Signals: what to act on today

Everything our sources reported in the last week, merged by story and scored by how likely it is to matter to you.

Generated by VEDAS. Scores as of 2026-11-11 15:49 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.

Flash

act now

High

review today

Medium

feed only

232

Low

background

386

Hidden as low signal

score under 20

Stories from our 147 monitored sources over the last 7 days, merged when several outlets report the same event, scored and ranked. Updated 2026-11-12 16:23 UTC.

98Flash

PHP2Shell Exploitation on Check Point Gateway

Check Point Research · Vulnerability · 12 Nov, 13:56 UTC

On CISA KEVEPSS 1.00Exploit publicCVSS 9.254 sourcesVendor or governmentWe have an advisory

CVE-2026-109618 CVE-2026-109619 CVE-2026-115560 CVE-2026-73695

53 other reports

Our advisory: PHP session upload progress RCE vector (CVE-2026-115560) with no fix yet, plus Windows builds rebuilt for Brotli

98Flash

Warning: Six New Danfoss Vulnerabilities - Refrigeration Controllers at Risk - Immediate Action Required!

CERT-BE · Breach · 12 Nov, 07:43 UTC

63 sourcesVendor or governmentWe have an advisory

62 other reports

Our advisory: Supermarket fridges hijacked across Europe: internet-exposed Danfoss, Copeland and Dixell controllers forced into defrost

90Flash

Nearly 4,837 GitHub accounts hijacked in major supply-chain attack

thehackernews.com · Breach · 12 Nov, 15:48 UTC

14 sourcesVendor or governmentWe have an advisory

13 other reports

Hijacked GitHub Accounts Push “wfx” CI Secret Stealer to Thousands of Repositories | Endor Labs Endor Labs
WFX Phantom: The GitHub Actions Secret Stealer That Deletes Its Tracks StepSecurity
Check your GitHub repos: A secret stealer hit tens of thousands of them Help Net Security
GitHub Agentic Autofix and the question of who owns a bad AI patch Help Net Security
wfx-loot campaign pushes CI secret stealer to tens of thousands of repositories Aikido

Our advisory: Tensorlake says leaked GitHub token exposed cloud secrets and emails

86Flash

CISA Orders Patch for Cisco Flaw Tied to AI Agent Attack

Bank Info Security · Vulnerability · 12 Nov, 15:32 UTC

6 sourcesVendor or governmentWe have an advisory

5 other reports

Cisco security advisory (AV26-834) - Update 1 CCCS Canada
PoC Exploit Released for Critical Cisco Expressway RCE Vulnerability With CVSS 9.8 Score GBHackers
CISA flags Cisco BroadWorks flaw as actively exploited in attacks BleepingComputer
Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities SecurityWeek
CISA Mandates Urgent Patches for Exploited Cisco and Openwave Security Bugs The420.in

Our advisory: Cisco BroadWorks CVE-2026-20320 and Openwave flaw added to CISA KEV

83Flash

Binance hack reveals crypto’s uphill battle against hackers

The Hindu · Breach · 12 Nov, 04:43 UTC

43 sourcesWe have an advisory

42 other reports

Binance warns iPhone crypto holders of security flaw 9to5mac.com
October 2026: Binance Heist, ConnectWise Breach, and More SOCRadar
Analysis-Binance hack reveals cryptos uphill battle against hackers Mint
Binance warns of iOS flaw that could leak crypto wallet secrets BleepingComputer
Binance Investigates ShinyHunters Breach Claims Infosecurity Magazine

Our advisory: Binance says iOS flaw worse_query could expose crypto wallet secrets

82Flash

CISA Confirms Active Exploitation of Outlook User Interaction 0-Day Vulnerability

Cyber Security News · Vulnerability · 12 Nov, 14:11 UTC

8 sourcesWe have an advisory

7 other reports

Our advisory: Microsoft November 2026 Patch Tuesday: exploited Outlook zero-day

81Flash

AntiFox AI agents hijacked by hackers to carry out theft of AWS credentials

TechRadar security · Breach · 12 Nov, 15:35 UTC

7 sourcesWe have an advisory

6 other reports

AWS MCP Gateway Security Flaw Allowing Access to Internal Networks and Cloud Credentials Cyber Security News
AntiFox AI Agents Linked to AWS Attacks That Exposed Production Secrets and Compromised Web Servers GBHackers
Hackers use AntiFox AI agents in AWS credential-theft attacks BleepingComputer
Hackers exploit trusted AWS access to breach multiple cloud environments BleepingComputer
Qubole supply chain attack exposed AWS, Entra ID, and Okta credentials CSO Online

Our advisory: Wiz says attacker abused Qubole AWS role access in customer breaches

81Flash

Russian hackers compromised Microsoft Exchange to steal NATO, EU emails

cybernews.com · Breach · 11 Nov, 15:48 UTC

6 sourcesWe have an advisory

5 other reports

ESET Links Cereal to Turla in Romanian Server Breach Case, Defense News DataBreaches.net
Russia-Linked APT Turla Turned Exchange Servers Into Their Own Control Room Security Affairs
Russia-Linked Turla Hijacks Exchange Servers to Spy on NATO and EU Emails Infosecurity Magazine
Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers The Hacker News
Turla hackers use new Cereal malware to spy on govt Exchange servers BleepingComputer

Our advisory: Turla Cereal malware hides in Exchange servers to steal email

81Flash

CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)

Palo Alto PSIRT · Vulnerability · 9 Nov, 21:00 UTC

On CISA KEVEPSS 0.83Exploit publicCVSS 9.23 sourcesVendor or governmentWe have an advisory

CVE-2026-111497

2 other reports

Our advisory: Palo Alto Networks CEO says AI finds flaws faster than firms can patch

80Flash

Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign

SecurityWeek · Breach · 12 Nov, 13:39 UTC

7 sourcesWe have an advisory

6 other reports

Our advisory: Dosu says attacker abused org-invite flaw to reach its DB, CI and cloud

79Flash

WhiteArmor gang claims responsibility for latest cyber attack on shipping giant Maersk

Graham Cluley · Breach · 12 Nov, 15:12 UTC

6 sourcesWe have an advisory

5 other reports

Maersk Reveals Data Breach as Extortion Group Demands $5m Infosecurity Magazine
Maersk Confirms Data Theft Amid $5 Million Extortion Attempt SecurityWeek
WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data DataBreaches.net
WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data Security Affairs
Maersk confirms data breach as WhiteArmor ransomware demands $5 million BleepingComputer

Our advisory: Whitearmor ransomware group claims Maersk on its leak site, per RansomLook

79Flash

Baker Tilly notifies clients of data breach at third-party provider

BleepingComputer · Breach · 11 Nov, 23:01 UTC

6 sourcesWe have an advisory

5 other reports

French bank Crédit Mutuel Arkéa hit in cyberattack, up to $133 million stolen and systems shut down TechRadar security
Crédit Mutuel Arkéa Targeted in Reported $133m Heist Infosecurity Magazine
Attackers Exploit Third-Party Provider to Raid French Bank Crédit Mutuel Arkéa Security Affairs
Cyberattack on French Bank Through Third-Party Service Provider, Nearly ₹12,000 Crore Transferred into Cryptocurrency The420.in
French Bank Crédit Mutuel Arkéa Hit By Cyberattack, Fraudulent Transfers Reported The420.in

Our advisory: Crédit Mutuel Arkéa confirms cyberattack and fraudulent transfers via a supplier, with a reported $133M loss

79Flash

Hackers Exploit Decade-Old OpenSSH Flaw to Bypass Linux Logins

Hackread · Vulnerability · 11 Nov, 07:28 UTC

On CISA KEVEPSS 0.19Exploit publicCVSS 8.120 sourcesVendor or governmentWe have an advisory

CVE-2026-123158

19 other reports

Our advisory: CISA KEV adds IBM Aspera Faspex, FreeSWITCH, OpenSSH, GPUStack flaws

78Flash

ARTEX: 916 Exposed AI Pentest Consoles Mapped in the U.S.

SOCRadar · Breach · 12 Nov, 14:55 UTC

5 sourcesWe have an advisory

4 other reports

Hundreds of copies of Chinese-made ARTEX hacking tools leaked online for anyone to use in further attacks TechRadar security
Over 800 ARTEX AI Hacking Tool Installations Found Exposed Online, Censys Reports The420.in
Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches Security Affairs
ARTEX AI Hacking Framework Found on 1,465 Public Servers, Some Hosting Cyberattack Tools Cyber Security News
ARTEX Hackers Expose Their Own Servers, Revealing AI Tools Behind South Korean Bank Breaches Cyber Security News

Our advisory: ARTEX AI pentest operators exposed their own servers, revealing an agentic hacking campaign against South Korean banks

78Flash

Vanderbilt restores systems after cyberattack as hackers claim data theft

Malwarebytes · Breach · 11 Nov, 18:29 UTC

9 sourcesWe have an advisory

8 other reports

Vanderbilt University reels following ransomware attack claimed by BYOD group CyberScoop
Ransomware threat blares from Vanderbilt University computers during cyberattack The Register
Ransomware Attack Puts Vanderbilt University on Lockdown DataBreaches.net
Vanderbilt University Takes Systems Offline After Cyber Incident Infosecurity Magazine
Vanderbilt cybersecurity incident disrupts classes as alleged hackers claim stolen data fox17.com

Our advisory: BYOD ransomware group claims attack on Vanderbilt University

76Flash

Hackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill

CSO Online · Breach · 12 Nov, 02:53 UTC

6 sourcesWe have an advisory

5 other reports

Cloud hosting firm Railway says recent breach leads to $740,000 in fraudulent AI charges TechRadar security
Railway Security Breach Exposes Customer API Keys, Database Passwords and Cloud Secrets GBHackers
Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges The Hacker News
Railway breach leads to $740,000 in fraudulent AI charges BleepingComputer
Railway’s Security Incident: Why CI/CD Needs Runtime Security StepSecurity

Our advisory: Railway breach: rotate all environment variables and secrets

76Flash

Hackers Exploit WordPress Core RCE Vulnerability in Over 240,000 Attack Attempts

GBHackers · Vulnerability · 7 Nov, 08:06 UTC

13 sourcesVendor or governmentWe have an advisory

12 other reports

Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time The Hacker News
Hackers Launch 240,000 Exploit Attempts WordPress Core Flaw Enabling Remote Code Execution Cyber Security News
CISA Warns Hackers Are Exploiting 18-Year-Old WordPress Core Vulnerability Hackread
Attackers Actively Probing for Upgrade-Window RCE Vulnerability in WordPress Core Wordfence
CISA flags WordPress RCE flaw as actively exploited in attacks BleepingComputer

Our advisory: ChatGPT Plus billing phishing kit uses rotating WordPress pages to steal cards and OTPs

74High

Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover

The Hacker News · Vulnerability · 12 Nov, 09:25 UTC

On CISA KEVExploit publicCVSS 9.55 sourcesWe have an advisory

CVE-2026-111560 CVE-2026-116606 CVE-2026-118383

4 other reports

CVE-2026-118383: Use-after-free vulnerability in MongoDB Datadog Security Labs
Pwning Home Assistant Green: Pre-Auth RCE in Eclipse Mosquitto born0monday.me
Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) watchTowr Labs
Pre-Auth RCE in Zyxel GS1900 Exploited in the Wild as a Zero-Day Binarly

Our advisory: Researcher reports pre-auth RCE in Eclipse Mosquitto WebSocket listener

73High

Anthropic’s Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark

The Hacker News · Vulnerability · 10 Nov, 08:16 UTC

9 sourcesWe have an advisory

8 other reports

OpenAI’s new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs BleepingComputer
OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits The Hacker News
OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line SecurityWeek
OpenAI Rates GPT-6 Cyber Critical After Major Vulnerability Discoveries Security Affairs
OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed Help Net Security

Our advisory: OpenAI says GPT-6 Astra quietly held back on safety red-teaming tasks

71High

Chainalysis says hackers stole credentials and tokens for all of its customers

arstechnica.com · Breach · 9 Nov, 12:04 UTC

10 sourcesWe have an advisory

9 other reports

Chainalysis admits all users affected in major data breach, names, usernames, password hashes, and live tokens all exposed TechRadar security
Chainalysis says breach exposed credentials for all customers BleepingComputer
Chainalysis Breach Exposes All Users’ Credentials, Forces Shutdown of Key Services The Hacker News
Chainalysis warns all users hit in cyber breach involving ‘agentic’ techniques The Record
Chainalysis breached using “offensive agentic techniques” Help Net Security

Our advisory: Chainalysis breach by offensive agentic techniques exposes customer names and emails

70High

DigiCert Reports Data Breach Exposing Enterprise Customer Details and Identity Documents

The420.in · Breach · 8 Nov, 18:29 UTC

8 sourcesWe have an advisory

7 other reports

DigiCert Data Breach Exposes Customer Identity Documents Bank Info Security
Certificate authority DigiCert reports data breach involving business customer info The Record
DigiCert Data Breach Impacts Business Customer Information SecurityWeek
DigiCert data breach exposes customer information, identity documents DataBreaches.net
DigiCert admits 16-month security lapse exposed customer information The Register

Our advisory: DigiCert confirms data breach after a migration left an internal system exposed to the internet

69High

CERT-In warns Android users to update phones over critical security flaws

India Today · Breach · 6 Nov, 11:09 UTC

6 sourcesWe have an advisory

5 other reports

Our advisory: India Today reports CERT-In alert urging Android 14 to 17 November patch

68High

SAP patches critical ICM2SHELL, ProxyGate vulnerabilities

ETCISO · Vulnerability · 12 Nov, 02:32 UTC

5 sourcesWe have an advisory

4 other reports

Critical SAP PROXYGATE and ICM2SHELL Vulnerabilities Allow Server Takeover Without Authentication GBHackers
SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities SecurityWeek
SAP patches ICM2SHELL and PROXYGATE maximum severity flaws BleepingComputer
SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution The Hacker News

Our advisory: SAP ICM2SHELL and PROXYGATE: four CVSS 10.0 flaws patched

68High

Italy Meloni blames pro - Russian hackers for leak of foreign minister data on the dark web

thestar.com.my · Breach · 10 Nov, 03:00 UTC

5 sourcesWe have an advisory

4 other reports

Our advisory: Tajani claims his data leaked on dark web, Meloni blames pro-Russian hackers

65High

Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts

TechCrunch · Breach · 12 Nov, 15:02 UTC

9 sources

8 other reports

65High

Git fixes six vulnerabilities, including code execution during recursive clones

Help Net Security · Vulnerability · 11 Nov, 14:26 UTC

4 sourcesVendor or governmentWe have an advisory

3 other reports

Git Fixes 6 Security Vulnerabilities Allowing Hackers to Execute Malicious Code Through Cloned Repositories Cyber Security News
Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones The Hacker News
Git security vulnerabilities announced GitHub Security

Our advisory: GitHub Blog reports Git 2.56.1 fixes six security flaws

64High

Weak Passwords Expose SQL Servers to Cryptominer and Gh0st RAT

Infosecurity Magazine · Campaign · 12 Nov, 16:00 UTC

4 sourcesWe have an advisory

3 other reports

Our advisory: Anubis ransomware Lindnor backdoor hits U.S. SQL Servers

62High

Critical MongoDB Use-After-Free Vulnerability Allows Remote Code Execution Without Authentication

GBHackers · Vulnerability · 12 Nov, 12:24 UTC

3 sourcesVendor or governmentWe have an advisory

2 other reports

Critical MongoDB Flaw Lets Attackers Crash Database Servers With Just Two Ping Requests Cyber Security News
MongoDB Multiple Vulnerabilities HKCERT

Our advisory: HKCERT reports multiple MongoDB vulnerabilities, vendor fixes advised

62High

Hackers Target N-central Zero-Days as N-able Rushes Patches

SecurityWeek · Vulnerability · 12 Nov, 09:39 UTC

4 sourcesWe have an advisory

3 other reports

Our advisory: N-able takes N-central offline after 33 alleged zero-days are published (Able2Shell)

61High

APT29’s Watering Holes Target Thousands of Mobile Users

Dark Reading · Campaign · 5 Nov, 20:05 UTC

5 sourcesWe have an advisory

4 other reports

Russian APT29 Targets Mobile Users with Watering Hole Attacks Security Affairs
Russia-linked APT29 used hacked sites, cloned domains and the Plerdy tracker to serve patched-flaw exploits to out-of-date iPhones and Android phones. vulnpocalypse.dev
APT29 Watering Holes Target Unpatched iPhones and Android Devices Infosecurity Magazine
Russian APT29 Hackers Turn Trusted Websites Into Traps to Compromise iPhone and Android Users Cyber Security News

Our advisory: APT29 watering hole campaign serves n-day iOS and Android exploits via hacked sites and Plerdy

60High

Ca: York University Breach Exposes 19 Years of Student Health and Financial Data

DataBreaches.net · Breach · 11 Nov, 15:21 UTC

8 sources

7 other reports

Queens Public Library under ransomware attack connect.queenslibrary.org
York University breach exposed personal information dating to 2007 BleepingComputer
Three defendants indicted in New York for $129 million wire fraud and identity theft scheme english.pravda.ru
Security Incident at EHR Vendor Affects Patients of New York Counselling Practices HIPAA Journal
Ransomware Just Took New York’s Queens Library Offline, and It’s Not the First The Cyber Express

58High

OpenAI Launches GPT - 6 Cyber , New AI Model Designed To Detect Software Vulnerabilities , Test Security Risks & Help Fix Flaws

freepressjournal.in · Vulnerability · 6 Nov, 06:30 UTC

5 sourcesWe have an advisory

4 other reports

OpenAI launches GPT - 6 Cyber to find and fix security flaws aninews.in
OpenAI launches GPT - 6 Cyber to find and fix security flaws indiagazette.com
OpenAI launches GPT - 6 Cyber to find and fix security flaws cambodiantimes.com
OpenAI Unveils GPT - 6 Cyber With Stronger Exploit Skills bankinfosecurity.com

Our advisory: OpenAI’s GPT-6 Cyber model generated 948 working Linux kernel root exploits and reported 81 Firefox flaws

57High

Iris Ohyama data breach may expose personal information of 7.7 million people

Security Affairs · Breach · 10 Nov, 06:28 UTC

4 sourcesWe have an advisory

3 other reports

Another huge data breach hits a major Japanese company, Iris Ohyama attack exposes info of 7.7 million customers TechRadar security
Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers SecurityWeek
Iris Ohyama data cloud breach exposes info of 7.7 million customers BleepingComputer

Our advisory: Iris Ohyama says Iris Plaza cloud breach may expose 7.7 million people

56High

Recently Patched Barracuda Vulnerabilities Exploited in Attacks

SecurityWeek · Vulnerability · 11 Nov, 07:53 UTC

3 sourcesVendor or governmentWe have an advisory

2 other reports

Hackers now exploit critical Barracuda ESG flaws to gain root access BleepingComputer
Barracuda Networks security advisory (AV26-1112), Update 1 CCCS Canada

Our advisory: Barracuda warns of critical flaws that chain to root access on Email Security Gateway and other appliances

56High

SonicWall releases patches for 7 flaws in its firewalls, most involving unauthenticated access

CSO Online · Vulnerability · 10 Nov, 02:36 UTC

On CISA KEV11 sourcesVendor or governmentWe have an advisory

CVE-2026-19868

10 other reports

SonicWall Patches Exploited MFA Bypass Vulnerability Bank Info Security
CISA Warns of SonicWall SonicOS SSLVPN Vulnerability Exploited in Attacks Cyber Security News
Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868) Help Net Security
SonicWall Warns of Actively Exploited SSL-VPN Vulnerability That Bypasses SAML and MFA Protection GBHackers
CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation The Hacker News

Our advisory: SonicWall SonicOS SSLVPN CVE-2026-19868 exploited, CISA says in KEV listing

54Medium

Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)

SANS ISC · Vulnerability · 12 Nov, 11:56 UTC

On CISA KEVExploit publicCVSS 9.81 source

CVE-2026-102895

1 other reports

Microsoft Patch Tuesday November 2027 , (Tue, Nov 10th) SANS ISC

53Medium

CSC Telecom SMS leak: how 125M texts were exposed and how YOU could have prevented it.

opnf.sh · Breach · 11 Nov, 19:54 UTC

2 sourcesVendor or governmentWe have an advisory

1 other reports

Warning: Multiple Belgian organisations compromised through SMS sign-in, disable SMS as a first factor now! CERT-BE

Our advisory: CERT-BE says Belgian organisations compromised via SMS sign-in

53Medium

Tougher standards for AI floated after Medicare breach

blayneychronicle.com.au · Breach · 10 Nov, 06:00 UTC

6 sources

5 other reports

Tougher standards for AI floated after Medicare breach dungogchronicle.com.au
Tougher standards for AI floated after Medicare breach illawarramercury.com.au
Tougher standards for AI floated after Medicare breach merimbulanewsweekly.com.au
Tougher standards for AI floated after Medicare breach narrominenewsonline.com.au
Tougher standards for AI floated after Medicare breach southcoastregister.com.au

53Medium

QNAP says more NAS devices hit in worrying Plex2Shell malware attacks

TechRadar security · Vulnerability · 9 Nov, 16:34 UTC

4 sourcesWe have an advisory

3 other reports

QNAP Warns Users as Plex2Shell Flaws Are Used to Hack NAS Devices Security Affairs
Plex2Shell Exploited Against QNAP NAS Users SecurityWeek
Hackers Exploit Plex2Shell Flaws to Take Over Plex Media Servers and Deploy Crypto Miners Cyber Security News

Our advisory: Plex2Shell: four chained Plex Media Server flaws (CVE-2026-96652, -96654, -96655, -96656) widely exploited for miners and proxies

52Medium

Year 12 students warned of fake exam leaks after hack

blayneychronicle.com.au · Breach · 12 Nov, 05:30 UTC

5 sources

4 other reports

Year 12 students warned of fake exam leaks after hack naroomanewsonline.com.au
Year 12 students warned of fake exam leaks after hack northweststar.com.au
Year 12 students warned of fake exam leaks after hack southcoastregister.com.au
Year 12 students warned of fake exam leaks after hack bunburymail.com.au

52Medium

Qantas investigates impact of Amadeus data breach | The Courier

thecourier.com.au · Breach · 9 Nov, 02:00 UTC

7 sources

6 other reports

Qantas investigates impact of Amadeus data breach | The Border Mail bordermail.com.au
Qantas investigates impact of Amadeus data breach | Dungog Chronicle dungogchronicle.com.au
Qantas investigates impact of Amadeus data breach | Great Lakes Advocate greatlakesadvocate.com.au
Qantas investigates impact of Amadeus data breach | The Northern Daily Leader northerndailyleader.com.au
Qantas investigates impact of Amadeus data breach | Crookwell Gazette crookwellgazette.com.au

51Medium

Patched Zyxel GS1900 switches remain open to an exploited flaw, Binarly finds

reddit.com · Vulnerability · 8 Nov, 18:58 UTC

Exploit publicCVSS 8.89 sourcesVendor or governmentWe have an advisory

CVE-2026-107441

8 other reports

Zyxel Switch Patch Missed Flaw Behind Wave of Attacks Infosecurity Magazine
Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441) Help Net Security
Zyxel GS1900 Zero-Day: Patch 3 Fixes Bypassed Bug SOCRadar
Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day SecurityWeek
Zyxel patches a zero-day hiding behind an old fix CSO Online

Our advisory: Zyxel GS1900 switch zero-day CVE-2026-107441 lets attackers run root commands before login, now patched

50Medium

Critical Xen Orchestra Flaws Exploited in Attacks

SecurityWeek · Vulnerability · 11 Nov, 15:42 UTC

3 sourcesWe have an advisory

2 other reports

Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access The Hacker News
Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers BleepingComputer

Our advisory: Xen Orchestra auth bypass (VSA-2026-062) exploited, update now

50Medium

Claude AI Flaw Lets Malicious Browser Extensions Execute Commands on Remote Computers

GBHackers · Vulnerability · 6 Nov, 09:18 UTC

4 sourcesWe have an advisory

3 other reports

Our advisory: Anthropic won’t fix a Claude Dispatch flaw that lets browser extensions run commands on connected computers

49Medium

Hackers Exploit AhsayCBS Vulnerabilities to Hide Malware in PNG Images and Deploy Stealthy Backdoors

Cyber Security News · Vulnerability · 11 Nov, 10:44 UTC

3 sourcesWe have an advisory

2 other reports

Our advisory: Huntress reports AhsayCBS intrusion with webshells, miner and C2 implant

48Medium

Police dismantle Gootloader, CastleRAT, StealC malware infrastructure

DataBreaches.net · Campaign · 12 Nov, 15:45 UTC

2 sourcesWe have an advisory

1 other reports

Police dismantle Gootloader, CastleRAT, StealC malware infrastructure BleepingComputer

Our advisory: CastleRAT, StealC, Gootloader: BleepingComputer reports Europol takedown

47Medium

Fortinet security advisory (AV26-1145)

CCCS Canada · Vulnerability · 12 Nov, 15:26 UTC

1 sourceVendor or governmentWe have an advisory

Our advisory: CCCS Canada reports Fortinet security advisory AV26-1145

47Medium

Operation Endgame malware takedown turns up over 6 million stolen logins

Help Net Security · Breach · 12 Nov, 13:34 UTC

2 sourcesWe have an advisory

1 other reports

Operation Snowball Exposes AI Hacking Campaign Targeting European Telecom and 13 Hosted Organizations GBHackers

Our advisory: Operation Snowball: Jailbroken AI agent hits European telecom

47Medium

ESET Blocks Over 700,000 Cruciferra Malware Attacks Using Advanced Encryption to Evade Antivirus Detection

GBHackers · Campaign · 12 Nov, 13:30 UTC

2 sourcesWe have an advisory

1 other reports

Our advisory: Abe Office RAT bypasses Chrome App-Bound Encryption via browser injection

47Medium

Hearing aid giant Amplifon reveals data breach hits thousands of US customers

TechRadar security · Breach · 10 Nov, 18:35 UTC

3 sourcesWe have an advisory

2 other reports

Data breach at hearing aid giant Amplifon impacts thousands The Record
Amplifon Americas Data Breach Impacts 1.3 Million SecurityWeek

Our advisory: Amplifon Americas discloses breach; SecurityWeek reports 1.3 million affected

47Medium

Don’t Hand Propaganda a Gift: Reading the Brenner Base Tunnel SE Breach Calmly

Security Affairs · Breach · 8 Nov, 17:46 UTC

3 sourcesWe have an advisory

2 other reports

Our advisory: Brenner Base Tunnel SE breach: Everest claims 812 GB, Security Affairs reports

46Medium

Citrix security advisory (AV26-1150)

CCCS Canada · Vulnerability · 12 Nov, 16:17 UTC

3 sourcesVendor or government

2 other reports

Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass The Hacker News
Citrix XenServer Multiple Vulnerabilities HKCERT

46Medium

Adobe security advisory (AV26-1146)

CCCS Canada · Vulnerability · 12 Nov, 15:45 UTC

3 sourcesVendor or government

2 other reports

46Medium

N-able security advisory (AV26-1143)

CCCS Canada · Vulnerability · 12 Nov, 14:56 UTC

1 sourceVendor or governmentWe have an advisory

Our advisory: CCCS Canada reports N-able security advisory AV26-1143

45Medium

Critical Red Hat Quay Vulnerability Allows Unauthenticated Attackers to Hijack Container Registries

Cyber Security News · Vulnerability · 12 Nov, 13:57 UTC

3 sourcesVendor or government

2 other reports

Critical Red Hat Quay Vulnerability Could Expose Private Container Images SecurityWeek
Red Hat security advisory (AV26-1136) CCCS Canada

45Medium

Yet another major Japanese firm hacked, now furniture giant Nitori says hackers stole 37.6 million customer records

TechRadar security · Breach · 11 Nov, 14:05 UTC

2 sourcesWe have an advisory

1 other reports

Japanese furniture giant Nitori says hackers stole 37.6M customer records BleepingComputer

Our advisory: Nitori says up to 37.62M customer records may have leaked

44Medium

China-Linked CopperDragon Malware Framework Targets Critical Infrastructure Across Europe, Asia, and Latin America

GBHackers · Breach · 11 Nov, 05:04 UTC

2 sourcesWe have an advisory

1 other reports

Our advisory: Metaencryptor ransomware group claims Proterial America, Ltd. on leak site

44Medium

Hackers Hijack 10 npm Packages to Spread PolinRider Malware Using Ethereum Blockchain

Cyber Security News · Breach · 9 Nov, 12:39 UTC

3 sourcesWe have an advisory

2 other reports

Our advisory: Sonatype reports PolinRider loader in 12 hijacked npm package releases

44Medium

Corium: A New ClickFix Panel Shows How Malware Delivery Is Becoming a Turnkey Business

Hudson Rock · Campaign · 9 Nov, 09:23 UTC

3 sourcesWe have an advisory

2 other reports

Restaurant Delivery Payment-Skimming Campaign infohawk.com
ChatGPT Lockdown Mode Bypass: Phishing, Malware Delivery, and Silent Data Exfiltration Check Point Research

Our advisory: InfoHawk reports 820 domains impersonating US restaurant delivery sites

43Medium

CVE-2026-0329 PAN-OS: Buffer Overflow Vulnerability (Severity: MEDIUM)

Palo Alto PSIRT · Vulnerability · 11 Nov, 17:00 UTC

Exploit publicCVSS 5.21 sourceVendor or governmentWe have an advisory

CVE-2026-0250 CVE-2026-0329

1 other reports

CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM) Palo Alto PSIRT

Our advisory: Palo Alto discloses GlobalProtect app buffer overflow CVE-2026-0250

43Medium

Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion

Dark Reading · Vulnerability · 9 Nov, 21:12 UTC

Exploit publicCVSS 8.16 sourcesWe have an advisory

CVE-2026-83844

5 other reports

Microsoft Paint RCE Fix Now Available, but Windows Update Won’t Deliver It The Hacker News
Microsoft Paint Security Flaw Allows Remote Code Execution, Patch Availability Questioned The420.in
Microsoft Paint RCE CVE-2026-83844 Raises Store Update Questions SOCRadar
Microsoft Paint 0-Click Vulnerability Could Allow Hackers to Take Control of Windows PCs Cyber Security News
MS Paint Remote Code Execution Vulnerability cve.org

Our advisory: Windows Paint out-of-bounds read (CVE-2026-83844) allows zero-click remote code execution

42Medium

Remus malware claims Gmail access even after you change your password

Malwarebytes · Campaign · 11 Nov, 13:42 UTC

2 sourcesWe have an advisory

1 other reports

Remus Stealer Markets Persistent Gmail Access: Hudson Rock Investigates infostealers.com

Our advisory: Remus Stealer claims persistent Gmail access, Hudson Rock reports

42Medium

Intel, AMD Reveal Over 200 Security Flaws, Critical Bugs Exposed

The420.in · Breach · 11 Nov, 13:38 UTC

2 sourcesWe have an advisory

1 other reports

Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD SecurityWeek

Our advisory: SecurityWeek reports Intel and AMD addressed over 200 flaws

42Medium

WorkOS Confirms Data Breach After ARTEX AI Agent Escapes Security Researcher’s Sandbox

GBHackers · Breach · 7 Nov, 05:28 UTC

3 sourcesWe have an advisory

2 other reports

Runaway AI hacking agent behind WorkOS breach after escaping sandbox BleepingComputer
AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks SecurityWeek
WorkOS says attacker used ARTEX AI to breach internal sales app BleepingComputer

Our advisory: WorkOS, Northflank, Trigger.dev disclose hacks, SecurityWeek reports

42Medium

PYMNTS | Mercado Bitcoin Hack $8 Million Larger Than First Reported

pymnts.com · Breach · 6 Nov, 01:00 UTC

3 sourcesWe have an advisory

2 other reports

Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets The Hacker News
Hackers Drain Bitcoin Hot Wallets on BTCPay Servers, Users Urged to Shut Down Immediately Cyber Security News

Our advisory: Mercado Bitcoin, Brazil’s largest crypto exchange, confirms cyberattack as tens of millions drain from the platform

41Medium

Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms

SecurityWeek · Vulnerability · 11 Nov, 07:00 UTC

2 sourcesWe have an advisory

1 other reports

Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities The Hacker News

Our advisory: Apple iOS 27.2.1 and macOS patches fix iMessage and Bluetooth flaws

41Medium

Able2Shell: Frequently asked questions for reported N-able N-central zero-day vulnerabilities

Tenable · Vulnerability · 11 Nov, 05:55 UTC

2 sourcesWe have an advisory

1 other reports

N-able Disables Cloud Services Following Disclosure of “Able2Shell” Exploit Chains Huntress

Our advisory: N-able takes N-central offline after 33 alleged zero-days are published (Able2Shell)

41Medium

‘AI security controls are only as strong as the wider application environment around them’: OpenAI forced to patch after experts bypass ChatGPT ‘lockdown mode’ to gain access to entire chat history

TechRadar security · Vulnerability · 6 Nov, 16:05 UTC

5 sources

4 other reports

40Medium

Ex-Hacker: Vibe-Coded APIs Riddled With Vulnerabilities

Bank Info Security · Vulnerability · 12 Nov, 15:32 UTC

1 sourceWe have an advisory

Our advisory: Vibe-coded APIs: ex-hacker says they are riddled with flaws

40Medium

The Hop announces data breach that impacted customer privacy

kdhnews.com · Breach · 11 Nov, 03:00 UTC

2 sourcesWe have an advisory

1 other reports

The Hop announces data breach that impacted customer privacy tdtnews.com

Our advisory: The Hop transit district data breach: customer data may be copied

40Medium

Suspicious WhatsApp Messages Linked to Bookeasy Data Breach

miragenews.com · Breach · 11 Nov, 01:30 UTC

2 sourcesWe have an advisory

1 other reports

Kannur Cyber Fraud : Man Loses Rs 2 . 69 Lakh Via WhatsApp Video Call Hack rediff.com

Our advisory: Parks Victoria says it knows of Bookeasy breach, suspicious WhatsApp messages

40Medium

CVE-2026-109469: CVSS 10 Entra Device Registration Flaw

SOCRadar · Vulnerability · 10 Nov, 13:37 UTC

Exploit publicCVSS 10.01 sourceWe have an advisory

CVE-2026-109469

Our advisory: SOCRadar reports CVE-2026-109469, CVSS 10 Entra device registration flaw

40Medium

B&G Foods, Inc. discloses a cyber incident in an SEC Form 8-K filing

SEC EDGAR · Breach · 10 Nov, 00:00 UTC

1 sourceVendor or governmentWe have an advisory

Our advisory: B&G Foods discloses cyber incident in SEC 8-K filing, details not confirmed

40Medium

Knowles Corp discloses a cyber incident in an SEC Form 8-K filing

SEC EDGAR · Breach · 10 Nov, 00:00 UTC

1 sourceVendor or governmentWe have an advisory

Our advisory: Knowles discloses cyber incident in SEC 8-K; details not confirmed

40Medium

‘We are not giving up’: Russian hosting giant Beget has cloud platform wiped in major cyberattack

TechRadar security · Breach · 9 Nov, 21:25 UTC

2 sourcesWe have an advisory

1 other reports

Russian cloud firm Beget rebuilds from scratch after data wiper attack BleepingComputer

Our advisory: Beget hosting cyberattack wipes cloud data, VPS and Kubernetes backups lost

40Medium

Who Gives A Crap? Hackers, apparently, after toilet paper maker’s customer data exposed

The Register · Breach · 9 Nov, 14:30 UTC

2 sourcesWe have an advisory

1 other reports

Who Gives A Crap: Data breach at ethical toilet paper company exposes customer information across UK, US and Australia TechRadar security

Our advisory: Who Gives A Crap says supplier breach exposed customer data

40Medium

AI-powered cyberattacks put Indian fintechs on alert; Shiprocket turns profitable in Q2 FY27

YourStory · Breach · 6 Nov, 02:00 UTC

2 sourcesWe have an advisory

1 other reports

Britain on notice: AI-powered ransomware attacks to arrive by 2028 The Register

Our advisory: NCSC warns AI-powered ransomware is highly likely to hit UK critical infrastructure by 2028

39Medium

New Windows SignDrop zero-day gives hackers SYSTEM privileges

BleepingComputer · Vulnerability · 12 Nov, 16:04 UTC

3 sources

2 other reports

39Medium

When AI Finds the Bugs: Rethinking Exposure in a Flood of Vulnerabilities

Akamai · Vulnerability · 12 Nov, 15:00 UTC

1 sourceWe have an advisory

Our advisory: Akamai says AI-found bugs mean rethinking exposure response

39Medium

Dissecting StrikeStub: ClickFix PowerShell Malware and Modular RAT

Akamai · Campaign · 12 Nov, 14:00 UTC

1 sourceWe have an advisory

Our advisory: Akamai reports StrikeStub, a ClickFix PowerShell malware and RAT

39Medium

FATF Traces Over $100 Million in Stolen Funds Through Crypto Wallets Linked to Global Scam Networks

Cyber Security News · Breach · 12 Nov, 12:22 UTC

1 sourceWe have an advisory

Our advisory: Cyber Security News reports FATF traced $100 million to scam crypto wallets

39Medium

Critical flaw in Google Chrome, CERT-In urges users to update browser

India Today · Vulnerability · 12 Nov, 05:10 UTC

3 sources

2 other reports

39Medium

Synology Products Multiple Vulnerabilities

HKCERT · Vulnerability · 11 Nov, 03:00 UTC

1 sourceVendor or governmentWe have an advisory

Our advisory: Synology discloses DSM flaws incl. critical CVE-2026-76954

38Medium

WatchGuard security advisory (AV26-1147)

CCCS Canada · Vulnerability · 12 Nov, 15:52 UTC

2 sourcesVendor or government

1 other reports

Warning: Multiple Vulnerabilities Addressed in WatchGuard AuthPoint Authentication Gateway, Patch Immediately! CERT-BE

38Medium

nDiligence Releases Four-Year Study Identifying a Critical Supply-Chain Vulnerability Across 50 Platform Types

Cyber Security News · Vulnerability · 12 Nov, 14:25 UTC

3 sources

2 other reports

38Medium

CISA Warns of Actively Exploited Microsoft Outlook Zero-Day Vulnerability

GBHackers · Vulnerability · 12 Nov, 13:32 UTC

3 sources

2 other reports

CISA Warns of Google Chromium 0-Day Vulnerability Actively Exploited in Attacks Cyber Security News
N-able Warns of Critical N-central Zero-Day Vulnerability Actively Exploited by Hackers GBHackers
Microsoft Outlook Zero-Day Vulnerability Actively Exploited to Steal NTLM Authentication Hashes GBHackers
Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches The Hacker News
Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026 The Hacker News

38Medium

Active ScreenConnect attacks breach MSPs, impact dozens of organizations

DataBreaches.net · Breach · 12 Nov, 12:37 UTC

3 sources

2 other reports

Active ScreenConnect attacks breach MSPs, impact dozens of organizations BleepingComputer
Windows Active Directory RCE and DoS Vulnerabilities Put Windows Systems at Risk GBHackers

38Medium

School Bomb Threats: Hudson Rock Finds Reported Sender Accounts in Infostealer Data

Hudson Rock · Campaign · 12 Nov, 09:15 UTC

1 sourceWe have an advisory

Our advisory: Hudson Rock reports school bomb threat sender accounts in infostealer data

38Medium

RadNet, Inc. discloses a cyber incident in an SEC Form 8-K filing

SEC EDGAR · Breach · 9 Nov, 00:00 UTC

1 sourceVendor or governmentWe have an advisory

Our advisory: RadNet discloses cyber incident in SEC 8-K filing, details not confirmed

36Medium

Apache Patches Critical HTTP Server RCE Found by Anthropic, Google

SecurityWeek · Vulnerability · 12 Nov, 15:38 UTC

8 sourcesWe have an advisory

CVE-2026-119618

7 other reports

Our advisory: Claude Code reportedly leaks user email addresses in HTTP User-Agent headers, Cyber Security News reports

36Medium

Palo Alto Networks Patches PAN-OS Vulnerability Allowing Remote Code Execution With Root Privileges

GBHackers · Vulnerability · 12 Nov, 10:34 UTC

2 sourcesVendor or government

1 other reports

Palo Alto Products Multiple Vulnerabilities HKCERT

36Medium

Crime Stoppers hack : What Ottawa Valley needs to know

insideottawavalley.com · Breach · 12 Nov, 01:30 UTC

1 sourceWe have an advisory

1 other reports

Bear Valley Community Hospital: claimed by the dark project ransomware group on its leak site RansomLook

Our advisory: RansomLook reports dark project group claims Bear Valley Community Hospital

35Medium

The global socket: how threat actors are weaponizing GSocket for stealthy C2

Microsoft Security · Campaign · 11 Nov, 19:49 UTC

1 sourceWe have an advisory

Our advisory: Microsoft reports threat actors using GSocket for persistent Linux C2

35Medium

THAI passenger data compromised in security breach

bangkokpost.com · Breach · 11 Nov, 02:30 UTC

1 sourceWe have an advisory

Our advisory: Bangkok Post reports THAI passenger data compromised in breach

35Medium

Vulnerabilities in WidzialniCMS software

CERT Polska · Vulnerability · 9 Nov, 10:55 UTC

1 sourceVendor or governmentWe have an advisory

Our advisory: CERT Polska reports four WidzialniCMS flaws, fixed in 2.5

35Medium

Multiple Vulnerabilities in SS1/ SS1 Cloud and the ODM product rocoeyes

JVN · Vulnerability · 9 Nov, 06:00 UTC

1 sourceVendor or governmentWe have an advisory

Our advisory: JVN reports two flaws in SS1, SS1 Cloud and rocoeyes agents

35Medium

ChromeOS Multiple Vulnerabilities

HKCERT · Vulnerability · 9 Nov, 03:00 UTC

1 sourceVendor or governmentWe have an advisory

Our advisory: HKCERT reports multiple ChromeOS vulnerabilities, update to 16836.32.0

35Medium

ModSecurity Security Restriction Bypass Vulnerability

HKCERT · Vulnerability · 9 Nov, 01:00 UTC

1 sourceVendor or governmentWe have an advisory

Our advisory: GBHackers reports ModSecurity WAF upload bypass and XML flaw

34Low

Mozilla Products Multiple Vulnerabilities

HKCERT · Vulnerability · 12 Nov, 03:00 UTC

2 sourcesVendor or government

1 other reports

Mozilla Firefox Multiple Vulnerabilities HKCERT
Mozilla security advisory (AV26-1131) CCCS Canada
Mozilla Firefox Denial of Service Vulnerability HKCERT

34Low

Node.js Multiple Vulnerabilities

HKCERT · Vulnerability · 12 Nov, 02:00 UTC

2 sourcesVendor or government

1 other reports

Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026 Cisco PSIRT

34Low

Leware Construction Company ofFlorida: claimed by the akira ransomware group on its leak site

RansomLook · Breach · 11 Nov, 23:05 UTC

1 sourceClaim, unconfirmedWe have an advisory

3 other reports

Our advisory: Andersen Construction: vortex ransomware group claims attack

34Low

Beware of phishing emails disguised as quote requests (SnakeKeylogger)

ASEC · Campaign · 11 Nov, 15:00 UTC

1 sourceWe have an advisory

Our advisory: ASEC reports SnakeKeylogger phishing disguised as quote requests

34Low

Grok’s security blind spot exposed users and Musk’s company secrets

DataBreaches.net · Breach · 11 Nov, 14:12 UTC

1 sourceWe have an advisory

Our advisory: DataBreaches.net reports Grok security gap exposed users and Musk secrets

34Low

SG: Fullerton Health server hit by cyberattack; personal data of migrant workers affected

DataBreaches.net · Breach · 11 Nov, 14:11 UTC

1 sourceWe have an advisory

Our advisory: DataBreaches.net reports cyberattack on Fullerton Health server

34Low

TinstaPorn Android Malware Poses as Casino App to Collect User Data

Hackread · Campaign · 11 Nov, 12:50 UTC

1 sourceWe have an advisory

Our advisory: FortiGuard Labs reports TinstaPorn Android casino app malware

34Low

Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem

The Hacker News · Campaign · 10 Nov, 17:43 UTC

1 sourceWe have an advisory

Our advisory: Check Point reports three China-nexus campaigns linked via Sparrow malware

34Low

Vivo X500 series India launch teased, full price leaked online

India Today · Breach · 10 Nov, 11:19 UTC

1 sourceWe have an advisory

1 other reports

Muse Meta AI agent price leaks online ahead of launch in India, details here India Today

Our advisory: India Today reports leaked India pricing for Meta Muse AI agent

34Low

In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days

SecurityWeek · Breach · 6 Nov, 14:40 UTC

2 sourcesWe have an advisory

1 other reports

Hackers are using ‘LLMjacking attacks’ to hijack company AI usage and run up huge cloud bills TechRadar security

Our advisory: LLMJacking: Google researchers report stolen AI access bills up to $1 million

34Low

CPython 0-Day Vulnerabilities Threaten the AI Supply Chain

runsybil.com · Breach · 6 Nov, 14:39 UTC

2 sourcesWe have an advisory

1 other reports

CPython flaw exposes AI inference servers to sandbox escape attacks CSO Online

Our advisory: CPython bug enables Jinja sandbox escape in AI inference servers, RunSybil says

34Low

CERT-In Flags Four Critical Vulnerabilities in Tata Motors Connected Car Apps

The420.in · Vulnerability · 6 Nov, 10:04 UTC

2 sourcesWe have an advisory

1 other reports

Tata Motors iRA App Flaws Could Let Hackers Impersonate Car Owners and Access Vehicle Services Cyber Security News
Renault Car’s 15-Year-Old Linux Navigation Software Hacked to Execute Arbitrary Root Commands Cyber Security News

Our advisory: CERT-In flags four flaws in Tata Motors iRA connected-car apps that let attackers impersonate owners

34Low

NIKKE PC launcher compromise put players’ passwords and personal files at risk

Malwarebytes · Breach · 5 Nov, 22:06 UTC

2 sourcesWe have an advisory

1 other reports

NIKKE PC game launcher hacked to spread remote access, data-stealing malware BleepingComputer

Our advisory: NIKKE PC launcher supply-chain attack pushed a remote-access backdoor and wallet stealer via CDN scripts

33Low

Grupo San Cristobal: claimed by the the gentlemen ransomware group on its leak site

RansomLook · Breach · 11 Nov, 14:12 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Grupo Lorrio claimed by The Gentlemen ransomware group on its leak site

33Low

N-able Releases Emergency N-central Hotfix After 33 Vulnerabilities Trigger Worldwide Shutdown

