IT Security News Roundup: 2026-11-05 Afternoon

IT Security News: Afternoon roundup, 2026-11-05

Summary

This afternoon's security landscape is dominated by alarming attacks on critical infrastructure, specifically targeting European refrigeration systems to disrupt food and medical supplies. A recurring theme is the exploitation of trust, ranging from the weaponization of legitimate identity flows and proxy services to the use of AI in sophisticated banking breaches. These stories underscore a shift toward physical-world impacts and the critical need for tighter governance over AI and identity verification.

1. Analysis of the eMudhra incident reveals how weak keys created downstream vulnerabilities and provides necessary mitigation steps.
2. French authorities are investigating a cyberattack on the nation's blood supply, appearing to be part of a wider trend of attacks on refrigeration systems.
3. A tobacco company accidentally exposed secret recipes on a public file share, later denying the data's authenticity before removing it.
4. Research shows that White House network addresses were used as exit points by 28 different residential proxy services.
5. Yubico introduced YubiID to fix the identity-verification gap during credential enrollment, alongside a post-quantum YubiKey beta.
6. An Elastic Security Labs report explains how attackers are weaponizing trust by abusing AI assistants, npm supply chains, and management tools.
7. A retrospective on early web vulnerabilities highlights how outdated CGI-bin email scripts could lead to environment variable leaks and code execution.
8. Industry insights emphasize that cyber resilience is impossible without leadership understanding and implementing proper AI governance.
9. The Royal Cornwall Hospitals Trust admitted a data breach caused by an Excel spreadsheet, exposing health details of over 7,700 staff members.
10. Microsoft reported a spike in email phishing during Q3 2026, noting a recovery in CAPTCHA-gated phishing and business-service spoofing.
11. Russian hosting provider Beget is working to restore services after a massive attack wiped data across its cloud infrastructure.
12. A supplier for the French National Blood Service suffered an attack that dangerously raised blood storage temperatures to 110°C.
13. Experts argue higher education needs new security playbooks focusing on Zero Trust microsegmentation to combat ransomware and AI risks.
14. Attackers are actively targeting a critical remote code execution vulnerability (CVE-2026-119977) in WordPress core during the upgrade process.
15. A flaw in HYFLOCK ransomware allows some victims to recover data because only the first 4KB of larger files are encrypted.
16. Hackers disrupted European supermarkets by altering refrigeration settings, resulting in significant food waste.
17. A critical OpenSSH flaw in Alpine Linux servers could allow attackers to bypass password authentication for certain accounts.
18. The group "Gorbag" is targeting Ukrainian courts and military aid hubs to monitor war crimes investigations and weapon logistics.
19. Layer3 Intel discovered that White House network IPs were available for rent through numerous residential proxy services.
20. Specops Software highlights how attackers impersonate employees at IT service desks to bypass MFA through social engineering.
21. The group SlippyNunchucks is using popular Sogou Input Method keyboard software to deploy the DarkVigil backdoor across Asia.
22. CISA has warned federal agencies that a high-severity WordPress RCE vulnerability is being actively exploited in the wild.
23. Exposed servers belonging to ARTEX hackers revealed the specific AI models and scripts used to breach South Korean banks.
24. Binarly found that a June patch for Zyxel GS1900 switches failed to block the exploit used in a wave of attacks.
25. Google released Chrome 157 to fix 213 security issues, including seven critical flaws that require manual verification of the update.

Summaries written with AI from the linked source articles.

Sources in this roundup

Most-mentioned keywords

Sources

1. Keys to the Kingdom: The eMudhra Weak-Key Compromise
2. French authorities probe cyberattack targeting nation’s blood supply
3. Tobacco company got smoked by leaving secret recipes on a file share
4. Residential Proxy Traffic Traced to White House Network
5. Phishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification Gap
6. When trust becomes the payload: Inside the threats, etc quarterly report
7. The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)
8. Cyber Resilience Starts with AI Governance
9. UK: Royal Cornwall Hospitals Trust data breach exposed health details of 7,715 staff
10. Email threat landscape: Q3 2026 trends and insights
11. Cyberattack wipes cloud data at major Russian hosting provider Beget
12. France Blood Service Cyber-Attack Sends Blood Storage Temperatures to 110°C
13. Why Higher Ed Needs a New Playbook for Ransomware, AI Risk, and Compliance
14. Attackers Actively Probing for Upgrade-Window RCE Vulnerability in WordPress Core
15. HYFLOCK Ransomware Encrypts Only First 4KB of Larger Files, Leaves Parts of Victims’ Files Accessible
16. Hackers Alter Refrigeration Settings, Forcing European Stores to Discard Food
17. OpenSSH Flaw Could Let Attackers Bypass Password Authentication on Alpine Linux Servers
18. Russia-Aligned Hackers Target Ukraine's War Crimes Courts and Military Aid Networks
19. Researchers Discover White House Network IP Available for Rent Through 28 Proxy Services
20. Closing the Identity Gap at the Service Desk
21. Hackers Turn Popular Chinese Keyboard Software Into a Backdoor for Cyberespionage Attacks
22. CISA flags WordPress RCE flaw as actively exploited in attacks
23. ARTEX Hackers Expose Their Own Servers, Revealing AI Tools Behind South Korean Bank Breaches
24. Zyxel Switch Patch Missed Flaw Behind Wave of Attacks
25. Chrome 157 fixes 213 security issues, including 7 critical flaws