into servers that are running Control Web Panel (CWP) via trojanized versions of…
Exilware and BraZetsu
The Hacked-PC Marketplace
Norad targeted by cyberattack
From Norway’s aid agency, Norad, November 3: Norad has been targeted by a cyberattack in which the perpetrators may have gained access to the names and…
AI-Powered CEO Impersonation Scheme Allegedly Defrauded Companies of $129 Million
Three men have been indicted in the United States for an alleged international fraud scheme in which they used artificial intelligence to impersonate…
County of Sussex, New Jersey Notice of Data Privacy Incident
November 6, 2026 8:00 PM EST NEWTON, N.J., Nov. 6, 2026 /PRNewswire/ — Sussex County Prosecutor’s Office (SCPO) experienced a data privacy event that…
DigiCert Hack Exposes Customer Details, Passports, and Driver’s Licences
DigiCert has disclosed a data breach after a server migration error exposed an internal business system to the internet, allowing unauthorized users to…
Coding Agents Copy Your Secrets to a Hidden File. Thousands Are on GitHub
Shmulik Cohen and Matan Giladi write: Apiiro research found 2,539 real secrets in 1,994 public GitHub repositories: database passwords, cloud keys, API…
APT29-Linked Campaign Uses Compromised Websites to Target iOS and Android Devices
Russia-linked cyberespionage hackers have compromised a legitimate web analytics script to distribute sophisticated spyware targeting Apple iOS and Google…
CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands
Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger…
IT Security News Hourly Summary 2026-11-07 16h : 5 posts
5 posts published in the last hour 14:31CISA Warns of Actively Exploited WordPress RCE Flaw 14:02SonicWall Warns of Potential In-the-Wild Exploitation of SSLVPN Flaw That Bypasses MFA 14:02Gartner Report: The Attack Path is Closing Faster than Most Teams Can Patch…
CISA Warns of Actively Exploited WordPress RCE Flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are actively exploiting a recently patched, high-severity…
SonicWall Warns of Potential In-the-Wild Exploitation of SSLVPN Flaw That Bypasses MFA
SonicWall has warned customers to patch a SonicOS SSLVPN vulnerability that could let attackers bypass SAML authentication and its multi-factor…
Gartner Report: The Attack Path is Closing Faster than Most Teams Can Patch
Security teams have never lacked vulnerability data. The harder problem is deciding which issues create a credible path to business impact, then acting…
A tiny supercurrent could unlock quantum information without destroying it
Researchers have proposed a breakthrough technique for reading quantum information without destroying the delicate states that make quantum computers…
IT Security News Hourly Summary 2026-11-07 15h : 4 posts
4 posts published in the last hour 13:31The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call 13:31ChatGPT Lockdown Mode Bypass Reveals a Wider Challenge in AI Security 13:02Anthropic won’t fix a Claude Dispatch flaw that could let attackers execute remote commands…
The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call
Escalating hacks affecting blood labs and grocery stores show the very real risks to critical infrastructure that come from basic security lapses…
ChatGPT Lockdown Mode Bypass Reveals a Wider Challenge in AI Security
Check Point Research (CPR) discovered a vulnerability that bypassed ChatGPT Lockdown Mode, a security feature designed to reduce prompt-injection-driven…
Anthropic won’t fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries
Jessica Lyons reports: A vulnerability in Anthropic’s Claude products lets any browser extension that can control Claude Dispatch make Claude Desktop run…
IT Security News Hourly Summary 2026-11-07 14h : 5 posts
5 posts published in the last hour 12:31Post-Quantum Questions to Ask Your Vendors 12:02Zyxel GS1900 Switches Vulnerable Despite Patch 12:02India Warns of New AI-Driven Cyber-Attacks Targeting Financial and Crypto Businesses 12:02AI Agent Detection Signals Still Work 12:00IT Security News Hourly…
Post-Quantum Questions to Ask Your Vendors
CISA, the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and the National Security Agency (NSA) released joint guidance…
Zyxel GS1900 Switches Vulnerable Despite Patch
Zyxel GS1900 series network switches that received a security patch earlier this year remain vulnerable to active exploitation, according to research from…
India Warns of New AI-Driven Cyber-Attacks Targeting Financial and Crypto Businesses
The Indian CERT said a new cyber malicious group tracked as ‘Crafty Flacon’ is using Chinese-made AI tools to attack fintech and crypto organizations
AI Agent Detection Signals Still Work
Security teams face a new challenge as AI agents replace traditional bots, requiring updated detection methods that go beyond conventional binary bot…