IT Security News: Evening roundup, 2026-11-14 Summary This period was dominated by software supply chain and developer tooling risk. Cursor's breach let attackers push a malicious Claude Code extension, and the ChainDrop attack hit open-source maintainers. These stories sit alongside…
IT Security News Daily Summary 2026-11-14
83 posts published today 19:00IT Security News Hourly Summary 2026-11-14 20h : 7 posts 18:31ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178, (Fri, Nov 13th) 18:032026-11-12: SmartApeSG ClickFix campaign pushes CNCmachineRMS RAT 18:03US seizes North Korean hacking infrastructure, $1.2 billion…
IT Security News Hourly Summary 2026-11-14 20h : 7 posts
7 posts published in the last hour 18:31ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178, (Fri, Nov 13th) 18:032026-11-12: SmartApeSG ClickFix campaign pushes CNCmachineRMS RAT 18:03US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance 18:03Cursor confirms…
ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178, (Fri, Nov 13th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178,…
2026-11-12: SmartApeSG ClickFix campaign pushes CNCmachineRMS RAT
This post has no text preview — click the link below to read the original article. This article has been indexed from Malware-Traffic-Analysis.net – Blog Entries Read the original article: 2026-11-12: SmartApeSG ClickFix campaign pushes CNCmachineRMS RAT
US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance
The infrastructure, said to belong to APT38, contained footage used to fool victims over video calls.
Cursor confirms security breach led to malicious Claude Code extension
Cursor confirmed it suffered a security breach that let hackers distribute a malicious Claude Code extension through its marketplace after stealing…
The OpenSourceMalware Show #29
Jared Wray, maintainer of Keyv and Cachable, talks about what it was like to be at the center of the ChainDrop software supply chain attack.
Transportation secretary blames ‘routine’ equipment upgrade for grounding flights nationwide
FAA administrator Bryan Bedford also said there’s “zero evidence of anything AI-related.”
IT Security News Hourly Summary 2026-11-14 19h : 5 posts
5 posts published in the last hour 17:31Extortion Group Claims Theft of Nearly One Billion Expedia Traveler Records 17:31Upcoming Speaking Engagements 17:06IT Security News Roundup: 2026-11-14 Afternoon 17:02PostgreSQL’s Largest Ever Security Release Patches 52 Flaws, Including a 22-Year-Old Bug Any…
Extortion Group Claims Theft of Nearly One Billion Expedia Traveler Records
Russian extortion group n0n claims to have stolen nearly one billion Expedia traveler records through a compromised third-party provider. A newly formed…
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I’m speaking at the Catalyst Summit in Brampton, Ontario, Canada, on Wednesday, November…
IT Security News Roundup: 2026-11-14 Afternoon
IT Security News: Afternoon roundup, 2026-11-14 Summary Between noon and six on 14 November, the stories clustered around three threads: third-party and supply-chain exposure, AI tools becoming both an attack vector and a defensive product, and state-linked or organized criminal…
PostgreSQL’s Largest Ever Security Release Patches 52 Flaws, Including a 22-Year-Old Bug Any Logged-In User Could Weaponize
The PostgreSQL Global Development Group shipped security updates on November 12 for all five supported major versions, issuing fixes for 52…
IT Security News Hourly Summary 2026-11-14 18h : 6 posts
6 posts published in the last hour 16:33New Falcon Cloud Security Innovations Secure the Cloud AI Runs On 16:33Uber Data Breach: Driver Licenses Stolen via Fireworks AI 16:03How Adversaries Are Turning the Vulnerability Ecosystem Against Defenders 16:02US disrupts North Korean…
New Falcon Cloud Security Innovations Secure the Cloud AI Runs On
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: New Falcon Cloud Security Innovations Secure the Cloud AI Runs On
Uber Data Breach: Driver Licenses Stolen via Fireworks AI
Vivek reports: Uber is notifying thousands of US drivers that their personal and driver’s license information was stolen in October 2026, after hackers…
How Adversaries Are Turning the Vulnerability Ecosystem Against Defenders
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: How Adversaries Are Turning the Vulnerability Ecosystem Against Defenders
US disrupts North Korean campaign behind $400 million crypto theft
The U.S. government has disrupted a North Korean social engineering campaign called ‘FaceStealer’, responsible for stealing more than $400 million in…
CrowdStrike Brings Enterprise Browser Security to the Falcon Platform
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Brings Enterprise Browser Security to the Falcon Platform
IT Security News Hourly Summary 2026-11-14 17h : 6 posts
6 posts published in the last hour 15:32CrowdStrike Extends the Agentic SOC to Detect and Stop Agent Insider Threats 15:32SilentAir 15:03The School Bomb Threats Came From Accounts Already in Stolen Data 15:03Is AI Making Us Worse at Cybersecurity? 15:02New worm-like…
CrowdStrike Extends the Agentic SOC to Detect and Stop Agent Insider Threats
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Extends the Agentic SOC to Detect and Stop Agent Insider Threats
SilentAir
The Spies Hiding Inside Phone Networks. They don’t hack your phone. They hack the phone company, then quietly ask the network to send your calls and texts…
The School Bomb Threats Came From Accounts Already in Stolen Data
Hudson Rock researchers found that two university addresses tied to Italy’s school bomb threats were in infostealer data. On 11 November, bomb-threat…
Is AI Making Us Worse at Cybersecurity?
Overreliance on AI could erode the creativity, clear communication, and critical thinking security teams need when there’s no playbook.