IT Security News: Morning roundup, 2026-11-06 Summary This period is dominated by the dual-edged nature of artificial intelligence, highlighting both its power to uncover vulnerabilities and its potential for autonomous exploitation. While governments and security leaders struggle with data leakage…
Any long password will do: SSH flaw lets hackers into Alpine systems, routers and more
Ernestas Naprys reports: A massive decade-old flaw affects Alpine and other distributions that run OpenSSH on the musl library. Containers, routers, IoT…
Why Europe’s Freezer Hacks Spread So Far, So Fast
Europe’s supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale.
NI: Parents warned to be on alert after school data breach
Robbie Meredith reports: Parents have been told to be alert for unexpected emails or phone calls after a Northern Ireland school app used by almost 50,000…
IT Security News Hourly Summary 2026-11-06 15h : 15 posts
15 posts published in the last hour 13:32DigiCert admits 16-month security lapse exposed customer information 13:32OpenAI Unveils AI Pipeline That Found & Patched 948 Linux Root Exploits 13:32Storm-2603 Hackers Exploit SharePoint ToolShell Flaws to Hide Fileless Backdoor and Launch Ransomware…
DigiCert admits 16-month security lapse exposed customer information
Botched server move left the door open, and DigiCert took months to notice someone had wandered in
OpenAI Unveils AI Pipeline That Found & Patched 948 Linux Root Exploits
HOC Shorts | OpenAI published “A thousand fewer paths to root,” detailing an autonomous security research ai pipeline…
Storm-2603 Hackers Exploit SharePoint ToolShell Flaws to Hide Fileless Backdoor and Launch Ransomware Attack
A China-linked threat group tracked as Storm-2603 has used the SharePoint ToolShell flaws to plant a backdoor that never touches the disk. The group then…
US Agencies Urge Organizations to Harden Refrigeration Controllers
The recommendations come amid attacks targeting fridges and freezers in supermarkets and blood banks in Europe.
Hackers Use ARTEX AI to Find GitHub Secrets and Steal Azure Key Vault Data in Just 5 Minutes
Hackers are using the ARTEX AI framework to find exposed credentials on GitHub and turn them into access to cloud systems. In one observed case, an AI…
OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line
Rated Critical for cybersecurity, OpenAI’s new model beats GPT-5.6 Cyber at exploitation while staying in scope more reliably.
Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack
The October incident will cut fourth-quarter sales by up to €250 million and has led Ahold Delhaize to lower its 2026 outlook.
D-Link warns of multiple zero-days in DGS-3130 Series switches
D-Link shared mitigation measures for multiple unpatched security flaws affecting DGS-3130 series managed Gigabit stackable switches. […]
Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users’ Computers
A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person’s computer, researchers at Forever Security, an…
OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)
An OpenSSH flaw that lets remote attackers log into passwordless accounts on Alpine Linux and other musl-based systems is being exploited, threat…
ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns, Censys Finds
A new Censys report showed that the use of ARTEX, an AI pentesting tool popular with threat actor, could be spreading far beyond initially reported…
OpenAI Rates GPT-6 Cyber Critical After Major Vulnerability Discoveries
OpenAI GPT-6 Cyber found 81 high-severity Firefox flaws and hundreds of Linux bugs, raising new questions about AI-powered cyber risks. OpenAI has…
Insignary Releases Free Insignary-Chk Tool to Detect PHP2Shell and Node2Shell Exposure
Toronto, Canada, 6th November 2026, CyberNewswire
Microsoft Paint RCE Fix Now Available, but Windows Update Won’t Deliver It
A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update,…
IT Security News Hourly Summary 2026-11-06 14h : 14 posts
14 posts published in the last hour 12:32Agentic Scrum, Part 1 of 5: The Product Owner Is Not a Vending Machine 12:32Attacks on supermarket and blood storage systems prompt US warning 12:32OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass 12:31OpenAI AI…
Agentic Scrum, Part 1 of 5: The Product Owner Is Not a Vending Machine
AI coding agents eat user stories faster than a product owner can write them. Here is a spec-driven, agentic pipeline that spreads the work across people…
Attacks on supermarket and blood storage systems prompt US warning
US agencies have issued a warning about remote access to industrial refrigeration and cold-chain monitoring systems.
OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass
On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters.
OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run
OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local…
MDR vs SOC: How to choose the right option for your organisation
Trying to decide if you should use a managed detection and response (MDR) service, or build your own security operations centre (SOC)? Our MDR vs SOC…