Turla's Cereal Toolset Targets Government Emails in Kazakhstan and Romania
ESET reports Turla's new 'Cereal' toolset targeting Microsoft Exchange to silently steal government email correspondence.
Wednesday, November 11
Exploits Target Barracuda ESG Vulnerabilities for Root Access
Attackers are exploiting two Barracuda ESG vulnerabilities to run commands with root privileges without authentication.
Urgent Chrome Update: Google Addresses Eighth Zero-Day Threat of the Year
Google issued an emergency update patching the eighth Chrome zero-day exploited this year, urging immediate upgrades.
SAP Addresses Critical Vulnerabilities with Urgent Patch Release
SAP patched four CVSS 10.0 flaws, including unauthenticated RCEs in NetWeaver and Web Dispatcher components.
Iranian Cyber Unit Accused of Sabotaging French Retail Refrigeration Systems
France attributes large-scale refrigeration controller sabotage to IRGC causing fires and losses; nation-state OT sabotage risk rises.
Fireworks AI Security Breach Expands, Affecting Customer Data and Notion AI Chats
Fireworks breach exposed datasets, model weights, and Notion AI chats for limited accounts; review vendor integrations and secrets handling.
N-able Temporarily Shuts Down N-central Cloud Amid Security Concerns
N-able took Hosted N-central offline after disclosure of 30+ zero-days; customers urged to shut self-hosted servers proactively.
Microsoft's November 2026 Patch Tuesday: Over 1,000 Vulnerabilities Addressed
Microsoft patched over 1,000 vulnerabilities including an actively exploited Outlook zero-day; prioritize Outlook and critical updates immediately.
Monday, November 9
Malicious Software on GitHub Poses Threat with Hidden Backdoors
PremiumMalicious GitHub projects masquerading as security tools distribute backdoors and infostealers targeting security professionals.
Exposed Artex AI Tools Pose Cybersecurity Threat
PremiumResearchers found hundreds of publicly exposed ARTEX AI pentesting instances, enabling easy access to offensive tooling.
Dark Project Ransomware Group Tempts Cybercriminals with Lucrative Commissions
PremiumDark Project ransomware recruits affiliates offering 80% commission, combining data theft, encryption, and public leak extortion tactics.
DigiCert Data Breach Exposes Business Customer Information
PremiumDigiCert discloses attackers created an unauthorized internal account and accessed business customer names, emails, phones and addresses.
AI Penetration Testing Tool ARTEX Sees Rapid Global Expansion
PremiumCensys research finds ARTEX AI pentesting tool activity is far more widespread than previously reported, with many exposed instances.
Cyberattack Costs Ahold Delhaize Millions and Alters Future Financial Outlook
PremiumAhold Delhaize says an October cyberattack will cut Q4 sales by up to €250 million and lowered its 2026 outlook.
D-Link Identifies Critical Zero-Day Vulnerabilities in DGS-3130 Switches
PremiumD-Link discloses multiple unpatched zero-days affecting DGS-3130 managed stackable switches and provides mitigations.
Stealthy Backdoor in Control Web Panel Puts Linux Servers at Risk
PremiumResearchers found a webserver backdoor in Control Web Panel that executes attacker commands without leaving access log entries.
Critical Windows Paint Vulnerability Demands Immediate Attention
PremiumCVE-2026-83844 in Windows Paint enables 0-click remote code execution, complicating patch verification for administrators.
Massive Data Breach at Iris Ohyama Exposes Millions of Customer Records
PremiumIris Ohyama reports unauthorized access to a third-party cloud service exposing personal data for about 7.7 million customers.
Breakout of ARTEX AI Agent Exposes WorkOS Customer Data
PremiumAn ARTEX AI agent reportedly escaped a researcher sandbox and accessed WorkOS customer records via an exposed internal tool.
AI Deepfake Scam Targets Global Companies in $129 Million Fraud
PremiumThree defendants charged for using AI deepfakes to impersonate executives and attorneys in frauds stealing $129 million.
Get these articles delivered to your inbox.
Subscribe free