IT Security News: Morning roundup, 2026-11-11 Summary This window was dominated by AI showing up on both sides of the threat picture. A financially motivated cluster is using AI-enabled pen-testing tools against banks, Citrus ransomware reportedly uses LLMs, and Claude…
Finite State Raises $27 Million to Help Device Makers Fight ‘Vulnpocalypse’ with AI-Powered Product Security
Columbus, Ohio, United States, 10th November 2026, CyberNewswire
Red Flags to Watch for When Choosing Between AI Pentesting Vendors
AI pentesting has gone from experimental to crowded in about a year. It feels like… Red Flags to Watch for When Choosing Between AI Pentesting Vendors on…
Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers
The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal…
Google fixes the eighth actively exploited Chrome zero-day of 2026
Google patched nine Chrome flaws, including a V8 vulnerability tracked as CVE-2026-125350, that attackers have been actively exploiting in the wild.…
5th EMPACT Hackathon leads to the detection of 51 potential victims
An international operation involving 40 experts and investigators from 20 countries has identified 51 potential victims of human trafficking, as well as…
Hackers use AntiFox AI agents in AWS credential-theft attacks
Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services…
Vanderbilt University Takes Systems Offline After Cyber Incident
The BYOD ransomware group has claimed to have locked the university’s databases and stolen sensitive data from its systems
Google Authenticator vs Microsoft Authenticator vs 2FAS: Which Is Best?
Google Authenticator, Microsoft Authenticator, and 2FAS all generate verification codes, but backup and recovery work differently. Here’s which app makes…
Critical Xen Orchestra Flaws Exploited in Attacks
The authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
eBPF Rootkits: Why Underground Actors Are Taking Notice
Linux eBPF rootkits can hide malicious activity and evade traditional detection methods without loading kernel modules. Flare reveals how these techniques…
Best Privacy Browsers in 2026: Brave, Firefox, Tor, and More Compared
Brave, Firefox, Tor, and other privacy browsers take different approaches to tracking, fingerprinting, and anonymity. Here’s how seven options compare and…
IT Security News Hourly Summary 2026-11-11 17h : 29 posts
29 posts published in the last hour 15:35Hackers Use Memecoins To Launder Stolen Binance Funds 15:34The XG Files: Falcon C2 Flying Under The (Browser) Radar 15:34Ca: York University Breach Exposes 19 Years of Student Health and Financial Data 15:34CYBER BRIEFING…
Hackers Use Memecoins To Launder Stolen Binance Funds
Suspected North Korean hacking group creates fake memecoins to launder some of $6.3bn in funds stolen from Binance in record hack
The XG Files: Falcon C2 Flying Under The (Browser) Radar
We uncover Falcon C2, a browser-based threat framework targeting governments via malicious scripts, extensions, and the Antino implant.
Ca: York University Breach Exposes 19 Years of Student Health and Financial Data
Garrett Cole reports: Toronto’s York University has confirmed a major cybersecurity incident that resulted in the unauthorized theft of sensitive…
CYBER BRIEFING | NOVEMBER 11, 2026
Chrome zero-day exploited; Fortinet fixes nearly 100 flaws
Web Shell Detection Beyond IIS: What Changes When the Server Runs Node?
You learned web shell detection on Microsoft Internet Information Services (IIS), and have relied on… Web Shell Detection Beyond IIS: What Changes When…
Anthropic and OpenAI are coming for the development workflow
Running a gold mine can be profitable. Finding and digging the next one is expensive. As analyst Benedict Evans argues , Anthropic’s business has the same…
Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments
Nicknamed “Turla’s Cereal,” the tools target Microsoft Exchange servers and lack many obvious indicators of compromise or malicious telemetry, per a new…
SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution
Four flaws that attackers could exploit without logging in were fixed today as part of SAP’s monthly Security Patch Day—the vendor rates all four 10.0,…
France Blames Iran for Supermarket Fridge Hack, Requests International Arrest Warrants
The French authorities have tied the cyber-attack targeting supermarket fridges to Iran’s Islamic Revolutionary Guard Corps
France Blames Iran For Attacks On Hundreds Of Supermarkets
French government says supermarket fridge hacks carried out by cyber unit linked to Iran’s Islamic Revolutionary Guard Corps
Panic over cloud capacity is out of hand
I read the recent piece about AWS cloud capacity being “largely sold out” through 2027 , and my first reaction was fairly simple: Well, that’s that. I…
Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities
An iMessage flaw could let a remote attacker join a group chat and receive its messages, Apple said yesterday, and it released updates to fix it. The…