In November 2026, Europol and international law enforcement partners dismantled infrastructure supporting several malware operations . Among them was…
Hackers Exploit Check Point Firewall Flaws to Gain Root Access and Deploy Wiper Malware on VMware ESXi
Hackers have chained Check Point firewall vulnerabilities to gain root access, plant backdoors, and deploy destructive malware on a VMware ESXi host. The…
Stolen webcam clips of 900+ victims feed North Korea’s $400 million fake Zoom scheme
North Korean state hackers have stolen more than $400 million in cryptocurrency over the past 18 months by pulling targets into fake Zoom and Teams calls…
IT Security News Hourly Summary 2026-11-13 08h : 11 posts
11 posts published in the last hour 06:32New ArcticRAT Malware Uses Fake VPN Connections to Evade Google Play Protect During Installation 06:32Suspected North Korean IT workers reached onboarding at companies with open data 06:32ISC Stormcast For Thursday, November 12th, 2026…
New ArcticRAT Malware Uses Fake VPN Connections to Evade Google Play Protect During Installation
ArcticRAT, an Android remote access trojan (RAT). It started as spyware aimed at users of 11 cryptocurrency apps and has grown into a modular, AI-assisted…
Suspected North Korean IT workers reached onboarding at companies with open data
Material Security followed suspected North Korean fake IT workers through the hiring pipelines of organizations it monitors and counted 27 personas that…
ISC Stormcast For Thursday, November 12th, 2026 https://isc.sans.edu/podcastdetail/10176, (Thu, Nov 12th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Thursday, November 12th, 2026 https://isc.sans.edu/podcastdetail/10176,…
Europol Dismantles Three Major Malware Networks, Seizes 235 Servers and 6.4 Million Stolen Records
Europol and international partners have disrupted infrastructure supporting Gootloader, CastleRAT, and StealC in the latest Operation Endgame action,…
How attackers turned a Teams meeting booking into a device code phishing trap
Attackers used a fake Microsoft Teams meeting scheduler to trick an employee at a construction company into approving a device code sign-in. They got a…
Your pinned MCP server may not be as pinned as you think
An MCP server configured to run one fixed release on an administrator’s workstation ran with 15 different sets of dependencies over five weeks, with its…
Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2
N-able on Thursday said it’s taking additional precautions in the wake of public disclosure of a new set of flaws tracked as 4EverAble2Shell and…
Chinese AI Project Scouts Spies in Taiwan Chip Industry
The CCP built a Big Data system to scrape reams of information and learn about individuals abroad, to potentially target and exploit them. Think Alice…
Smashing Security podcast #492: How hackers turned Russian cars into pumpkins
You’re driving your new Chinese SUV when the dashboard goes dark. Ten minutes later, your phone rings. A stranger says they’ve got the digital key to your…
Russian Hackers Exploit Government Email Infrastructure in Romania and Kazakhstan
Russian cyberespionage group Turla has deployed a previously undocumented malware framework against government organizations in Romania and Kazakhstan,…
IT Security News Hourly Summary 2026-11-13 07h : 6 posts
6 posts published in the last hour 05:32AWS Warns of MCP Gateway Registry Vulnerability Allowing Attackers to Access Internal Network Services 05:31Jensen Huang Resigns as NVIDIA CEO | What Happens Next? 05:31Digital sovereignty leaves enterprises chasing their own audit trails…
AWS Warns of MCP Gateway Registry Vulnerability Allowing Attackers to Access Internal Network Services
AWS has disclosed a server-side request forgery (SSRF) flaw in mcp-gateway-registry, an open-source registry and gateway for Model Context Protocol (MCP)…
Jensen Huang Resigns as NVIDIA CEO | What Happens Next?
Jensen Huang has resigned as NVIDIA CEO, and CFO Colette Kress has been named interim chief executive. What led to the leadership change—and what comes…
Digital sovereignty leaves enterprises chasing their own audit trails
94% of surveyed enterprises experienced at least one digital sovereignty challenge in the past three years, according to IBM’s Digital Sovereignty Index.…
Massive Microsoft 365 Outage Disrupts Outlook, Teams, Copilot, and Defender XDR Worldwide
A major Microsoft 365 outage disrupted cloud connectivity on November 12. It continued into November 13, 2026, as Microsoft worked to restore the affected…
IT Security News Hourly Summary 2026-11-13 06h : 4 posts
4 posts published in the last hour 04:31Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise 04:02Baker Tilly notifies clients of data breach at third-party provider 04:02Macfinger ClickFix campaign sends DownTheDRAIN infostealer for macOS, (Fri, Nov 13th) 04:00IT Security…
Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise
The package adds public-private cyber responders, an AI-focused team run by the economic ministry, and more leeway to use the government’s new active…
Baker Tilly notifies clients of data breach at third-party provider
The Baker Tilly Advisory Group is notifying clients that a data breach has compromised certain personal information about them and their dependents. […]
Macfinger ClickFix campaign sends DownTheDRAIN infostealer for macOS, (Fri, Nov 13th)
Introduction
IT Security News Hourly Summary 2026-11-13 05h : 6 posts
6 posts published in the last hour 03:32AntiFox AI Pentest Tool Linked to AWS Production Secret Theft 03:32Risky Bulletin: Chinese APT exploits SS7, Diameter to spy on targets 03:32Massive Microsoft 365 Outage Impacts Exchange Online, Teams, SharePoint, Copilot, and Defender…