IT Security News: Evening roundup, 2026-11-07
Summary
This period is marked by the dual nature of artificial intelligence, which is appearing both as a potent tool for financial cyberattacks and a source of massive data exposure. Alongside AI risks, a surge in critical infrastructure vulnerabilities and strict new supply chain regulations highlight an intensifying battle over hardware and software integrity. For the reader, these trends underscore the urgent need for rigorous patch management and a cautious approach to AI integration.
- Hunt.io identified AI-powered tools and exposed servers used by ARTEX to breach seven South Korean financial institutions, compromising the personal and financial data of thousands.
- IDC discusses how software vendors can leverage AI to optimize pricing and consumption tracking across diverse product portfolios to increase revenue.
- Binarly discovered that a June patch from Zyxel failed to fix a flaw in GS1900 switches, leaving nearly 1,000 devices vulnerable to attacks.
- The FCC has begun blocking consumer devices containing HiSilicon chips due to national security risks, while granting a one-year reprieve to Intel for its factory robots.
- Honeypot data reveals ongoing vulnerability scans targeting older Cisco IOS systems, likely attempting to exploit CVE-2023-20198.
- The "SSHole" flaw (CVE-2026-123158) allows unauthenticated root access to certain OpenSSH configurations on Alpine Linux and is already being exploited in the wild.
- An unsecured Azure storage bucket belonging to AI aggregator 302.ai leaked over 18 million files, including private user conversations and confidential business data.
- The latest ThreatsDay report highlights a variety of incidents, including an Apache OFBiz RCE and a DreamHost breach, emphasizing the danger of stolen logins.
Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches
One Product Isn’t the Problem: Monetizing an AI Portfolio Without Confusing Your Customers
FCC Starts Blocking Devices for What’s Inside Them, Then Gives Intel a Pass
Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers, (Thu, Nov 5th)
Over 18 Million Files Leaked in AI Aggregator Breach, Raising Privacy Concerns
https://www.itsecuritynews.info/threatsday-apache-ofbiz-rce-dreamhost-breach-defi-site-hijacks-17-more-stories-2/
Summaries written with AI from the linked source articles.
Sources in this roundup
| CySecurity News – Latest Information Security and Hacking Incidents |
|
3 article(s) |
| Security Affairs |
|
2 article(s) |
| SANS Internet Storm Center, InfoCON: green |
|
1 article(s) |
| The Hacker News |
|
1 article(s) |
| www.infosecurity-magazine.com |
|
1 article(s) |
Most-mentioned keywords
| breach |
|
2 mention(s) |
| flaw |
|
2 mention(s) |
| inside |
|
2 mention(s) |
| vulnerability |
|
2 mention(s) |
| aggregator |
|
1 mention(s) |
| apache |
|
1 mention(s) |
| artex |
|
1 mention(s) |
| attacks |
|
1 mention(s) |
Sources
- Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches
- One Product Isn’t the Problem: Monetizing an AI Portfolio Without Confusing Your Customers
- Zyxel Switch Patch Missed Flaw Behind Wave of Attacks
- FCC Starts Blocking Devices for What's Inside Them, Then Gives Intel a Pass
- Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers, (Thu, Nov 5th)
- Hackers Exploit OpenSSH SSHole Flaw Within Hours
- Over 18 Million Files Leaked in AI Aggregator Breach, Raising Privacy Concerns
- ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories