{"refreshed_at":"2026-11-09T15:48:40+00:00","items":[{"id":"82ab336fed5a0b35","title":"The Biggest Threat to Your GRC Job Isn’t AI. It’s Ignoring AI.","link":"https://www.bleepingcomputer.com/news/security/the-biggest-threat-to-your-grc-job-isnt-ai-its-ignoring-ai/","date":"2026-11-09T15:05:15+00:00","summary":"AI agents are taking over routine governance, risk, and compliance tasks, forcing GRC professionals to rethink the skills needed to stay relevant. Anecdotes examines three essential skills for the AI-driven GRC workplace: data literacy,…","source":"BleepingComputer"},{"id":"47fb58a628fdcfe2","title":"FBI agent stole $2.5 million in crypto from hackers under investigation","link":"https://www.bleepingcomputer.com/news/security/fbi-agent-stole-25-million-in-crypto-from-hackers-fraud-victims/","date":"2026-11-09T14:34:03+00:00","summary":"A former FBI agent has pleaded guilty to stealing nearly $2.5 million from the wallets of fraud victims and nation-state hackers under investigation. [...]","source":"BleepingComputer"},{"id":"7bdf0c6dc5dcaaf0","title":"Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia","link":"https://thehackernews.com/2026/11/bitter-hackers-deploy-new-paprat.html","date":"2026-11-09T14:31:29+00:00","summary":"The South Asian cyber espionage group known as Bitter (aka APT-C-08, APT-Q-37, Hazy Tiger, Orange Yali, T-APT-17, and TA397) has been observed targeting South Asian organizations with a previously unreported remote access trojan called…","source":"The Hacker News"},{"id":"7ef80ee6e03abb63","title":"US bans MEXC crypto exchange over sanctions evasion, cybercrime links","link":"https://www.bleepingcomputer.com/news/security/us-bans-mexc-crypto-exchange-over-sanctions-evasion-cybercrime-links/","date":"2026-11-09T13:28:56+00:00","summary":"The US Department of the Treasury has cut off the MEXC Global crypto exchange from the US financial system over sanctions evasion and links with cybercrime gangs. [...]","source":"BleepingComputer"},{"id":"2c42fb6170314159","title":"⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More","link":"https://thehackernews.com/2026/11/weekly-recap-sshole-exploited-apt-root.html","date":"2026-11-09T13:28:25+00:00","summary":"A system doesn't always need a complicated bug to let someone in. Sometimes, a blank password is enough. That's one of the bigger stories this week. And it gets worse when the tools meant to keep systems updated or running safely become…","source":"The Hacker News"},{"id":"53877e7ba1bfab36","title":"Ukraine dismantles crypto scam network that stole €4.3 million","link":"https://www.bleepingcomputer.com/news/security/ukraine-dismantles-crypto-scam-network-that-stole-43-million/","date":"2026-11-09T12:16:13+00:00","summary":"Ukrainian law enforcement arrested four suspects in a case involving the theft of more than €4.3 million using a network of cryptocurrency investment scam call centers. [...]","source":"BleepingComputer"},{"id":"c5154d08fadfed61","title":"Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars","link":"https://thehackernews.com/2026/11/default-adminadmin-server-password.html","date":"2026-11-09T11:27:53+00:00","summary":"The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock the doors and start the…","source":"The Hacker News"},{"id":"a02fb0af291601b9","title":"Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety","link":"https://thehackernews.com/2026/11/web3auth-flaw-exploited-to-steal-keplr.html","date":"2026-11-09T10:56:25+00:00","summary":"Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used a security flaw at that…","source":"The Hacker News"},{"id":"62af4291e17cf20f","title":"LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks","link":"https://thehackernews.com/2026/11/lnbits-urges-all-operators-to-shut-down.html","date":"2026-11-09T10:01:21+00:00","summary":"Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said yesterday. It has several security fixes to release and asked operators to be…","source":"The Hacker News"},{"id":"e8082cc54dfbdb4b","title":"Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records","link":"https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html","date":"2026-11-09T09:01:50+00:00","summary":"A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis's Threat Research Unit said last week. The agents also found a Taipei fire department platform exposing patient…","source":"The Hacker News"},{"id":"a2c922a06d73cc00","title":"Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting Room","link":"https://thehackernews.com/2026/11/former-openai-engineer-pleads-not.html","date":"2026-11-09T07:05:48+00:00","summary":"The OpenAI engineer who was arrested and charged last month for planting a covert audio recording device in the company's office has pleaded not guilty. According to reports from Bloomberg and CNBC, Saudi national Abdulrahman Alfozan made…","source":"The Hacker News"},{"id":"df6a1e5a88d8a5b7","title":"U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses","link":"https://thehackernews.com/2026/11/us-agencies-warn-refrigeration.html","date":"2026-11-09T06:15:10+00:00","summary":"U.S. government agencies have warned that threat actors are actively targeting industrial refrigeration and cold-chain monitoring systems globally with an aim to cause service disruptions, fire hazards, and loss of inventory. \"The actors…","source":"The Hacker News"},{"id":"3d5dfb277e1d458f","title":"CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation","link":"https://thehackernews.com/2026/11/cisa-flags-sonicwall-sonicos-mfa-bypass.html","date":"2026-11-09T06:05:24+00:00","summary":"The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports that it said may have been…","source":"The Hacker News"},{"id":"840fc9184c683327","title":"Iris Ohyama data cloud breach exposes info of 7.7 million customers","link":"https://www.bleepingcomputer.com/news/security/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers/","date":"2026-11-08T15:43:08+00:00","summary":"Japanese manufacturer Iris Ohyama, the operator of the Iris Plaza shopping platform, disclosed that personal information belonging to about 7.7 million people may have been exposed after unauthorized access to a third-party cloud service…","source":"BleepingComputer"},{"id":"ded94754be202b29","title":"Hackers pull off $133 million French bank heist via service provider","link":"https://www.bleepingcomputer.com/news/security/hackers-pull-off-133-million-french-bank-heist-via-service-provider/","date":"2026-11-07T15:25:35+00:00","summary":"French cooperative bank Crédit Mutuel Arkéa was targeted in a cyberattack that enabled fraudulent transactions of up to $133 million, forcing it to respond by suspending certain systems.v [...]","source":"BleepingComputer"},{"id":"5a765cf499c2e694","title":"CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands","link":"https://www.bleepingcomputer.com/news/security/ctm360-exposes-fake-gift-card-scams-exploiting-trusted-brands/","date":"2026-11-07T14:10:19+00:00","summary":"Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger unwanted subscriptions. CTM360 reveals how these campaigns use deceptive verification…","source":"BleepingComputer"},{"id":"804a43c3361e7807","title":"Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub","link":"https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html","date":"2026-11-07T06:44:17+00:00","summary":"Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. When a user selects \"Yes, and don't ask again,\" Anthropic's AI coding assistant…","source":"The Hacker News"},{"id":"e115b44724e254be","title":"ARTEX abuse expands as cybercriminals target financial sector","link":"https://www.microsoft.com/en-us/security/blog/2026/11/06/artex-abuse-expands-as-cybercriminals-target-financial-sector/","date":"2026-11-07T02:44:34+00:00","summary":"In October 2026, the financially motivated threat actor Storm-3358 began targeting organizations in the financial sector using the agentic AI offensive framework ARTEX. The post ARTEX abuse expands as cybercriminals target financial…","source":"Microsoft Security Blog"},{"id":"ca1a9396bb6596ea","title":"SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks","link":"https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/","date":"2026-11-07T00:00:55+00:00","summary":"SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. [...]","source":"BleepingComputer"},{"id":"b99b441690fc8bf8","title":"Runaway AI hacking agent behind WorkOS breach after escaping sandbox","link":"https://www.bleepingcomputer.com/news/security/runaway-ai-hacking-agent-behind-workos-breach-after-escaping-sandbox/","date":"2026-11-06T22:27:25+00:00","summary":"WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing environment and unintentionally attacked…","source":"BleepingComputer"},{"id":"ba147c5fc5c98202","title":"OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs","link":"https://www.bleepingcomputer.com/news/security/openais-new-gpt-6-cyber-ai-finds-81-firefox-flaws-948-linux-bugs/","date":"2026-11-06T20:24:19+00:00","summary":"OpenAI has revealed GPT-6 Cyber, a new artificial intelligence model that has discovered 81 previously unknown high-severity Firefox vulnerabilities and developed working exploits for 948 distinct Linux kernel flaws. [...]","source":"BleepingComputer"},{"id":"a97be9095b72e1db","title":"Fake security tools on GitHub push backdoors and infostealers","link":"https://www.bleepingcomputer.com/news/security/fake-security-tools-on-github-push-backdoors-and-infostealers/","date":"2026-11-06T18:46:52+00:00","summary":"Cybersecurity professionals are being targeted with infected security projects on GitHub that deploy a backdoor and information stealer malware. [...]","source":"BleepingComputer"},{"id":"c4daeac5c98ce27b","title":"QNAP says hackers breaching NAS devices in Plex2Shell attacks","link":"https://www.bleepingcomputer.com/news/security/qnap-says-hackers-breaching-nas-devices-in-plex2shell-attacks/","date":"2026-11-06T17:04:23+00:00","summary":"QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center, as hackers are exploiting the Plex2Shell vulnerability chain. [...]","source":"BleepingComputer"},{"id":"9fe769e3c933c11e","title":"Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time","link":"https://thehackernews.com/2026/11/installing-fix-for-exploited-wordpress.html","date":"2026-11-06T16:08:38+00:00","summary":"Some WordPress sites can still be attacked while they install the fix for an actively exploited flaw, according to Umut Bayram, the Picus Security researcher who found it. The update that installs the fix still unpacks its files using the…","source":"The Hacker News"},{"id":"af6d1b8b9d253e74","title":"Veeam warns of Software Appliance boot failures on AMD EPYC hosts","link":"https://www.bleepingcomputer.com/news/security/veeam-software-appliance-vms-fail-to-boot-on-amd-epyc-hosts/","date":"2026-11-06T15:25:31+00:00","summary":"​Veeam warned customers about boot failures affecting Software Appliance virtual machines (VMs) on hosts with AMD EPYC processors. [...]","source":"BleepingComputer"},{"id":"a40dff3d749a64ac","title":"Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot","link":"https://thehackernews.com/2026/11/hackers-exploited-openssh-sshole-flaw.html","date":"2026-11-06T15:21:49+00:00","summary":"Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian. The vulnerability, tracked as CVE-2026-123158 (CVSS…","source":"The Hacker News"},{"id":"3647bbef0072cccd","title":"IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It","link":"https://www.bleepingcomputer.com/news/security/imsi-vs-imei-what-your-phone-broadcasts-and-who-can-read-it/","date":"2026-11-06T15:00:10+00:00","summary":"IMSI and IMEI are IDs your phone shares with networks. Learn how they differ, how attackers get them, and why rotating your IMSI blunts tracking. [...]","source":"BleepingComputer"},{"id":"17e04fbcf2b3d16d","title":"OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits","link":"https://thehackernews.com/2026/11/openai-launches-gpt-6-cyber-after-ai.html","date":"2026-11-06T14:58:32+00:00","summary":"OpenAI on Thursday unveiled GPT‑6 Cyber, which it described as a major step forward in security research that brings together stronger cybersecurity capabilities with a step-change improvement in model alignment. The new model is \"more…","source":"The Hacker News"},{"id":"f8e9629a67be56c3","title":"Chainalysis says breach exposed credentials for all customers","link":"https://www.bleepingcomputer.com/news/security/chainalysis-says-breach-exposed-credentials-for-all-customers/","date":"2026-11-06T14:17:07+00:00","summary":"Blockchain intelligence firm Chainalysis says a recent attack on its systems and internal tools has exposed credentials and live tokens for all customers. [...]","source":"BleepingComputer"},{"id":"649e0d8b078ebcc3","title":"Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It","link":"https://thehackernews.com/2026/11/microsoft-paint-rce-fix-now-available.html","date":"2026-11-06T12:06:43+00:00","summary":"A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates. The fixed build, 11.2609.401.0, was the newest Paint…","source":"The Hacker News"},{"id":"cea41b0360f6d357","title":"Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers","link":"https://thehackernews.com/2026/11/malicious-browser-extensions-could-use.html","date":"2026-11-06T12:06:35+00:00","summary":"A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person's computer, researchers at Forever Security, an endpoint security company, showed in a test. The attack needs Dispatch, a Claude feature…","source":"The Hacker News"},{"id":"e2845eccbac1628b","title":"Threat actors use agentic AI tooling to find and abuse exposed secrets","link":"https://www.microsoft.com/en-us/security/blog/2026/11/05/threat-actors-use-agentic-ai-tooling-to-find-and-abuse-exposed-secrets/","date":"2026-11-05T23:46:50+00:00","summary":"Microsoft Threat Intelligence has observed threat actors using the agentic offensive security framework ARTEX to search GitHub for OAuth application secrets, which can be used to compromise the associated OAuth application and perform…","source":"Microsoft Security Blog"},{"id":"ccc66eb2563172ef","title":"New investments to reduce on-premises security risk","link":"https://techcommunity.microsoft.com/blog/microsoft-security-blog/new-investments-to-reduce-on-premises-security-risk/4570381","date":"2026-11-05T17:10:14+00:00","summary":"We’re announcing a new on-premises security initiative, bringing together guidance, migration, and product investments. The post New investments to reduce on-premises security risk appeared first on Microsoft Security Blog.","source":"Microsoft Security Blog"},{"id":"1a39a444dba6b797","title":"​​​​What’s new in Microsoft Security: November 2026","link":"https://www.microsoft.com/en-us/security/blog/2026/11/05/whats-new-in-microsoft-security-november-2026/","date":"2026-11-05T17:00:00+00:00","summary":"Microsoft Security’s November 2026 updates strengthen AI agent security, least privilege, threat protection, and exposure management. The post ​​​​What’s new in Microsoft Security: November 2026 appeared first on Microsoft Security Blog.","source":"Microsoft Security Blog"},{"id":"302fe04b95089677","title":"Email threat landscape: Q3 2026 trends and insights","link":"https://www.microsoft.com/en-us/security/blog/2026/11/05/email-threat-landscape-q3-2026-trends-and-insights/","date":"2026-11-05T16:00:00+00:00","summary":"Microsoft Threat Intelligence observed a sharp rise in email-based phishing activity at the end of Q3 2026 (July – September), even as QR code phishing declined, CAPTCHA-gated phishing recovered, and malicious messages spoofing familiar…","source":"Microsoft Security Blog"},{"id":"49bf8b366c47018c","title":"Want to Rent an Internet Address at the White House?","link":"https://krebsonsecurity.com/2026/11/want-to-rent-an-internet-address-at-the-white-house/","date":"2026-11-05T04:36:17+00:00","summary":"Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today. One of the proxy services…","source":"Krebs on Security"},{"id":"86c38c1e82c9eaca","title":"Fake-download campaign uses trojanized installers to deliver monetization payloads","link":"https://www.microsoft.com/en-us/security/blog/2026/11/03/fake-download-campaign-uses-trojanized-installers-deliver-monetization-payloads/","date":"2026-11-03T17:32:47+00:00","summary":"Microsoft Threat Intelligence tracks a fake-download campaign that uses trojanized Inno installers to deliver multiple monetization offers and provides detection and investigation guidance across the complete installer session. The post…","source":"Microsoft Security Blog"},{"id":"263a6ac2e13a9494","title":"Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms  ","link":"https://www.microsoft.com/en-us/security/blog/2026/11/03/microsoft-named-a-leader-in-the-2026-gartner-magic-quadrant-for-ai-agent-management-platforms/","date":"2026-11-03T17:00:00+00:00","summary":"Read why Gartner named Microsoft a Leader in the inaugural 2026 Magic Quadrant for AI Agent Management Platforms. The post Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms appeared first on…","source":"Microsoft Security Blog"},{"id":"ffbe770cafe2be84","title":"Cyber chief: UK facing AI-powered attacks on critical infrastructure within two years","link":"https://www.ncsc.gov.uk/news/cyber-chief-uk-facing-ai-powered-attacks-on-critical-infrastructure-in-two-years","date":"2026-11-03T12:00:00+00:00","summary":"The NCSC warns that ‘tech on the cheap’ has left UK organisations exposed to AI uncovering and exploiting longstanding cyber security weaknesses and calls for urgent investment in resilience.","source":"NCSC (UK)"},{"id":"c8ac0b309f86dbbb","title":"Artificial intelligence and cyber intrusion","link":"https://www.ncsc.gov.uk/report/artificial-intelligence-and-cyber-intrusion","date":"2026-11-03T12:00:00+00:00","summary":"An NCSC assessment that examines current AI-enabled threat trends and projections of the threat landscape to 2028.","source":"NCSC (UK)"}]}