IT Security News: Afternoon roundup, 2026-11-10 Summary Ten days after the Amadeus breach first surfaced, the period's stories cluster around three threads: supply-chain and third-party exposure, AI platforms and their tooling becoming both targets and security products, and governments and…
AWS refreshes ProcessUnity Global Risk Exchange assessment to enhance customer’s third-party due diligence
Amazon Web Services (AWS) is pleased to announce renewal of the AWS ProcessUnity Global Risk Exchange assessment. This validated assessment report helps…
Microsoft Fixes Nearly 1,100 Security Vulnerabilities
Microsoft did another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in its Windows operating systems and…
Ring robots ready to patrol paranoids’ pads
Amazon calls its home security drone and business patrol bot ‘proactive protection’
Sponsored: The evolution of ASD’s Essential Eight
In this Risky Business sponsored interview Tom Uren talks to Airlock Digital’s CTO and CSO Peter Baussmann about how the Essential Eight is evolving into…
F-Secure Identifies 26 Ways AI Can Harm Consumers, and Where to Stop Them
New AI Harms Taxonomy traces how harm moves through AI systems, from misleading chatbot answers to compromised autonomous agents, and identifies where…
AI in Policing Risks Amplifying Racial Bias, Researchers Warn
When the Los Angeles Police Department started feeding decades of arrest records into predictive algorithms, it believed it was upgrading how it…
The US wants its quantum lead to turn into factories and supply chains
There’s bipartisan support for further investment in the U.S. quantum industry, along with worries that America’s industrial capacity won’t keep up with…
U.S. CISA adds IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack flaws to its Known Exploited…
SonicWall Patches Exploited VPN Authentication Flaw
SonicWall has released security updates addressing a high severity vulnerability in SonicOS that could allow attackers to bypass SAML authentication and…
Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday
Microsoft’s November security update addresses roughly 1,090 vulnerabilities across Windows, Office, Azure and the company’s other product lines, the…
IT Security News Hourly Summary 2026-11-10 23h : 19 posts
19 posts published in the last hour 21:34Scans for Sshole Vulnerability (CVE-2026-123158), (Sun, Nov 8th) 21:34AI Agent Security Requires More Than Instructions, FireMon Expert Warns 21:33Barracuda Patches Two Security Flaws That Could Let Attackers Take Over Email Security Gateways 21:33US…
Scans for Sshole Vulnerability (CVE-2026-123158), (Sun, Nov 8th)
Our honeypots use “Cowrie” to collect SSH data. With the emergence of the “sshole” vulnerability last week, we are now seeing an increase in attempts to…
AI Agent Security Requires More Than Instructions, FireMon Expert Warns
FireMon expert Dan Rheault explains how organizations can secure autonomous AI agents through network access controls, least privilege, and containment…
Barracuda Patches Two Security Flaws That Could Let Attackers Take Over Email Security Gateways
Experts have shown how two vulnerabilities in Barracuda’s Email Security Gateway can be chained to execute arbitrary commands with root privileges without…
US Army member arrested in UK over allegations of spying for Russia
The unnamed soldier was arrested by British counterterrorism police “working closely” with U.S. authorities, including the FBI and the military, the…
Mullvad shuts down its public encrypted DNS service: switch to Quad9 or another resolver now
Mullvad’s free public encrypted DNS service, the DNS over HTTPS and DNS over TLS resolvers at dns. Thank you for being a Ghacks reader.
Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon
Forks of the open source Artex framework, along with 45 similar pen-testing tools, remain capable of executing credential attacks and cloud breaches at…
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Researcher finds 35,000 Grok Build apps wide open to anyone who looked for them.
Bogotá Investigates Possible Health Agency Email Compromise Linked to European Airport Bomb Hoax
Authorities in Bogota, Colombia, have opened an investigation into whether an email account used by a public health agency was accessed without…
Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row
An exploited Outlook vulnerability drew most of the attention in Microsoft’s latest Patch Tuesday, which listed 1,093 bugs total.
Data Sovereignty Is Essential for India’s Digital Infrastructure, Says RBI Governor
Sanjay Malhotra, Governor of the Reserve Bank of India (RBI), emphasized the significance of maintaining sovereign data centers in order to safeguard…
Russia-Linked APT Turla Turned Exchange Servers Into Their Own Control Room
ESET found Russia-Linked APT group Turla using a new toolset, dubbed Cereal, on government Exchange servers in Kazakhstan and Romania. ESET Research…
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-20320…
Japanese furniture giant Nitori says hackers stole 37.6M customer records
Nitori, a major Japanese furniture and home accessories retailer, discovered that an attacker accessed a system on its network and may have stolen 37.62…