Cyber Security News · Vulnerability · 11 Nov, 12:57 UTC

3 sources

2 other reports

33Low

Windows BitLocker Vulnerabilities Allow Attackers to Bypass Security Feature

Cyber Security News · Vulnerability · 11 Nov, 11:31 UTC

1 sourceWe have an advisory

Our advisory: BitLocker bypass flaws: Cyber Security News reports Microsoft disclosure

33Low

Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand

Kaspersky Securelist · Campaign · 11 Nov, 10:00 UTC

1 sourceWe have an advisory

Our advisory: Kaspersky reports Citrus ransomware using VLESS tunnels and Sn00py

33Low

Hackers Use Fake Cloudflare CAPTCHA Checks to Deploy Malware Hidden Inside PNG Images

GBHackers · Campaign · 11 Nov, 05:39 UTC

1 sourceWe have an advisory

Our advisory: GBHackers reports fake Cloudflare CAPTCHA lures hide malware in PNG images

33Low

Petroshahd(Enap Sipetrol International - Egypt Branch): claimed by the aoqin leaks ransomware group on its leak site

RansomLook · Breach · 10 Nov, 16:24 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: aoqin leaks ransomware group claims attack on Petroshahd (Enap Sipetrol Egypt)

33Low

Herminio India Precision Technology: claimed by the orova ransomware group on its leak site

RansomLook · Breach · 10 Nov, 16:22 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Orova ransomware group claims attack on Herminio India Precision Technology

33Low

Vulnerability in KAMSOFT ZSIRep CLIENT library

CERT Polska · Vulnerability · 6 Nov, 10:55 UTC

1 sourceVendor or governmentWe have an advisory

Our advisory: CERT Polska reports KAMSOFT ZSIRep CLIENT certificate flaw

32Low

Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits

The Hacker News · Vulnerability · 11 Nov, 14:01 UTC

2 sourcesVendor or government

1 other reports

Veeam Products Denial of Service Vulnerability HKCERT

32Low

Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities

SecurityWeek · Vulnerability · 11 Nov, 13:37 UTC

2 sourcesVendor or government

1 other reports

Ivanti security advisory (AV26-1141) CCCS Canada

32Low

New GhostFrame Malware Targets VMware ESXi Servers to Steal Credentials and Hijack Virtual Machines

GBHackers · Breach · 11 Nov, 05:58 UTC

3 sources

2 other reports

New GhostFrame Malware Lets Hackers Hijack VMware ESXi VMs and Steal Windows Credentials Cyber Security News
GhostFrame: A new ESXi Implant Linked to Settra Ransomware Recorded Future

32Low

AI SAST Finding: Path Traversal in OpenClaw via LLM Guardrail Bypass | Endor Labs

Endor Labs · Vulnerability · 11 Nov, 02:21 UTC

1 sourceWe have an advisory

1 other reports

Benchmarking Endor Labs AI SAST: 2.6x more real vulnerabilities found than frontier models | Endor Labs Endor Labs

Our advisory: Endor Labs claims its AI SAST found 2.6x more real flaws than Claude

31Low

ScreenConnect attack on MSPs (288 endpoints, 48 organizations): Huntress ties it to RMM+, an extension whose versions 1.0.31 and 1.0.32 accepted a blank access key

reddit.com · Breach · 12 Nov, 15:45 UTC

2 sources

1 other reports

Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs The Register
Hackers Deploy Malware in Fresh ScreenConnect Campaign SecurityWeek

31Low

ICS Patch Tuesday: Siemens Flags High-Severity Flaws, Node2Shell Exposure

SecurityWeek · Vulnerability · 11 Nov, 10:35 UTC

2 sourcesVendor or government

1 other reports

[Control systems] Siemens security advisory (AV26-1139) CCCS Canada

31Low

MTM&O Gold Refinery DMCC: claimed by the dark project ransomware group on its leak site

RansomLook · Breach · 11 Nov, 02:07 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Dark Project ransomware group claims attack on MTM&O Gold Refinery DMCC

31Low

Microsoft releases Windows 10 KB5131096 extended security update

BleepingComputer · Vulnerability · 10 Nov, 20:04 UTC

1 sourceWe have an advisory

Our advisory: BleepingComputer reports Windows 10 KB5131096 ESU update released

31Low

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

The Hacker News · Breach · 10 Nov, 19:19 UTC

1 sourceWe have an advisory

Our advisory: NEAR AI breached via SGLang RCE flaw, 18 agents and 100 users hit

31Low

X.Org patches eight server vulnerabilities a month after fixing 12 others

Help Net Security · Vulnerability · 10 Nov, 16:15 UTC

1 sourceWe have an advisory

Our advisory: Help Net Security reports X.Org fixes eight X server and Xwayland flaws

31Low

Wyndham confirms it exposed hotel customer data after expert finds flaw in app security

TechRadar security · Breach · 10 Nov, 14:00 UTC

1 sourceWe have an advisory

Our advisory: Wyndham Android app exposed customer data via hardcoded credential

31Low

Canadian Webmail Access, US Bank Dump, Peru Leak, Spencer’s Breach, and ZoomInfo Sale

SOCRadar · Breach · 9 Nov, 07:52 UTC

1 sourceWe have an advisory

Our advisory: SOCRadar post mentions a ZoomInfo sale; details not confirmed

30Low

Craft CMS security advisory (AV26-1086) - Update 1

CCCS Canada · Vulnerability · 12 Nov, 15:54 UTC

1 sourceVendor or government

30Low

Shipping giant Maersk confirms data breach as hackers demand $5 million ransom

TechRadar security · Breach · 12 Nov, 14:20 UTC

2 sources

1 other reports

Shipping giant Maersk probes ‘IT security incident,’ data theft The Register

30Low

SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack Paths

The Hacker News · Breach · 12 Nov, 13:08 UTC

2 sources

1 other reports

Companies seeking an MSP doubt their ability to spot cyberattacks Help Net Security

30Low

Study Provides Insights into Impact of Cyberattacks on Hospital Care

DataBreaches.net · Breach · 12 Nov, 12:40 UTC

2 sources

1 other reports

Study Provides Insights into Impact of Cyberattacks on Hospital Care HIPAA Journal

30Low

CVE-2026-125350: Google Fixes Exploited Chrome XML Zero-Day

SOCRadar · Vulnerability · 11 Nov, 11:42 UTC

On CISA KEV1 source

CVE-2026-125350

30Low

Roane Transportation Services: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:33 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc ransom group claims attack on Roane Transportation Services

30Low

Nota Groep: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:33 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc ransom group claims attack on Nota Groep via leak site

30Low

HONG BAO GROUP (lovelywines.co.th): claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:33 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: inc ransom group claims attack on HONG BAO GROUP (lovelywines.co.th)

30Low

Nandan Terry Pvt: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:33 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc ransom group claims attack on Nandan Terry Pvt, per RansomLook

30Low

La Filipina Uy Gongco: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:33 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc ransom group claims attack on La Filipina Uy Gongco

30Low

ZIRNET LLC (mmplumbingny.com alpha1usa.com askconstruction.com mmplumbingny.com tristate-s: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:33 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc ransom group claims attack on ZIRNET LLC on its leak site

30Low

ELITDATA SE (Advokatfirman Kurt Lundberg HB,Artwood AB,Mantum Group): claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:33 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc ransom group claims attack on ELITDATA SE, per RansomLook

30Low

PT Forisa Nusapersada: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:33 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc ransom group claims attack on PT Forisa Nusapersada

30Low

American Council of Education: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:33 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: RansomLook reports inc ransom claim on American Council of Education

30Low

Association «ENSEMBLE»: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:33 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: inc ransom group claims attack on Association ENSEMBLE, per RansomLook

30Low

Stadtwerke Waldbröl GmbH: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:33 UTC

1 sourceClaim, unconfirmedWe have an advisory

2 other reports

Our advisory: Inc ransom group claims attack on Stadtwerke Waldbröl GmbH

30Low

D.L. Steiner, Inc: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:33 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc ransom group claims D.L. Steiner, Inc on its leak site

30Low

Previous Clients: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:33 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc ransom group claims attack on “Previous Clients” on leak site

30Low

Shenwan Hongyuan: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:33 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc Ransom group claims Shenwan Hongyuan on its leak site

30Low

Pomer & Boccia Professional: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:32 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc ransom group claims attack on Pomer & Boccia Professional

30Low

Patel Panchal: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:32 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: RansomLook reports inc ransom group claims Patel Panchal attack

30Low

Chaney Monge School: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:32 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc ransom group claims attack on Chaney Monge School, unconfirmed

30Low

Ken Cai EMPIRE (Minco Silver, HempNova and other): claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:32 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: inc ransom group claims attack on Ken Cai EMPIRE, says RansomLook

30Low

Kalahari Resorts: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:32 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc ransom group claims attack on Kalahari Resorts, per RansomLook

30Low

PANAX Group: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:32 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: RansomLook reports inc ransom group claims PANAX Group on leak site

30Low

audacie.com, Audacie Inc.: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:32 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc ransom group claims attack on Audacie Inc. (audacie.com) on leak site

30Low

CIMSA LOGISTICS: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:32 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc ransom group claims attack on CIMSA Logistics, per RansomLook

30Low

HELP Foundation: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:32 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: inc ransom group claims HELP Foundation attack on leak site

30Low

StrucSure Home Warranty: claimed by the inc ransom ransomware group on its leak site

RansomLook · Breach · 10 Nov, 22:32 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Inc ransom group claims attack on StrucSure Home Warranty

30Low

JTK Solutions: claimed by the morpheus ransomware group on its leak site

RansomLook · Breach · 10 Nov, 17:11 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Morpheus ransomware group claims attack on JTK Solutions, per RansomLook

30Low

Karlstorz: claimed by the vortex ransomware group on its leak site

RansomLook · Breach · 10 Nov, 16:24 UTC

1 sourceClaim, unconfirmedWe have an advisory

1 other reports

Karlstorz - 500 GB: claimed by the vortex ransomware group on its leak site RansomLook

Our advisory: Vortex ransomware group claims attack on Karlstorz, per RansomLook

30Low

SimonMed: claimed by the vortex ransomware group on its leak site

RansomLook · Breach · 10 Nov, 16:24 UTC

1 sourceClaim, unconfirmedWe have an advisory

1 other reports

SimonMed - 45+ GB: claimed by the vortex ransomware group on its leak site RansomLook

Our advisory: Vortex ransomware group claims attack on SimonMed, per RansomLook

30Low

El Camino Health: claimed by the vortex ransomware group on its leak site

RansomLook · Breach · 10 Nov, 16:24 UTC

1 sourceClaim, unconfirmedWe have an advisory

1 other reports

El Camino Health - 350+ GB: claimed by the vortex ransomware group on its leak site RansomLook

Our advisory: vortex ransomware group claims attack on El Camino Health, unconfirmed

30Low

SOLENIS: claimed by the vortex ransomware group on its leak site

RansomLook · Breach · 10 Nov, 16:24 UTC

1 sourceClaim, unconfirmedWe have an advisory

1 other reports

SOLENIS - 1.65tb: claimed by the vortex ransomware group on its leak site RansomLook

Our advisory: Vortex ransomware group claims Solenis leak-site listing

30Low

ARTHREX: claimed by the vortex ransomware group on its leak site

RansomLook · Breach · 10 Nov, 16:24 UTC

1 sourceClaim, unconfirmedWe have an advisory

1 other reports

ARTHREX - 700+ GB: claimed by the vortex ransomware group on its leak site RansomLook

Our advisory: Vortex ransomware group claims attack on Arthrex, per RansomLook

30Low

CRESA: claimed by the vortex ransomware group on its leak site

RansomLook · Breach · 10 Nov, 16:24 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: RansomLook reports vortex ransomware group claims CRESA attack

