IT Security News: Evening roundup, 2026-11-11 Summary Several of today's stories share a common thread: attackers going after the trusted infrastructure that other organizations depend on, whether that's a reservation platform, a certificate authority, a remote access service, or a…
CVE-2026-125271 – AWS API MCP Server Security Policy Bypass via Incorrect Operation Name Normalization
Bulletin ID: 2026-176-AWS Publication Date: 11/10/2026 08:30 AM PST Description: We identified CVE-2026-125271 of AWS API MCP Server. The server…
Malicious Rust Crate Targets Crypto Wallet Developers
Attack on the Zcash, Vizor, and Keplr ecosystems uses CI exfiltration, dependency confusion, prompt-injecting AI reviewers, and maintainer phishing
Active ScreenConnect attacks breach MSPs, impact dozens of organizations
ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environments to…
Iranian hackers turned up the heat on French supermarket freezers, says France
Iran has been officially accused by France of being responsible for cyber attacks last month that meddled with supermarket freezers, causing some to catch…
IT Security News Hourly Summary 2026-11-12 00h : 19 posts
19 posts published in the last hour 22:55IT Security News Daily Summary 2026-11-11 22:33Japan Airlines Passengers Caught in Amadeus Reservation System Breach 22:33Trump taps Palantir security chief to run battered US cyber defense agency 22:32N-able takes its remote access service…
IT Security News Daily Summary 2026-11-11
200 posts published today 22:33Japan Airlines Passengers Caught in Amadeus Reservation System Breach 22:33Trump taps Palantir security chief to run battered US cyber defense agency 22:32N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs 22:32AU:…
Japan Airlines Passengers Caught in Amadeus Reservation System Breach
Japan Airlines has warned roughly 92,000 customers that hackers accessed their personal information through a third-party reservation platform, in what is…
Trump taps Palantir security chief to run battered US cyber defense agency
Michael LoSapio could inherit a depleted workforce and a political headache or two, courtesy of his current employer
N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs
The remote access giant also urged its self-hosted customers to take down their own servers amid a “critical security incident,” fearing the possibility…
AU: Hacker claims to have sold stolen exams to students — but marked them for identification purposes?
Aimee Edwards reports: Victoria’s Year 12 exams have been thrown into turmoil after the state’s curriculum and assessment authority website was hacked. A…
Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America
The threat actor known as Blind Eagle has resurfaced with a new campaign targeting organizations in Latin America through judicial and…
Trump picks Palantir cybersecurity executive to lead CISA
The nomination — Trump’s second attempt to fill a post that has sat vacant for his entire second term — could face steep odds in the Senate.
Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor
Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based…
eMudhra revokes 8 more CA certificates after private key mishap
Certificate authority eMudhra has revoked eight additional intermediate CA certificates after an investigation into its recent certificate security…
AI Raises the Stakes for Cyber Resilience
An organization’s ability to quickly recover from a business disruption will be a competitive advantage in an era of AI-driven threats and business…
iOS Sandbox Escape Is Public, and Apple Hasn’t Confirmed a Fix
A public iOS sandbox escape could expose wallet keys, Binance warns. No attacks are reported and no fix is confirmed. On 10 November, Binance warned users…
Researcher bypassed Meta smart glasses’ safeguards to run her own code
She was able to bypass a safeguard meant to stop unauthorized software running on Meta glasses. It wasn’t easy, but showed it is possible.
New Falcon Cloud Security Innovations Secure the Cloud AI Runs On
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: New Falcon Cloud Security Innovations Secure the Cloud AI Runs On
Italy Minister’s Personal Data Leaked on Dark Web
Italy’s Foreign Minister Antonio Tajani has said that cybercriminals circulated his personal data on the dark web, exposing him and his family to threats…
AI Pentest Tool AntiFox Abused To Steal AWS Credentials
Arctic Wolf saw attackers use the AntiFox pentest platform to hit IIS servers and AWS accounts. Arctic Wolf Labs has published research on attackers using…
How Adversaries Are Turning the Vulnerability Ecosystem Against Defenders
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: How Adversaries Are Turning the Vulnerability Ecosystem Against Defenders
MEXC Faces US Restrictions Over Alleged Sanctions Evasion and Cybercrime
US Treasury officials have blocked MEXC Global from the American financial system due to its alleged involvement in sanctions evasion, cybercrime-related…
Akamai Functions: The Business Case for Edge Native Serverless
Discover how Akamai Functions cuts latency and cloud costs by running fast WebAssembly code at the edge with zero cold starts and no idle capacity fees.
IT Security News Hourly Summary 2026-11-11 23h : 20 posts
20 posts published in the last hour 21:33PuppyGraph adds AI schema builder and MCP support to help ease enterprise agent adoption 21:33Fireworks AI gets burned twice as customer data exposure widens 21:33CrowdStrike Brings Enterprise Browser Security to the Falcon Platform…