IT Security News: Afternoon roundup, 2026-11-10 Summary Ten days after the Amadeus breach first surfaced, the period's stories cluster around three threads: supply-chain and third-party exposure, AI platforms and their tooling becoming both targets and security products, and governments and…
Scans for Sshole Vulnerability (CVE-2026-123158), (Sun, Nov 8th)
Our honeypots use “Cowrie” to collect SSH data. With the emergence of the “sshole” vulnerability last week, we are now seeing an increase in attempts to…
AI Agent Security Requires More Than Instructions, FireMon Expert Warns
FireMon expert Dan Rheault explains how organizations can secure autonomous AI agents through network access controls, least privilege, and containment…
Barracuda Patches Two Security Flaws That Could Let Attackers Take Over Email Security Gateways
Experts have shown how two vulnerabilities in Barracuda’s Email Security Gateway can be chained to execute arbitrary commands with root privileges without…
US Army member arrested in UK over allegations of spying for Russia
The unnamed soldier was arrested by British counterterrorism police “working closely” with U.S. authorities, including the FBI and the military, the…
Mullvad shuts down its public encrypted DNS service: switch to Quad9 or another resolver now
Mullvad’s free public encrypted DNS service, the DNS over HTTPS and DNS over TLS resolvers at dns. Thank you for being a Ghacks reader.
Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon
Forks of the open source Artex framework, along with 45 similar pen-testing tools, remain capable of executing credential attacks and cloud breaches at…
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Researcher finds 35,000 Grok Build apps wide open to anyone who looked for them.
Bogotá Investigates Possible Health Agency Email Compromise Linked to European Airport Bomb Hoax
Authorities in Bogota, Colombia, have opened an investigation into whether an email account used by a public health agency was accessed without…
Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row
An exploited Outlook vulnerability drew most of the attention in Microsoft’s latest Patch Tuesday, which listed 1,093 bugs total.
Data Sovereignty Is Essential for India’s Digital Infrastructure, Says RBI Governor
Sanjay Malhotra, Governor of the Reserve Bank of India (RBI), emphasized the significance of maintaining sovereign data centers in order to safeguard…
Russia-Linked APT Turla Turned Exchange Servers Into Their Own Control Room
ESET found Russia-Linked APT group Turla using a new toolset, dubbed Cereal, on government Exchange servers in Kazakhstan and Romania. ESET Research…
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-20320…
Japanese furniture giant Nitori says hackers stole 37.6M customer records
Nitori, a major Japanese furniture and home accessories retailer, discovered that an attacker accessed a system on its network and may have stolen 37.62…
Checkmarx Appoints Kobi Sivilya as Chief Information Security Officer
Sivilya brings deep cybersecurity and technology leadership to Checkmarx as AI transforms software development.
SIM Swapping – How a Bribe Bypassed AT&T’s Security
SIM swapping explained through Michael Terpin’s case: how a bribe at an AT&T retailer moved his number, what he lost, and the FCC rules that followed.
Near AI Breach Exposes User Details and Data From 18 AI Agents
Jose Antonio Lanz reports: Near AI has disclosed a breach that exposed account information belonging to about 100 users and data from 18 AI agents after…
Microsoft releases Windows 10 KB5131096 extended security update
Microsoft released the Windows 10 KB5131096 extended security update, which includes this month’s November 2026 Patch Tuesday fixes and a few bug fixes…
How to Assess OT Incident Response Preparedness
Cloud Range’s free 28-question OT Cyber Readiness Assessment helps organizations identify gaps in operational technology (OT) incident response.
IT Security News Hourly Summary 2026-11-10 22h : 13 posts
13 posts published in the last hour 20:32BYOD Ransomware Group Allegedly Claims Toyota Data Breach 20:32Microsoft November 2026 Patch Tuesday Fixes 1,093 Vulnerabilities, Including Outlook Zero-Day 20:31CVE-2026-124848 – Incorrect default permissions on session transcripts and prompt history in Kiro CLI…
BYOD Ransomware Group Allegedly Claims Toyota Data Breach
The BYOD ransomware group has allegedly claimed a Toyota data breach, saying it obtained personal information and access involving kiosk devices. A…
Microsoft November 2026 Patch Tuesday Fixes 1,093 Vulnerabilities, Including Outlook Zero-Day
Microsoft has released its November 2026 Patch Tuesday updates, fixing 1,093 newly released vulnerabilities across Windows, Office, SQL Server,…
CVE-2026-124848 – Incorrect default permissions on session transcripts and prompt history in Kiro CLI
Bulletin ID: 2026-178-AWS Publication Date: 11/10/2026 12:00 PM PST Description: Incorrect default file permissions in Kiro CLI before version 2.27.0 on…
Hackers Can Exploit SAP PROXYGATE and ICM2SHELL Flaws for Unauthorized Full System Access
SAP has released fixes for PROXYGATE and ICM2SHELL, critical security flaws that could let attackers take control of SAP systems without signing in.…
Fireworks AI Confirms Wider Breach Affecting Customer Datasets, Model Weights and Notion AI Chats
Fireworks AI disclosed on Monday that its investigation into a security incident first reported early last month uncovered further malicious activity,…