The four-week project hints that AI could make formal verification far more practical.
Self-hosted Claude Managed Agents keeps agent credentials in your environment
Anthropic has released a self-hosted version of Claude Managed Agents. Companies can run the agent harness, sandboxes, credentials, and session history in…
Remus malware claims Gmail access even after you change your password
Developers of the infostealer Remus claim their malware can retain access to a victim’s Gmail even after a password reset.
France blames Iran for fridge hacks, Binance breach doubts, Ukraine crypto scam arrests
France turns up the heat on Iran over fridge hacks…
AMD Mext: AI-powered DRAM optimization for Epyc
AMD is rolling out Mext, an AI-based memory management system that allows enterprises to replace up to half their server DRAM with flash storage while…
Australia Moves to Tighten AI Oversight After OpenAI Security Incident
Australia backs 18 AI safety recommendations after an OpenAI security incident, raising questions about incident reporting, developer accountability, and…
Software Samaritan revamps borked Indian certs to block smart TV ads
A little tinkering can black hole obnoxious Samsung TV ads and some tracking, until a firmware fix ruins the fun
ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories
A search result isn’t always safe. An access request isn’t always harmless. And a familiar account doesn’t always mean a familiar person is using it.…
Google open-sources XLA Serving Engine for ML inference
Google has released XSE (XLA Serving Engine) as open-source software, providing a C++ runtime environment for deploying machine learning models without…
New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access
Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The…
Android 17 QPR2 Rolls Out Early With Critical Security Fixes
Android 17 QPR2 brings critical security fixes to Pixel devices. Check supported models, November patch levels, and steps to verify update installation.
N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits
N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice…
UK, France release guidelines for commercial hacking firms
The United Kingdom and France have jointly published guidelines for the commercial cyber intrusion capabilities (CCIC) industry, targeting companies that…
N-able releases security hotfixes for zero-day vulnerabilities
N-able released hotfixes to address zero-day bugs affecting its N-central remote monitoring and management (RMM) platform, which were publicly disclosed…
Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026
Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild. The…
Security Flaws Across UK Government Sites Exposed ‘God-Tier’ Information
A researcher’s trawl through publicly available code found private information was at risk across multiple departments.
Europol Takes Down 235 Servers and 257 Domains Linked to Gootloader, CastleRAT, and StealC Malware
Europol and international partners have disrupted infrastructure linked to Gootloader, CastleRAT, and StealC, targeting malware services that support…
Field Intelligence #5: Scareware at scale. Investment scams built on AI platforms.
The mobile scareware redirector we have tracked since March now has a name: ZoidWays.
SEGA Newsletter Breach Exposes 2.2 Million Email Addresses
SEGA’s newsletter vendor breach exposed 2.2 million email-address records. Learn what was affected and what security teams should check with suppliers.
Criminal IP Launches New TI Feed App on Splunkbase for Automated Threat Detection
Torrance, USA, 11th November 2026, CyberNewswire
35K+ Grok-Built Apps Exposed Online
A security audit by Claroc has revealed that more than 35,000 applications built using the Grok AI platform were left publicly accessible without any…
New iOS Exploit Could Let Malicious Apps Access Other Apps’ Files
Binance warns that an iOS sandbox bypass could expose files from other apps. Learn what the worse_query exploit demonstrates and how users can reduce…
CVE-2026-125350: Chrome XML Zero-Day Actively Exploited
Google has released an emergency security update for Chrome to address CVE-2026-125350, a high-severity use-after-free vulnerability in XML processing…
IT Security News Hourly Summary 2026-11-12 19h : 36 posts
36 posts published in the last hour 17:34AWS Security Patch SSRF in MCP Gateway Registry 17:34TinstaPorn Android Malware Poses as Casino App to Collect User Data 17:34Open code isn’t the problem: experts on the “god-tier” flaws exposed across UK government…