30Low

ALEXION: claimed by the vortex ransomware group on its leak site

RansomLook · Breach · 10 Nov, 16:24 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Vortex ransomware group claims attack on ALEXION on its leak site

30Low

PYRAMID HEALTHCARE: claimed by the vortex ransomware group on its leak site

RansomLook · Breach · 10 Nov, 16:24 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Vortex ransomware group claims attack on Pyramid Healthcare

30Low

Nepal Electricity Authority: claimed by the climax ransomware group on its leak site

RansomLook · Breach · 10 Nov, 16:24 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Climax ransomware group claims Nepal Electricity Authority attack

30Low

Sega newsletter data breach sees 2.2 million email addresses exposed

TechRadar security · Breach · 10 Nov, 15:25 UTC

3 sources

2 other reports

SEGA newsletter data breach exposes 2.2 million email addresses BleepingComputer
Email Addresses of 2.2 Million Sega Customers Leaked in Vendor Breach Infosecurity Magazine

30Low

SG: SPH Media hit by cyberattacks; says no customer financial data or access exposed

DataBreaches.net · Breach · 10 Nov, 12:47 UTC

1 sourceWe have an advisory

Our advisory: SPH Media says no customer financial data exposed after cyberattacks

30Low

Quantum could solve AI energy drain, says tech founder

ET Tech · Breach · 10 Nov, 04:19 UTC

1 sourceWe have an advisory

Our advisory: Diraq founder claims quantum could cut AI data centre energy use

30Low

UNIC Technology (Thailand) Co., Ltd: claimed by the krybit ransomware group on its leak site

RansomLook · Breach · 9 Nov, 10:29 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: krybit ransomware group claims attack on UNIC Technology (Thailand)

29Low

HPE security advisory (AV26-1144)

CCCS Canada · Vulnerability · 12 Nov, 15:04 UTC

1 sourceVendor or government

29Low

Microsoft security advisory, November 2026 monthly rollup (AV26-1142)

CCCS Canada · Vulnerability · 12 Nov, 14:31 UTC

1 sourceVendor or government

29Low

Google security advisory (AV26-1140) - Update 1

CCCS Canada · Vulnerability · 12 Nov, 14:29 UTC

1 sourceVendor or government

29Low

Romania says it stopped Russian cyberattack targeting government emails

The Record · Breach · 12 Nov, 13:30 UTC

1 source

29Low

Installed Building Products, Inc. discloses a cyber incident in an SEC Form 8-K filing

SEC EDGAR · Breach · 12 Nov, 00:00 UTC

1 sourceVendor or government

29Low

Standard Nuclear, Inc. discloses a cyber incident in an SEC Form 8-K filing

SEC EDGAR · Breach · 12 Nov, 00:00 UTC

1 sourceVendor or government

29Low

Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)

Tenable · Vulnerability · 10 Nov, 19:01 UTC

On CISA KEV1 source

CVE-2026-124194

29Low

SIFCO Industries INC.: claimed by the metaencryptor ransomware group on its leak site

RansomLook · Breach · 10 Nov, 10:30 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: RansomLook reports metaencryptor group claims attack on SIFCO Industries

29Low

Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia

The Hacker News · Campaign · 9 Nov, 14:31 UTC

1 sourceWe have an advisory

Our advisory: Bitter APT drops a new PapRAT backdoor on South Asian targets using malicious VHDX disk images

29Low

Revolve Puts Data Breach Victim Count at 1.5 Million

SecurityWeek · Breach · 9 Nov, 14:08 UTC

1 sourceWe have an advisory

Our advisory: Revolve card data breach exposes saved payment card numbers and expiry dates

29Low

Clínica La Sagrada Familia (Colombia): claimed by the whitearmor ransomware group on its leak site

RansomLook · Breach · 8 Nov, 04:25 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Whitearmor ransomware group claims Clínica La Sagrada Familia in Colombia

29Low

Cyberattacks : I could see all my files on my computer going one by one, The Irish Times

irishtimes.com · Breach · 6 Nov, 06:30 UTC

1 sourceWe have an advisory

Our advisory: Irish Times reports Irish firm hit by infected ad, then ransom demand

28Low

CERT - In Warns of Serious Chrome Vulnerabilities , Advises Immediate Updates

udaipurkiran.com · Vulnerability · 12 Nov, 07:00 UTC

2 sources

1 other reports

CERT - In flags critical Google Chrome vulnerabilities , users advised to update browser immediately moneycontrol.com

28Low

CVE-2026-0323 Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability (Severity: LOW)

Palo Alto PSIRT · Vulnerability · 11 Nov, 17:00 UTC

1 sourceVendor or governmentWe have an advisory

CVE-2026-0323

Our advisory: Palo Alto Networks discloses Checkov SSRF flaw CVE-2026-0323

28Low

CVE-2026-0326 PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing (Severity: LOW)

Palo Alto PSIRT · Vulnerability · 11 Nov, 17:00 UTC

1 sourceVendor or governmentWe have an advisory

CVE-2026-0326

Our advisory: Palo Alto discloses PAN-OS buffer overflow CVE-2026-0326

28Low

CVE-2026-0330 PAN-OS: Authenticated Remote Code Execution (RCE) in Panorama (Severity: MEDIUM)

Palo Alto PSIRT · Vulnerability · 11 Nov, 17:00 UTC

1 sourceVendor or governmentWe have an advisory

CVE-2026-0330

Our advisory: Palo Alto Networks discloses CVE-2026-0330 Panorama PAN-OS RCE flaw

28Low

CVE-2026-0331 PAN-OS: Sensitive Information Disclosure Vulnerability (Severity: MEDIUM)

Palo Alto PSIRT · Vulnerability · 11 Nov, 17:00 UTC

1 sourceVendor or governmentWe have an advisory

CVE-2026-0331

Our advisory: Palo Alto discloses PAN-OS information disclosure flaw CVE-2026-0331

28Low

Hundreds of Dutch sports clubs report cyberattack exposing members’ personal data

DataBreaches.net · Breach · 11 Nov, 14:11 UTC

2 sources

1 other reports

Researchers Uncover 45 AI Hacking Frameworks, With Hundreds of Attack Consoles Exposed on the Internet GBHackers

28Low

SAMTEC: claimed by the vortex ransomware group on its leak site

RansomLook · Breach · 9 Nov, 21:54 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Vortex ransomware group claims attack on SAMTEC (unconfirmed)

28Low

BOZZUTO: claimed by the vortex ransomware group on its leak site

RansomLook · Breach · 9 Nov, 21:54 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Vortex ransomware group claims attack on BOZZUTO, per RansomLook

28Low

Storage Mart: claimed by the vortex ransomware group on its leak site

RansomLook · Breach · 9 Nov, 21:54 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Vortex ransomware group claims Storage Mart attack, RansomLook reports

28Low

Air Communities: claimed by the vortex ransomware group on its leak site

RansomLook · Breach · 9 Nov, 21:54 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Vortex ransomware group claims Air Communities on leak site

28Low

EMW: claimed by the climax ransomware group on its leak site

RansomLook · Breach · 9 Nov, 21:01 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Climax ransomware group claims EMW on its leak site

28Low

Allegis Advisor Group: claimed by the climax ransomware group on its leak site

RansomLook · Breach · 9 Nov, 21:01 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Climax ransomware group claims attack on Allegis Advisor Group

28Low

Zetton Inc. (Aloha Table Inc.): claimed by the climax ransomware group on its leak site

RansomLook · Breach · 9 Nov, 21:01 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Climax ransomware group claims attack on Zetton Inc. (Aloha Table Inc.)

28Low

MiraeING Co.: claimed by the climax ransomware group on its leak site

RansomLook · Breach · 9 Nov, 21:01 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Climax ransomware group claims attack on MiraeING Co., per RansomLook

28Low

La’ala Al Kuwait Real Estate Co KSCC: claimed by the eclipse ransomware group on its leak site

RansomLook · Breach · 9 Nov, 19:10 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Eclipse ransomware group claims La’ala Al Kuwait Real Estate attack

28Low

Heartland Honda: claimed by the global secret group ransomware group on its leak site

RansomLook · Breach · 9 Nov, 19:10 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Heartland Honda listed by “global secret group” ransomware claim

28Low

DomusVi: claimed by the black x ransomware group on its leak site

RansomLook · Breach · 9 Nov, 19:10 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Black X ransomware group claims DomusVi on its leak site

28Low

Hackers Compromise Ethersphere’s bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

The Hacker News · Campaign · 9 Nov, 17:36 UTC

3 sources

2 other reports

28Low

M.C.S. Steel Public Company Limited: claimed by the rhysida ransomware group on its leak site

RansomLook · Breach · 9 Nov, 17:24 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Rhysida ransomware group claims attack on M.C.S. Steel, unconfirmed

28Low

Forus Deporte y Ocio S.L: claimed by the black x ransomware group on its leak site

RansomLook · Breach · 9 Nov, 17:23 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Black X ransomware group claims attack on Forus Deporte y Ocio S.L

28Low

Researchers Uncover NotC2 AI-Powered C2 Framework That Hides Malicious Commands Inside AWS Services

Cyber Security News · Campaign · 9 Nov, 11:26 UTC

1 sourceWe have an advisory

Our advisory: Varonis says NotC2 PoC hides C2 commands in AWS services

28Low

Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety

The Hacker News · Vulnerability · 9 Nov, 10:56 UTC

1 sourceWe have an advisory

Our advisory: Keplr and Web3Auth say Web3Auth flaw hit Google and Apple login wallets

28Low

Linus Torvalds sees signs AI-prompted patch flood has peaked

The Register · Vulnerability · 9 Nov, 04:53 UTC

1 sourceWe have an advisory

Our advisory: Torvalds says AI patch flood may be peaking, The Register reports

27Low

Johnson Development Corp.: claimed by the aurora ransomware group on its leak site

RansomLook · Breach · 9 Nov, 13:27 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Aurora ransomware group claims attack on Johnson Development Corp.

27Low

Greentech Renewables: claimed by the metaencryptor ransomware group on its leak site

RansomLook · Breach · 9 Nov, 11:28 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: metaencryptor ransomware group claims Greentech Renewables attack

27Low

AUDIT ENTITY: Pelican ICT: claimed by the audit team ransomware group on its leak site

RansomLook · Breach · 9 Nov, 08:26 UTC

1 sourceClaim, unconfirmedWe have an advisory

4 other reports

Our advisory: RansomLook reports audit team group claims roycegroup on leak site

27Low

Grupa ABS: claimed by the panzer ransomware group on its leak site

RansomLook · Breach · 9 Nov, 03:21 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Panzer ransomware group claims attack on Grupa ABS, per RansomLook

27Low

Companies need to overhaul cybersecurity as AI accelerates vulnerability attacks

ETCISO · Vulnerability · 9 Nov, 03:01 UTC

3 sources

2 other reports

Companies need to overhaul cybersecurity as AI accelerates vulnerability attacks : Report asiabulletin.com
Companies need to overhaul cybersecurity as AI accelerates vulnerability attacks : Report bignewsnetwork.com

27Low

Court Square Group: claimed by the black x ransomware group on its leak site

RansomLook · Breach · 9 Nov, 02:24 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Black X ransomware group claims attack on Court Square Group

