Researchers warn the platform is being abused to gain remote access and install malicious toolkits.
SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack Paths
The ongoing campaign targeting ConnectWise ScreenConnect deployments involves the exploitation of a now-patched critical security flaw in the remote…
Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand
We break down the Citrus Ransomware group’s attacks: the attackers’ TTPs and tooling, including VLESS traffic tunneling and LLM use, plus their links to…
Inside the loop: Five AI attack frameworks that never ask permission
Five agentic offensive frameworks act in bursts of two to 25 seconds, and none enforces authorization in code. What ARTEX, CyberStrikeAI, Cairn, PentAGI,…
Cloud reports measure the wrong thing
Flexera’s 2026 State of the Cloud Report agrees with many other cloud reports these days: Cloud is more strategic, cloud is more complex, AI makes…
Microsoft Teams AI Phishing Detection: Rollout and Deepfake Warnings
Microsoft Teams is introducing AI phishing detection for external chats, while separate deepfake detection will require third-party providers and…
When AI Finds the Bugs: Rethinking Exposure in a Flood of Vulnerabilities
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: When AI Finds the Bugs: Rethinking Exposure in a Flood of Vulnerabilities
Hong Kong Sogo data breach puts personal information of 820,000 members at risk
Danny Mok reports: Major Hong Kong retailers Sogo and Chow Sang Sang have disclosed separate data breaches after unauthorised parties accessed their…
German parliament passes law giving spy agencies hacking, sabotage powers
In the biggest overhaul of the country’s spy laws of the postwar era, the Bundestag approved the bill by 308 votes to 190 — with 71 abstentions — months…
AI Agents Promise Convenience, But Are We Giving Them Too Much Control?
AI agents are quickly becoming part of everyday life, moving beyond answering questions and generating content to carrying out tasks on users’ behalf.…
CYBER BRIEFING | NOVEMBER 12, 2026
GPUStack 9.8 flaw exploited, n0n’s $283.7M spree, Notion AI leak.
NCSC scheme will help critical organisations test their cyber defences
New NCSC Cyber Adversary Simulation scheme will help critical organisations strengthen their resilience through rigorous, real-world testing by trusted…
Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts
This is Fireworks’ second data breach in as many months.
Police dismantle Gootloader, CastleRAT, StealC malware infrastructure
Europol and law enforcement partners from nine countries have seized hundreds of servers and domains used by the Gootloader, CastleRAT, and StealC malware…
354 dark web vendors and buyers arrested in Europol-coordinated global crackdown
Europol, in collaboration with law enforcement agencies from 14 countries across the globe, have successfully identified vendors and buyers from major…
UK Backs North Sea Data Cable Plan Amid Heightened Risks
UK government backs proposals for new data cable linking Shetland Islands and Norway, amid increased critical infrastructure threats
Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors
Our analysis of how attackers used the open-source Cairn AI agent framework to autonomously breach semiconductor, defense and civic targets.
WhiteArmor gang claims responsibility for latest cyber attack on shipping giant Maersk
Shipping giant Maersk has confirmed that one of its systems was broken into by hackers who have stolen data. The WhiteArmor gang has claimed responsbility…
PSA: Critical Apache HTTP/2 Vulnerability: What WordPress Site Owners Should Know
Apache has released a fix for a critical vulnerability in the HTTP/2 module of Apache HTTP Server. The issue, CVE-2026-119618, can lead to remote code…
MDR Pricing: Comparing Asset-Based and Ingestion-Based Costs
When comparing MDR pricing, it helps to understand what the same annual budget would buy from each provider. Two proposals with similar prices may give…
Introducing AI Kill Switch: Taking Control When AI Agents Go Rogue
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Introducing AI Kill Switch: Taking Control When AI Agents Go Rogue
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper
Vulnerable Check Point Security Gateway instances have been targeted in PHP2Shell attacks that deployed data-wiping malware on VMware ESXi hosts. […]
27 arrests and 248 potential victims identified in action week against labour exploitation
Europol, the European Labour Authority (ELA), and 34 participating countries today announced the results of an action week targeting human trafficking for…
Apify rotates API tokens, prompts 2FA resets after breach
Apify has rotated critical internal secrets and revoked some third-party OAuth connections after detecting unauthorized access to its internal systems.…