IT Security News: Evening roundup, 2026-11-11 Summary Several of today's stories share a common thread: attackers going after the trusted infrastructure that other organizations depend on, whether that's a reservation platform, a certificate authority, a remote access service, or a…
Baker Tilly notifies clients of data breach at third-party provider
The Baker Tilly Advisory Group is notifying clients that a data breach has compromised certain personal information about them and their dependents. […]
Huntress hands incident responders free ITDR to stop attackers walking back in
Huntress has launched a global Incident Response (IR) Engagement Programme that gives participating IR firms 60 days of free Huntress protection for their…
Cyberattacks threaten to make open source AI a little less open, Hugging Face exec warns
Hugging Face executive Irene Solaiman warns that growing cyberattacks on open AI platforms could force tighter security restrictions, threatening the…
CISA Expands Incident Reporting Form While CIRCIA Mandate Waits
CISA adds MITRE ATT&CK detail to incident reports as CIRCIA rule awaits White House review
IT Security News Hourly Summary 2026-11-12 01h : 10 posts
10 posts published in the last hour 23:32AI-Powered Malware Analysis Uncovers Hidden Phishing Threats and Reduces SOC Workload 23:32ARTEX and AI-Powered Red Teaming Tools: What Defenders Need to Know 23:31November Patch Tuesday boasts over 1,000 bugs, one already under attack…
AI-Powered Malware Analysis Uncovers Hidden Phishing Threats and Reduces SOC Workload
AI powered malware analysis helps teams reveal hidden phishing attacks, connect related threats and automate reports to reduce investigation workload.
ARTEX and AI-Powered Red Teaming Tools: What Defenders Need to Know
Learn what Unit 42 discovered about attacker use of AI-powered red team tools, and how to mitigate these attacks.
November Patch Tuesday boasts over 1,000 bugs, one already under attack
Microsoft admins wail and gnash their teeth
France attributes grocery hacks to Iran-backed threat actors
Attackers compromised hundreds of refrigerator components at supermarkets, agricultural facilities and local shops.
CVE-2026-125271 – AWS API MCP Server Security Policy Bypass via Incorrect Operation Name Normalization
Bulletin ID: 2026-176-AWS Publication Date: 11/10/2026 08:30 AM PST Description: We identified CVE-2026-125271 of AWS API MCP Server. The server…
Malicious Rust Crate Targets Crypto Wallet Developers
Attack on the Zcash, Vizor, and Keplr ecosystems uses CI exfiltration, dependency confusion, prompt-injecting AI reviewers, and maintainer phishing
Active ScreenConnect attacks breach MSPs, impact dozens of organizations
ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environments to…
Iranian hackers turned up the heat on French supermarket freezers, says France
Iran has been officially accused by France of being responsible for cyber attacks last month that meddled with supermarket freezers, causing some to catch…
IT Security News Hourly Summary 2026-11-12 00h : 19 posts
19 posts published in the last hour 22:55IT Security News Daily Summary 2026-11-11 22:33Japan Airlines Passengers Caught in Amadeus Reservation System Breach 22:33Trump taps Palantir security chief to run battered US cyber defense agency 22:32N-able takes its remote access service…
IT Security News Daily Summary 2026-11-11
200 posts published today 22:33Japan Airlines Passengers Caught in Amadeus Reservation System Breach 22:33Trump taps Palantir security chief to run battered US cyber defense agency 22:32N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs 22:32AU:…
Japan Airlines Passengers Caught in Amadeus Reservation System Breach
Japan Airlines has warned roughly 92,000 customers that hackers accessed their personal information through a third-party reservation platform, in what is…
Trump taps Palantir security chief to run battered US cyber defense agency
Michael LoSapio could inherit a depleted workforce and a political headache or two, courtesy of his current employer
N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs
The remote access giant also urged its self-hosted customers to take down their own servers amid a “critical security incident,” fearing the possibility…
AU: Hacker claims to have sold stolen exams to students — but marked them for identification purposes?
Aimee Edwards reports: Victoria’s Year 12 exams have been thrown into turmoil after the state’s curriculum and assessment authority website was hacked. A…
Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America
The threat actor known as Blind Eagle has resurfaced with a new campaign targeting organizations in Latin America through judicial and…
Trump picks Palantir cybersecurity executive to lead CISA
The nomination — Trump’s second attempt to fill a post that has sat vacant for his entire second term — could face steep odds in the Senate.
Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor
Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based…
eMudhra revokes 8 more CA certificates after private key mishap
Certificate authority eMudhra has revoked eight additional intermediate CA certificates after an investigation into its recent certificate security…
AI Raises the Stakes for Cyber Resilience
An organization’s ability to quickly recover from a business disruption will be a competitive advantage in an era of AI-driven threats and business…