The BYOD ransomware group has claimed to have locked the university’s databases and stolen sensitive data from its systems
5th EMPACT Hackathon leads to the detection of 51 potential victims
An international operation involving 40 experts and investigators from 20 countries has identified 51 potential victims of human trafficking, as well as…
IT Security News Roundup: 2026-11-10 Morning
IT Security News: Morning roundup, 2026-11-10 Summary The most pressing threads in this window were actively exploited flaws and state-linked operations. Iran-linked sabotage of French retail refrigeration, a Russia-aligned Turla campaign against government Exchange servers, and North Korean laundering of…
Google fixes the eighth actively exploited Chrome zero-day of 2026
Google patched nine Chrome flaws, including a V8 vulnerability tracked as CVE-2026-125350, that attackers have been actively exploiting in the wild.…
Finite State Raises $27 Million to Help Device Makers Fight ‘Vulnpocalypse’ with AI-Powered Product Security
Columbus, Ohio, United States, 10th November 2026, CyberNewswire
Best Privacy Browsers in 2026: Brave, Firefox, Tor, and More Compared
Brave, Firefox, Tor, and other privacy browsers take different approaches to tracking, fingerprinting, and anonymity. Here’s how seven options compare and…
Hackers Use 1,438 Fake FOFA Accounts to Steal OpenAI and DeepSeek API Keys Across the Internet
A threat actor has built an automated system that registers fake accounts on the FOFA search engine, scans the internet for leaked AI keys, and tests them…
North Korean Hackers Target Drone Technology and Software Supply Chains in New Cyberespionage Campaigns
North Korea-aligned hackers have renewed attacks on drone technology companies while expanding operations against software supply chains. Together, these…
Turla hackers use new Cereal malware to spy on govt Exchange servers
The Russian state-backed threat group Turla has been using a new malicious toolset called ‘Cereal’ to intercept emails on Microsoft Exchange servers at…
Red Flags to Watch for When Choosing Between AI Pentesting Vendors
AI pentesting has gone from experimental to crowded in about a year. It feels like… Red Flags to Watch for When Choosing Between AI Pentesting Vendors on…
Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers
The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal…
France Blames Iran for Supermarket Fridge Hack, Requests International Arrest Warrants
The French authorities have tied the cyber-attack targeting supermarket fridges to Iran’s Islamic Revolutionary Guard Corps
Anthropic Launches Claude Mythos 5.2, Scoring 76.3% on Cybersecurity Benchmark to Identify 0-Day Flaws
Anthropic has launched Claude Mythos 5.2, its latest AI model for cybersecurity engineering, reporting a 76.3% score on CyScenarioBench. Released on…
Hackers now exploit critical Barracuda ESG flaws to gain root access
Cybersecurity company Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway (ESG) vulnerabilities…
Web Shell Detection Beyond IIS: What Changes When the Server Runs Node?
You learned web shell detection on Microsoft Internet Information Services (IIS), and have relied on… Web Shell Detection Beyond IIS: What Changes When…
Hackers Steal GitHub Tokens Through Malicious VS Code Extension That Remained Available for 18 Minutes
A poisoned version of the popular Nx Console extension for Visual Studio Code stayed on the official VS Code Marketplace for only about 18 minutes. That…
Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities
An iMessage flaw could let a remote attacker join a group chat and receive its messages, Apple said yesterday, and it released updates to fix it. The…
France Blames Iranian Hackers for Hijacking Refrigeration Systems at 700 Supermarkets via Remote Defrost Controls
France has blamed Iran’s Islamic Revolutionary Guard Corps for a cyberattack that disrupted refrigeration at around 700 supermarket sites. During the…
IT Security News Hourly Summary 2026-11-10 12h : 14 posts
14 posts published in the last hour 10:34SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution 10:33Panic over cloud capacity is out of hand 10:33France Blames Iran For Attacks On Hundreds Of Supermarkets 10:33Turla’s Cereal malware turns…
SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution
Four flaws that attackers could exploit without logging in were fixed today as part of SAP’s monthly Security Patch Day—the vendor rates all four 10.0,…
Panic over cloud capacity is out of hand
I read the recent piece about AWS cloud capacity being “largely sold out” through 2027 , and my first reaction was fairly simple: Well, that’s that. I…
France Blames Iran For Attacks On Hundreds Of Supermarkets
French government says supermarket fridge hacks carried out by cyber unit linked to Iran’s Islamic Revolutionary Guard Corps
Turla’s Cereal malware turns victims’ Exchange servers into spy hubs
Russia-aligned group Turla planted a modular .NET toolset on Microsoft Exchange servers at two government organizations, one in Kazakhstan and one in…
Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments
Nicknamed “Turla’s Cereal,” the tools target Microsoft Exchange servers and lack many obvious indicators of compromise or malicious telemetry, per a new…