IT Security News: Morning roundup, 2026-11-09 Summary The morning news is dominated by the dual nature of AI, showcasing its utility in security operations alongside its role in powering sophisticated new hacking campaigns. Significant financial and personal data breaches highlight…
Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia
The South Asian cyber espionage group known as Bitter (aka APT-C-08, APT-Q-37, Hazy Tiger, Orange Yali, T-APT-17, and TA397) has been observed targeting…
CYBER BRIEFING | NOVEMBER 09, 2026
A 257-char password beats OpenSSH on Alpine: patch now
Microsoft’s Azure Linux gets 470-plus security fixes in one almighty patching session
A mountain of CVEs, a certificate cleanup, and yet more work for Microsoft’s patching teams
Agentic Scrum, Part 2 of 5: Describe the Value
The first two steps of the agentic pipeline have no agent in them. Here is how the product owner writes value.md, how developers turn it into…
ARTEX goes from pentesting tool to attacker staple in three months
A security researcher’s AI agent breached an internal sales application used by WorkOS’s go-to-market teams, the developer platform provider confirmed on…
Europol urges early action to protect cryptocurrencies and sensitive data from quantum threats
The timing of these capabilities remains uncertain. However, this should not be the main concern. Adapting systems and coordinating security upgrades will…
Hackers Exploit Third-Party Provider to Steal $133 Million From French Bank
A major French banking group, Crédit Mutuel Arkéa, has suffered a sophisticated cyberattack that allowed hackers to carry out fraudulent financial…
LEVEL 20: Same Game. New Level.
From 2006’s cybercrime economy to today’s AI threats, every era brought a harder level. Celebrate 20 years with $550 off Learn One.
Hackers abuse refrigeration controllers to send spam and route proxy traffic
Internet-exposed refrigeration controllers used in supermarkets and cold storage facilities are being hijacked and turned into infrastructure for a…
Who Gives A Crap? Hackers, apparently, after toilet paper maker’s customer data exposed
UK shoppers caught up in third-party security mess, and nobody knows whether the data was flushed away
FBI agent stole $2.5 million in crypto from hackers under investigation
A former FBI agent has pleaded guilty to stealing nearly $2.5 million from the wallets of fraud victims and nation-state hackers under investigation. […]
QNAP Warns Users as Plex2Shell Flaws Are Used to Hack NAS Devices
Taiwanese vendor QNAP urges users to update Plex Media Server after reports of NAS compromises through the Plex2Shell vulnerability chain. QNAP urges…
New Supply Chain Attack Compromises Tens of Thousands of GitHub Repositories
Security researchers have detected a malicious workflow affecting tens of thousands of GitHub repositories, including Uber-owned ones
IT Security News Hourly Summary 2026-11-09 16h : 22 posts
22 posts published in the last hour 14:36Alleged AI-aided cyberattack exploits assistant interface to breach German web host 14:36How Safe Remediation Reduces Exposure Without Disrupting Production 14:35Almost 50 arrested as police target Western Balkan network linked to killings 14:35⚡ Weekly…
Alleged AI-aided cyberattack exploits assistant interface to breach German web host
Hackers allegedly assisted by AI breached a German web hosting company through a tool designed to allow customers to connect AI assistants to their…
How Safe Remediation Reduces Exposure Without Disrupting Production
The exposure is critical, the exploit is public, and the affected system supports a production application. Security needs the risk reduced before…
Almost 50 arrested as police target Western Balkan network linked to killings
Nearly 50 suspects have been arrested in an international operation targeting a drug trafficking network with Western Balkan members, linked to killings,…
⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More
A system doesn’t always need a complicated bug to let someone in. Sometimes, a blank password is enough. That’s one of the bigger stories this week. And…
Hackers Infiltrate GitHub Projects to Infect Cybersecurity Developers With Advanced Malware
Cybercriminals are distributing malware through GitHub repositories designed to look like genuine development projects. Researchers at Doctor Web found…
Coding Agents Copy Your Secrets to a Hidden File. Thousands Are on GitHub (2)
Shmulik Cohen and Matan Giladi write: Apiiro research found 2,539 real secrets in 1,994 public GitHub repositories: database passwords, cloud keys, API…
Chrome 158 for Android Released
Google has begun rolling out Chrome 158 for Android to a small percentage of users, with the update expected to reach all users through Google Play within…
Revolve Puts Data Breach Victim Count at 1.5 Million
Online fashion retailer Revolve has told regulators that the September cyberattack affected more than 1.5 million individuals.
mSecure warns users of suspicious activity
Password manager mSecure has issued a security warning to current and former customers after detecting suspicious activity, but the notice lacks critical…
The Nansh0u Campaign – Hackers Arsenal Grows Stronger
In the beginning of April, three attacks detected in the Guardicore Global Sensor Network (GGSN) caught our attention. All three had source IP addresses…