IT Security News: Evening roundup, 2026-11-13 Summary The 18:00–00:00 CET window was dominated by AI cutting both ways. Attackers are running open-source AI pentesting frameworks like ARTEX and AntiFox against real targets, while vendors such as OpenAI are pitching their…
Attackers use Crypto Exchange Names to Disguise Unauthorized Sessions on 100+ ScreenConnect Servers
Fake crypto exchange sessions are showing up on ScreenConnect servers and could be bait for technicians. See what Huntress found and what to do.
CVE-2026-126793 – Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go Wrapper
Bulletin ID: 2026-182-AWS Publication Date: 11/12/2026 13:00 PM PST Description: An untrusted search path issue in Aurora PostgreSQL dialect detection in…
Rogue remote-access campaign spread through ScreenConnect add-on, researchers say
ConnectWise disabled five third-party extensions across about 400 partner environments after researchers linked a worm-like toolkit to one of them.
Five TEFAF robbery suspects added to EU Most Wanted
As of 29 October 2026, five new fugitives, four men and one woman, have been added to the EU Most Wanted list. According to the Limburg Public…
ArcticRAT Cybercrime Gang Profiles Victim Finances With AI
The Android malware has expanded from focusing on crypto theft to full device control, and the attackers have added advanced analysis of stolen…
SCKit abuses ScreenConnect to deploy remote access and target technician sessions
SCKit abuses ScreenConnect to deploy unauthorized remote access and target technicians. Explore the attack chain, mitigations, and Microsoft Defender XDR…
The Department of Know: N-able’s zero-days, Signal’s formal verification, NHS post-breach fallout
Read the full stories at CISOseries.com. This week’s Department of Know is hosted by Rich Stroffolino, with guests Tom Doughty , CISO,…
TSMC has reportedly leaked the personal data of 46,000 employees, but emphasized that no evidence of intrusion was found in the system.
The following is an automated Google translation of an article that originally appeared in Chinese. Jian Yongxiang reports: TSMC, the world’s leading…
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwide
Microsoft is investigating a widespread outage affecting multiple Microsoft 365 services, including Outlook, Microsoft Teams, and Copilot, as users report…
FAA Grounds US Flights Nationwide, Citing ‘Extraordinary’ Safety Concerns
FAA grounds flights nationwide, citing extraordinary safety concerns amid air traffic control communications problems. Here’s what travelers need to know.
Extortion Group Luna Moth Flits Into Law Firms a Second Time
The cybercriminals are retargeting law firms that refused to pay its first ransom, with a social engineering con aimed at stealing Microsoft access tokens.
Ransomware Without Data Theft Can Still Trigger Mandatory Breach Reporting Under India’s DPDP Law: K7 CyberSecurity
CXO Today reports: A ransomware attack that locks up corporate systems can legally qualify as a reportable personal data breach in India—even if hackers…
IT Security News Hourly Summary 2026-11-14 00h : 18 posts
18 posts published in the last hour 22:55IT Security News Daily Summary 2026-11-13 22:32Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters 22:32Security Agencies Worldwide Found to Use Ad-Based Surveillance System 22:32CISA sets operational priorities for partnerships, risk…
IT Security News Daily Summary 2026-11-13
200 posts published today 22:32Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters 22:32Security Agencies Worldwide Found to Use Ad-Based Surveillance System 22:32CISA sets operational priorities for partnerships, risk assessments and systemic action 22:31OffSec Celebrates 20 Years of…
Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters
Climate change is the issue . As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog…
Security Agencies Worldwide Found to Use Ad-Based Surveillance System
An investigation by Bloomberg into Penlink’s ad-based surveillance system Webloc builds off Citizen Lab research, identifying additional customers.
CISA sets operational priorities for partnerships, risk assessments and systemic action
An internal memo from CISA’s acting chief instructs senior leaders to keep the new priorities in mind with every choice they make.
OffSec Celebrates 20 Years of Practitioner-Built Training From the Creators of Kali Linux and OSCP
You know Kali. You know OSCP. Meet the rest of OffSec as the company brings its hands-on approach to entire cyber teams.
Microsoft Cloud Outage Hits Outlook, Teams, Copilot and AI Services
A Microsoft outage disrupted Outlook, Teams and Copilot, also breaking OpenAI and Anthropic connectors to Microsoft 365 accounts. Microsoft 365, Outlook…
North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure
The DOJ seized over $1.2 billion from North Korea ‘s Binance theft, and says the same hackers are targeting open-source developers The U.S. Department of…
No Login Needed: Over 35,000 Grok Apps Were Publicly Accessible
Researchers found over 35,000 Grok apps accessible without login, including some exposing corporate files, patient records and employee credentials.
5th EMPACT Hackathon leads to the detection of 51 potential victims
An international operation involving 40 experts and investigators from 20 countries has identified 51 potential victims of human trafficking, as well as…
Lego marketplace BrickLink in pieces after ‘unusual activity’ takes it offline for almost a week
Lego fans demand answers as outage approaches a week with no confirmed cause
New N-able “4EverAble2Shell” zero-day exploited hours after PoC released
Hackers are actively exploiting a newly disclosed N-able N-central zero-day vulnerability dubbed “4EverAble2Shell” to compromise servers and deploy…