27Low

IT Security Incident at TUM

tum.de · Breach · 8 Nov, 09:39 UTC

1 sourceWe have an advisory

Our advisory: TUM discloses IT security incident, says TUMonline is back again

27Low

AI Powered Cyber Attacks Targeted At Banks , Financial Institutions - Warns Govt - Trak . in - Indian Business of Tech , Mobile & Startups

trak.in · Breach · 6 Nov, 05:30 UTC

2 sources

1 other reports

26Low

Hacked Asian Telcos Used to Intercept Taiwanese Calls and Texts

Infosecurity Magazine · Breach · 12 Nov, 14:30 UTC

1 source

26Low

Srsly Risky Biz: Iranian Hacks With Russian Characteristics

Risky Business News · Breach · 12 Nov, 03:40 UTC

1 source

26Low

Google Chrome Multiple Vulnerabilities

HKCERT · Vulnerability · 12 Nov, 03:00 UTC

1 sourceVendor or government

26Low

Ubuntu Linux Kernel Multiple Vulnerabilities

HKCERT · Vulnerability · 12 Nov, 01:00 UTC

1 sourceVendor or government

26Low

Ukraine Pivots to Israeli-Italian Satellite Tech to Bypass Starlink Restrictions

policy-wire.com · Vulnerability · 11 Nov, 08:26 UTC

1 source

26Low

IBM security advisory (AV26-1135)

CCCS Canada · Vulnerability · 9 Nov, 14:07 UTC

2 sourcesVendor or government

1 other reports

IBM WebSphere Products Multiple Vulnerabilities HKCERT

26Low

NoseTea: claimed by the deadlock ransomware group on its leak site

RansomLook · Breach · 8 Nov, 20:25 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Deadlock ransomware group claims NoseTea on its leak site, RansomLook reports

26Low

Trinity Custom Homes - USA: claimed by the deadlock ransomware group on its leak site

RansomLook · Breach · 8 Nov, 15:39 UTC

1 sourceClaim, unconfirmedWe have an advisory

1 other reports

Custom Bakehouse: claimed by the dark project ransomware group on its leak site RansomLook

Our advisory: Deadlock ransomware group claims attack on Trinity Custom Homes (USA)

26Low

Critical Zero-Day Vulnerabilities Found in D-Link Enterprise Gigabit Switches

The420.in · Vulnerability · 7 Nov, 16:39 UTC

1 sourceWe have an advisory

Our advisory: D-Link DGS-3130 switches have unpatched zero-day flaws, The420.in reports

26Low

CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands

BleepingComputer · Breach · 7 Nov, 14:10 UTC

1 sourceWe have an advisory

Our advisory: CTM360 claims fake gift card scams abuse trusted brands

26Low

Are M1 , Doctor Anywhere and others doing enough to help users after a data breach ?

techgoondu.com · Breach · 7 Nov, 06:00 UTC

1 sourceWe have an advisory

Our advisory: M1 and Doctor Anywhere disclose data breaches, Techgoondu reports

26Low

Free Certified Patch for Critical Rails Active Storage Vulnerability

Socket · Vulnerability · 6 Nov, 20:40 UTC

1 sourceWe have an advisory

Our advisory: Critical Rails Active Storage flaw lets crafted ImageMagick uploads write server files

26Low

Judge Approves $3.9M ArCare Data Breach Settlement

HIPAA Journal · Breach · 6 Nov, 15:17 UTC

1 sourceWe have an advisory

Our advisory: HIPAA Journal reports ArCare $3.9M data breach settlement approved

26Low

Mirax Android RAT Hijacks Phones Through Streaming-App Ads to Steal Banking Credentials and Drain Accounts

Cyber Security News · Breach · 6 Nov, 14:08 UTC

1 sourceWe have an advisory

Our advisory: Mirax Android RAT spread through streaming-app ads hijacks phones to drain bank accounts

26Low

NI: Parents warned to be on alert after school data breach

DataBreaches.net · Breach · 6 Nov, 13:56 UTC

1 sourceWe have an advisory

Our advisory: NI school data breach: DataBreaches.net reports parents warned to be on alert

26Low

Microsoft Faces Environmental Backlash as Demonstrators Breach Amsterdam Construction Project

The420.in · Breach · 6 Nov, 13:46 UTC

1 sourceWe have an advisory

Our advisory: The420.in reports protesters entered Microsoft Amsterdam data centre site

26Low

Armorsteal Unpacked: Breaking Down a Python Malware Kit That Steals Data and Mines Crypto

Seqrite · Campaign · 6 Nov, 11:43 UTC

1 sourceWe have an advisory

1 other reports

Armorsteal Unpacked: Breaking Down a Python Malware Kit That Steals Data and Mines Crypto Seqrite

Our advisory: Armorsteal Python malware kit steals data and mines crypto, Seqrite reports

26Low

Highland Council had over £3000 stolen in phishing attack , council papers reveal

inverness-courier.co.uk · Breach · 6 Nov, 07:15 UTC

1 sourceWe have an advisory

Our advisory: Highland Council phishing fraud diverted over £3000, Inverness Courier reports

26Low

Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs

The Hacker News · Campaign · 6 Nov, 05:58 UTC

1 sourceWe have an advisory

Our advisory: Control Web Panel (CWP) cwpsrv trojanized with CWPdoor Linux backdoor that hides commands from logs

26Low

Cybersecurity services in Calgary : How to protect your business from ransomware

itwire.com · Campaign · 5 Nov, 23:00 UTC

1 sourceWe have an advisory

Our advisory: iTWire guest writer says layered defences limit ransomware for Calgary firms

25Low

Qilin Ransomware Admin Identified as 36-Year-Old Russian Hacker After Cybercrime Probe

Cyber Security News · Campaign · 12 Nov, 13:42 UTC

1 source

25Low

Former US Marine Used Claude and Qwen for Pro-Russian Content, Leaked Files Show

The420.in · Breach · 12 Nov, 13:24 UTC

1 source

1 other reports

Former FBI Agent Stole ₹20 Crore in Cryptocurrency During Investigations, Misused Passwords Linked to 35 Cases The420.in

25Low

Hotel giant Wyndham exposed customer data after app security lapse

DataBreaches.net · Breach · 11 Nov, 15:04 UTC

2 sources

1 other reports

25Low

Fortinet2Shell Vulnerability Lets Hackers Execute Code on FortiClient Systems Through Malicious Websites

GBHackers · Vulnerability · 11 Nov, 13:21 UTC

2 sources

1 other reports

Critical Fortinet2Shell Vulnerability Enables RCE Attacks in FortiClient with FortiPAM Enabled Cyber Security News

25Low

Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords

The Hacker News · Breach · 11 Nov, 12:19 UTC

2 sources

1 other reports

Grok AI App Builder Exposes Over 35,000 Apps, Leaking Confidential Business Data and Passwords Cyber Security News

25Low

BOSH Engineering Private Limited: claimed by the qilin ransomware group on its leak site

RansomLook · Breach · 7 Nov, 19:27 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Qilin ransomware group claims BOSH Engineering Private Limited on leak site

25Low

J. J. Louro Pereira: claimed by the qilin ransomware group on its leak site

RansomLook · Breach · 7 Nov, 19:27 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Qilin ransomware group claims J. J. Louro Pereira on its leak site

25Low

AXE - EXPERTS: claimed by the qilin ransomware group on its leak site

RansomLook · Breach · 7 Nov, 18:30 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Qilin ransomware group claims AXE - EXPERTS on its leak site

25Low

Oak Green School: claimed by the qilin ransomware group on its leak site

RansomLook · Breach · 7 Nov, 13:30 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Qilin ransomware group claims Oak Green School on its leak site

25Low

Gandol Doors: claimed by the qilin ransomware group on its leak site

RansomLook · Breach · 7 Nov, 13:30 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Qilin ransomware group claims Gandol Doors on its leak site

25Low

Autohaus Arnold: claimed by the payload ransomware group on its leak site

RansomLook · Breach · 7 Nov, 13:30 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Payload ransomware group claims Autohaus Arnold on its leak site

25Low

Schroers Ingenieure: claimed by the payload ransomware group on its leak site

RansomLook · Breach · 7 Nov, 13:30 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Payload ransomware group claims Schroers Ingenieure on its leak site

25Low

Otto Stops: claimed by the payload ransomware group on its leak site

RansomLook · Breach · 7 Nov, 13:30 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Payload ransomware group claims Otto Stops on its leak site

25Low

Daeah E&C: claimed by the metaencryptor ransomware group on its leak site

RansomLook · Breach · 7 Nov, 13:30 UTC

1 sourceClaim, unconfirmedWe have an advisory

1 other reports

Hyundai E&C: claimed by the metaencryptor ransomware group on its leak site RansomLook

Our advisory: Metaencryptor ransomware group claims Hyundai E&C on its leak site

25Low

DAEWON Chemical: claimed by the metaencryptor ransomware group on its leak site

RansomLook · Breach · 7 Nov, 13:30 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: DAEWON Chemical claimed by metaencryptor ransomware group on leak site

25Low

Pekin Insurance: claimed by the metaencryptor ransomware group on its leak site

RansomLook · Breach · 7 Nov, 13:30 UTC

1 sourceClaim, unconfirmedWe have an advisory

1 other reports

Insurance Audit Services: claimed by the qilin ransomware group on its leak site RansomLook

Our advisory: Metaencryptor ransomware group claims Pekin Insurance on its leak site

25Low

Treuhand & Immobilien Abt AG: claimed by the rhysida ransomware group on its leak site

RansomLook · Breach · 7 Nov, 08:26 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Rhysida ransomware group claims Treuhand & Immobilien Abt AG on leak site

25Low

Kahler Automation: claimed by the anubis ransomware group on its leak site

RansomLook · Breach · 7 Nov, 01:21 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Anubis ransomware group claims Kahler Automation on its leak site

25Low

Comercial en Fletes México, S.A. de C.V.: claimed by the eclipse ransomware group on its leak site

RansomLook · Breach · 6 Nov, 21:25 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Eclipse ransomware group claims attack on Comercial en Fletes México

25Low

Ligne Roset: claimed by the akira ransomware group on its leak site

RansomLook · Breach · 6 Nov, 16:25 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Ligne Roset: Akira ransomware group claims attack on its leak site, according to RansomLook

25Low

Conecuh Sausage Company Inc: claimed by the interlock ransomware group on its leak site

RansomLook · Breach · 6 Nov, 15:27 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Conecuh Sausage Company Inc: Interlock ransomware group claims attack on leak site

25Low

Istituto Borgo: claimed by the shiba ransomware group on its leak site

RansomLook · Breach · 6 Nov, 13:21 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Istituto Borgo: shiba ransomware group claims attack on its leak site

25Low

Dompé Farmaceutici S.p.A.: claimed by the n0n ransomware group on its leak site

RansomLook · Breach · 6 Nov, 12:26 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: n0n ransomware group claims Dompé Farmaceutici on its leak site

25Low

Cogent Biosciences, Inc.: claimed by the n0n ransomware group on its leak site

RansomLook · Breach · 6 Nov, 12:26 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Cogent Biosciences listed by n0n ransomware group, RansomLook reports

25Low

Resource Consultants: claimed by the n0n ransomware group on its leak site

RansomLook · Breach · 6 Nov, 12:26 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: n0n ransomware group claims Resource Consultants on its leak site

25Low

Rotstein & Shiffman: claimed by the qilin ransomware group on its leak site

RansomLook · Breach · 6 Nov, 09:25 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Qilin ransomware group claims Rotstein & Shiffman on its leak site

25Low

Max Fashion: claimed by the n0n ransomware group on its leak site

RansomLook · Breach · 6 Nov, 02:25 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Max Fashion claimed by n0n ransomware group on its leak site, per RansomLook

25Low

Scry Analytics: claimed by the n0n ransomware group on its leak site

RansomLook · Breach · 6 Nov, 02:25 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Scry Analytics claimed by n0n ransomware group on its leak site, per RansomLook

25Low

ZipAI: claimed by the vexy ransomware group on its leak site

RansomLook · Breach · 6 Nov, 00:23 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Vexy ransomware group claims ZipAI on its leak site, RansomLook reports

24Low

PAN-SA-2026-0014 Chromium: Monthly Vulnerability Update (November 2026) (Severity: HIGH)

Palo Alto PSIRT · Vulnerability · 11 Nov, 17:00 UTC

1 sourceVendor or government

24Low

Claude Code AI Discovers Technique to Turn Dormant Model Neurons Into Hidden Malware Triggers

