IT Security News: Afternoon roundup, 2026-11-08
Summary
This period is marked by significant financial risks, with major breaches and fraudulent raids highlighting the vulnerability of third-party service providers. Artificial intelligence continues to emerge as a dual-edged sword, appearing in both defensive funding and offensive research. For the reader, these stories underscore the critical need for rigorous supply chain security and the rapid evolution of infrastructure defense.
- Japanese manufacturer Iris Ohyama reported that a breach of a third-party cloud service may have exposed the personal data of 7.7 million customers.
- Honeypot data reveals an increase in exploitation attempts targeting the "Sshole" vulnerability (CVE-2026-123158) in SSH services.
- The Reserve Bank of India is enhancing financial stability by investing in sovereign Tier IV data centers to protect critical national banking infrastructure.
- Mullvad has discontinued its free public encrypted DNS service, advising users to migrate to alternatives like Quad9.
- Barracuda released patches for two vulnerabilities in its Email Security Gateway that could allow unauthenticated attackers to gain root access.
- The latest Security Affairs AI newsletter explores how AI agents are accelerating both offensive hacking operations and defensive capabilities.
- Authorities in Bogotá are investigating if a public health agency's email was compromised or spoofed to send bomb threats to European airports.
- Pierluigi Paganini's weekly newsletter provides an international roundup covering AI hacking tools and South Korean bank breaches.
- The Security Affairs Malware newsletter highlights new threats, including an APT using NetamLoader to target Asian government operating systems.
- Brava Security has launched with $15 million in funding for an AI platform that simulates attack telemetry to identify enterprise defense gaps.
- A case study on AT&T reveals how a bribed retail employee enabled a SIM swapping attack, prompting updated FCC security rules.
- Quantum physics researchers discovered a limit on electron tracking that could lead to electronics operating 100,000 times faster than current technology.
- Crédit Mutuel Arkéa suffered a massive loss of up to $133 million after attackers exploited a third-party provider to conduct fraudulent transactions.
Iris Ohyama data cloud breach exposes info of 7.7 million customers
Scans for Sshole Vulnerability (CVE-2026-123158), (Sun, Nov 8th)
Data Sovereignty Is Essential for India’s Digital Infrastructure, Says RBI Governor
Mullvad shuts down its public encrypted DNS service: switch to Quad9 or another resolver now
Barracuda Patches Two Security Flaws That Could Let Attackers Take Over Email Security Gateways
Bogotá Investigates Possible Health Agency Email Compromise Linked to European Airport Bomb Hoax
Security Affairs newsletter Round 603 by Pierluigi Paganini – INTERNATIONAL EDITION
Brava Security Emerges From Stealth With $15 Million in Funding
A hidden limit of space and time could unlock electronics 100,000 times faster
https://www.itsecuritynews.info/attackers-exploit-third-party-provider-to-raid-french-bank-credit-mutuel-arkea/
Summaries written with AI from the linked source articles.
Sources in this roundup
| Security Affairs |
|
4 article(s) |
| CySecurity News – Latest Information Security and Hacking Incidents |
|
3 article(s) |
| BleepingComputer |
|
1 article(s) |
| Cybersecurity News: Threats, Vulnerabilities & Privacy Updates – gHacks |
|
1 article(s) |
| Darknet – Hacking Tools, Hacker News & Cyber Security |
|
1 article(s) |
| Hacking News — ScienceDaily |
|
1 article(s) |
| SANS Internet Storm Center, InfoCON: green |
|
1 article(s) |
| securityweek |
|
1 article(s) |
Most-mentioned keywords
| security |
|
7 mention(s) |
| affairs |
|
3 mention(s) |
| newsletter |
|
3 mention(s) |
| round |
|
3 mention(s) |
| attackers |
|
2 mention(s) |
| data |
|
2 mention(s) |
|
|
2 mention(s) | |
| million |
|
2 mention(s) |
Sources
- Iris Ohyama data cloud breach exposes info of 7.7 million customers
- Scans for Sshole Vulnerability (CVE-2026-123158), (Sun, Nov 8th)
- Data Sovereignty Is Essential for India's Digital Infrastructure, Says RBI Governor
- Mullvad shuts down its public encrypted DNS service: switch to Quad9 or another resolver now
- Barracuda Patches Two Security Flaws That Could Let Attackers Take Over Email Security Gateways
- SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 7
- Bogotá Investigates Possible Health Agency Email Compromise Linked to European Airport Bomb Hoax
- Security Affairs newsletter Round 603 by Pierluigi Paganini – INTERNATIONAL EDITION
- SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 122
- Brava Security Emerges From Stealth With $15 Million in Funding
- SIM Swapping – How a Bribe Bypassed AT&T’s Security
- A hidden limit of space and time could unlock electronics 100,000 times faster
- Attackers Exploit Third-Party Provider to Raid French Bank Crédit Mutuel Arkéa