IT Security News: Morning roundup, 2026-11-05 Summary This morning's security landscape is dominated by the double-edged sword of artificial intelligence, with reports of AI being used both to clone complex software and to execute sophisticated corporate breaches. Parallel threads of…
CVE-2026-119083 – GluonTS arbitrary file write during archive extraction
Bulletin ID: 2026-171-AWS Publication Date: 11/05/2026 08:30 AM PST Description: GluonTS is an open-source Python library for probabilistic time series…
EU AI Act transparency rules show why businesses can’t afford to wait
By Khush Kashyap, Senior Director of Governance, Risk and Compliance at Vanta Transparency goes hand in hand with AI. Or at least it’s meant to. Until…
DigiCert data breach exposes customer information, identity documents
DigiCert warns it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized…
The Exceptions That Break MFA Start in the Boardroom
The uncomfortable truth about MFA is that its implementation can start running into trouble before the technical rollout is even finished. IT switches it…
Hackers backdoor Linux servers using trojanized CWP web server
A new Linux malware called CWPdoor is being distributed through a trojanized version of cwpsrv, the web server behind the Control Web Panel (CWP)…
IT Security News Hourly Summary 2026-11-05 18h : 24 posts
24 posts published in the last hour 16:34Keys to the Kingdom: The eMudhra Weak-Key Compromise 16:34French authorities probe cyberattack targeting nation’s blood supply 16:34Tobacco company got smoked by leaving secret recipes on a file share 16:33Residential Proxy Traffic Traced to…
Keys to the Kingdom: The eMudhra Weak-Key Compromise
Learn more about the eMudhra incident, implications, downstream vulnerabilities that came out of it and mitigation.
French authorities probe cyberattack targeting nation’s blood supply
The attack follows a wave of hacks against refrigeration systems at supermarkets across Europe.
Tobacco company got smoked by leaving secret recipes on a file share
They denied the data was real…then removed it
Residential Proxy Traffic Traced to White House Network
White House network addresses were used as exits by 28 residential proxy services
Phishing-Resistant Isn’t Enough; Yubico Takes Aim at Identity-Verification Gap
The new YubiID service bridges identity verification with credential enrollment and recovery across existing identity platforms, closing a…
When trust becomes the payload: Inside the threats, etc quarterly report
The newest threats, etc report details how adversaries are weaponizing trust across the entire enterprise stack, abusing everything from AI assistants and…
The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)
One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. This was a simple vulnerability in a CGI-bin script used to send…
Cyber Resilience Starts with AI Governance
Learn why organizations can’t build cyber resilience if leadership doesn’t understand AI risk.
UK: Royal Cornwall Hospitals Trust data breach exposed health details of 7,715 staff
Lee Trewhela reports: The Royal Cornwall Hospitals Trust (RCHT) has admitted a huge data breach has led to many affected staff experiencing “significant…
Email threat landscape: Q3 2026 trends and insights
Microsoft Threat Intelligence observed a sharp rise in email-based phishing activity at the end of Q3 2026 (July – September), even as QR code phishing…
Cyberattack wipes cloud data at major Russian hosting provider Beget
Daryna Antoniuk reports: A major Russian web hosting provider is struggling to restore its services after a cyberattack destroyed data across its cloud…
France Blood Service Cyber-Attack Sends Blood Storage Temperatures to 110°C
A supplier of the French National Blood Service was hit by a cyber-attack in which hackers turned cold rooms hosting blood samples up to 110°C (230°F)
Why Higher Ed Needs a New Playbook for Ransomware, AI Risk, and Compliance
Discover how higher education institutions use Zero Trust microsegmentation and AI governance to contain ransomware and meet FERPA compliance.
Attackers Actively Probing for Upgrade-Window RCE Vulnerability in WordPress Core
On October 28th, 2026, the WordPress Security Team released WordPress 7.1.4, along with backported security releases for older branches, addressing…
HYFLOCK Ransomware Encrypts Only First 4KB of Larger Files, Leaves Parts of Victims’ Files Accessible
HYFLOCK ransomware has an encryption weakness that leaves parts of larger files readable, giving affected organizations a limited chance to recover data…
Hackers Alter Refrigeration Settings, Forcing European Stores to Discard Food
Hackers changed refrigeration settings at European supermarkets, forcing stores to discard produce, while UK suppliers reported attacks on…
OpenSSH Flaw Could Let Attackers Bypass Password Authentication on Alpine Linux Servers
A critical OpenSSH flaw could let remote attackers bypass password authentication on affected Alpine Linux servers, including accounts intended for…
Russia-Aligned Hackers Target Ukraine’s War Crimes Courts and Military Aid Networks
A Russia-aligned hacking group that researchers had not previously named or documented has been running a systematic intelligence campaign against…