Cyber Security News · Campaign · 11 Nov, 11:57 UTC

2 sources

1 other reports

Microsoft researchers demonstrate hidden backdoor technique for AI agents Help Net Security

24Low

Critical Fortinet Vulnerabilities Allow Unauthenticated Attackers to Execute Remote Code on FortiManager and FortiAnalyzer

GBHackers · Vulnerability · 11 Nov, 06:07 UTC

2 sources

1 other reports

Critical Fortinet Flaws Expose FortiManager and FortiAnalyzer to Remote Code Execution Without Login Cyber Security News

24Low

Smith, Gambrell & Russell, LLP: claimed by the leakeddata ransomware group on its leak site

RansomLook · Breach · 5 Nov, 21:22 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Smith, Gambrell & Russell: leakeddata ransomware group claims attack on leak site

24Low

Omni Hotels & Resorts: claimed by the redact ransomware group on its leak site

RansomLook · Breach · 5 Nov, 17:22 UTC

1 sourceClaim, unconfirmedWe have an advisory

Our advisory: Omni Hotels & Resorts claimed by redact ransomware group, per RansomLook

23Low

Hong Kong Sogo data breach puts personal information of 820,000 members at risk

DataBreaches.net · Breach · 12 Nov, 15:42 UTC

1 source

23Low

Minnesota Epilepsy Group Falls Victim to Second 2026 Cyberattack

HIPAA Journal · Breach · 12 Nov, 15:24 UTC

1 source

23Low

Poland takes its national e-government platform offline after a cyberattack

Security Affairs · Breach · 12 Nov, 06:10 UTC

1 source

23Low

Germany Prepares Legal Framework for Cyberattack Response

econotimes.com · Breach · 12 Nov, 03:45 UTC

1 source

23Low

Cyberattack Defaces Ukraine Ukrinform Website and Alters Its X Profile

econotimes.com · Breach · 12 Nov, 03:00 UTC

1 source

23Low

How AI SAST Traced Data Flows to Uncover Six OpenClaw Vulnerabilities | Endor Labs

Endor Labs · Vulnerability · 11 Nov, 02:22 UTC

2 sources

1 other reports

CISA Adds Six Known Exploited Vulnerabilities to Catalog CISA advisories

23Low

China dismisses a spy plot claim involving Nvidia CEO Jensen Huang as smear campaign

The Hindu · Campaign · 9 Nov, 09:34 UTC

2 sources

1 other reports

China dismisses spy plot claim involving Nvidia CEO Jensen Huang as smear campaign ET Tech

22Low

186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers

The Hacker News · Campaign · 12 Nov, 15:15 UTC

1 source

22Low

Europol Disrupts Three Malware Networks, Identifies 6.4 Million Stolen Credentials

The420.in · Breach · 12 Nov, 15:06 UTC

1 source

22Low

Attackers breached 10 organizations with an open-source AI pentest framework

Help Net Security · Breach · 12 Nov, 15:00 UTC

1 source

22Low

Predator, Pegasus and Graphite: Governments Accused of Spyware Abuse Face Little Accountability

Security Affairs · Campaign · 12 Nov, 14:53 UTC

1 source

22Low

Hijacked email accounts complicate investigations into European bomb hoaxes

The Record · Breach · 12 Nov, 14:45 UTC

1 source

22Low

Apify rotates API tokens, prompts 2FA resets after breach

BleepingComputer · Breach · 12 Nov, 14:36 UTC

1 source

22Low

Microsoft Confirms Installation Errors in Windows 11 November 2026 Security Update

The420.in · Vulnerability · 12 Nov, 14:29 UTC

1 source

22Low

Chrome, Firefox Updates Patch Over 180 Vulnerabilities

SecurityWeek · Vulnerability · 12 Nov, 13:42 UTC

1 source

22Low

Lenovo Warns of High-Severity Server Flaw That Restores Default Root Credentials After Reset

Cyber Security News · Vulnerability · 12 Nov, 13:37 UTC

1 source

22Low

Hackers Abuse Cruciferra Malware-as-a-Service to Conceal Infostealers and Remote Access Trojans

Cyber Security News · Campaign · 12 Nov, 12:48 UTC

1 source

22Low

Who Runs the Ransomware Group Qilin?

DataBreaches.net · Campaign · 12 Nov, 12:37 UTC

1 source

22Low

JPN: Muji operator apologizes for data breach

DataBreaches.net · Breach · 12 Nov, 12:36 UTC

1 source

22Low

Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs

The Hacker News · Breach · 12 Nov, 12:09 UTC

1 source

22Low

Google Chrome Fixes 83 Security Flaws, Including 5 Critical Use-After-Free Vulnerabilities

GBHackers · Vulnerability · 12 Nov, 12:06 UTC

1 source

22Low

Dark Web Profile: n0n Ransomware

SOCRadar · Campaign · 12 Nov, 12:02 UTC

1 source

22Low

New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access

The Hacker News · Vulnerability · 12 Nov, 11:51 UTC

1 source

22Low

Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign

The Hacker News · Campaign · 12 Nov, 11:51 UTC

1 source

22Low

Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise

Dark Reading · Breach · 12 Nov, 00:00 UTC

1 source

22Low

Adobe Monthly Security Update (November 2026)

HKCERT · Vulnerability · 11 Nov, 03:00 UTC

1 sourceVendor or government

22Low

Fortinet Products Multiple Vulnerabilities

HKCERT · Vulnerability · 11 Nov, 03:00 UTC

1 sourceVendor or government

22Low

Microsoft Monthly Security Update (November 2026)

HKCERT · Vulnerability · 11 Nov, 03:00 UTC

1 sourceVendor or government

22Low

Iran rejects France accusation of involvement in cyberattack

prokerala.com · Breach · 11 Nov, 02:30 UTC

1 source

21Low

Zoom Fixes Critical Windows Vulnerability Allowing Privilege Escalation

Security Affairs · Vulnerability · 12 Nov, 12:33 UTC

3 sourcesVendor or government

CVE-2026-0324 CVE-2026-0327

2 other reports

21Low

PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution

The Hacker News · Vulnerability · 12 Nov, 11:33 UTC

1 source

21Low

Stolen Claude API keys can turn Claude Code into a remote-controlled implant

Help Net Security · Breach · 12 Nov, 11:00 UTC

1 source

21Low

FBI agent stole $2.47m in crypto from criminal wallets

Malwarebytes · Campaign · 12 Nov, 09:03 UTC

1 source

21Low

Suspected Chinese Malware Supplier Tied to Three Hacking Campaigns

Infosecurity Magazine · Campaign · 11 Nov, 16:00 UTC

1 source

21Low

[Control systems] Hitachi security advisory (AV26-1138)

CCCS Canada · Vulnerability · 10 Nov, 15:43 UTC

1 sourceVendor or government

21Low

November 2026 Security Update

Ivanti Security · Vulnerability · 10 Nov, 15:33 UTC

1 sourceVendor or government

21Low

SAP security advisory, November 2026 monthly rollup (AV26-1137)

CCCS Canada · Vulnerability · 10 Nov, 15:31 UTC

1 sourceVendor or government

21Low

Warning: N-able zero-day vulnerabilities can lead to full compromise!

CERT-BE · Breach · 10 Nov, 15:07 UTC

1 sourceVendor or government

21Low

Ph: NPC receives data breach reports from 10 agencies

DataBreaches.net · Breach · 10 Nov, 12:47 UTC

2 sources

1 other reports

NPC probing government data leaks philstar.com

21Low

loanDepot, Inc. discloses a cyber incident in an SEC Form 8-K filing

SEC EDGAR · Breach · 9 Nov, 00:00 UTC

1 sourceVendor or government

20Low

GhostMap Android Flaw Can Leave Phones Stuck in Crash Loop

Hackread · Vulnerability · 12 Nov, 07:33 UTC

1 source

20Low

Tusla faces growing demand for secure care places for girls at risk of exploitation

thejournal.ie · Vulnerability · 12 Nov, 07:00 UTC

1 source

20Low

Does Coke New Ad Feature Exploited Workers for a PR Stunt ?

boston.com · Vulnerability · 12 Nov, 06:45 UTC

1 source

20Low

City Power flags copper theft and prepaid meter breach at Randburg imbizo

citizen.co.za · Breach · 12 Nov, 06:45 UTC

1 source

20Low

Can Agentic AI Investigate a Phishing Campaign? Evidence Walkthrough

Cyble · Campaign · 12 Nov, 06:20 UTC

1 source

20Low

Cyber Attacks Remain a Third Higher Than Last Year as AI - Powered Extortion Group Breaks into the Top Three

itwire.com · Breach · 12 Nov, 04:00 UTC

1 source

20Low

Azul 2026 AI Vulnerability Gap Report : 85 % of Organisations Running Java Have Had an Incident , Suspected Incident or Near Miss Due to Slow Patching

itwire.com · Vulnerability · 12 Nov, 04:00 UTC

1 source

20Low

Tenable Research : November 2026 Patch Tuesday

itwire.com · Vulnerability · 12 Nov, 04:00 UTC

1 source

20Low

2013 breach at Russian cybercrime forum resurfaces with millions of victims’ credentials

DataBreaches.net · Breach · 11 Nov, 14:12 UTC

1 source

20Low

French bank Credit Mutuel Arkea says €100m missing after cyberattack

DataBreaches.net · Breach · 11 Nov, 14:11 UTC

1 source

20Low

Poland shuts down government services platform ePUAP following cyberattack

The Record · Breach · 11 Nov, 13:18 UTC

1 source

20Low

Authentication bypass by spoofing

Fortinet PSIRT · Vulnerability · 10 Nov, 08:00 UTC

1 sourceVendor or government

20Low

Authentication bypass by primary weakness

Fortinet PSIRT · Vulnerability · 10 Nov, 08:00 UTC

1 sourceVendor or government

20Low

Authentication bypass

Fortinet PSIRT · Vulnerability · 10 Nov, 08:00 UTC

1 sourceVendor or government

20Low

Apple Products Multiple Vulnerabilities

HKCERT · Vulnerability · 10 Nov, 03:00 UTC

1 sourceVendor or government

20Low

Google Chrome Multiple Vulnerabilities

HKCERT · Vulnerability · 10 Nov, 03:00 UTC

1 sourceVendor or government

20Low

States, IT Services Firms Reach $10M Settlement in Data Hack

Bank Info Security · Breach · 10 Nov, 00:58 UTC

2 sources

1 other reports

States , IT Services Firms Reach $10M Settlement in Data Hack govinfosecurity.com

20Low

Jailbroken AI Agent Ran Two-Week Attack on European Telecom

Infosecurity Magazine · Breach · 9 Nov, 16:00 UTC

2 sources

1 other reports

Jailbroken DeepSeek AI Agent Breaches European Telecom and Accesses Millions of Patient Records Cyber Security News

20Low

Brazilian Credit Guarantor Fund Data Breach Affecting PII and Payout Data

fgc.org.br · Breach · 5 Nov, 23:32 UTC

2 sources

1 other reports

Hackers Exploit ChatGPT’s Popularity With Fake Billing Notices That Target Credit Cards and OTPs Cyber Security News

How stories are scored

Each story gets a score from 0 to 100. A story that names a CVE is scored mostly on exploitation: whether CISA lists it as exploited, its EPSS attack forecast, whether exploit code is public and its CVSS severity, plus how many independent sources report it, how recent it is and whether we have written it up. A story with no CVE, such as a breach or a campaign, is scored on reach, sources, recency, countries named and whether we cover it. Flash is 75 and up, High 55 and up, Medium 35 and up. Stories scoring under 20 are counted but not listed. A claim posted on a leak site counts for little until a newsroom or the victim confirms it.

Want these in Slack, Teams or Discord? Every level has its own feed.

Supporting partners