Upgrade, migrate, but don’t prevaricate – time has run out
Predator, Pegasus and Graphite: Governments Accused of Spyware Abuse Face Little Accountability
Europe’s spyware victims face years of legal battles and few answers as governments shield surveillance behind national security. Greek journalist…
Apify rotates API tokens, prompts 2FA resets after breach
Apify has rotated critical internal secrets and revoked some third-party OAuth connections after detecting unauthorized access to its internal systems.…
Hacked Asian Telcos Used to Intercept Taiwanese Calls and Texts
Enea linked SilentAir and Liminal Panda to attacks on Asian mobile operators
Microsoft fixes Exchange sign-ins broken by Windows Server updates
Microsoft has fixed Outlook sign-in and mail delivery issues on Exchange Server systems after installing the October 2026 Windows Server security updates.…
IT Security News Hourly Summary 2026-11-12 16h : 37 posts
37 posts published in the last hour 14:34Apple’s HomeView Tries Face Authentication Without FaceID 14:34Nvidia’s Jensen Huang resigns, chipmaker names CFO Colette Kress as interim CEO 14:33Microsoft November Patch Tuesday: one exploited Outlook bug and 30 wormable flaws 14:33Critical Red…
Apple’s HomeView Tries Face Authentication Without FaceID
Apple’s FaceID has long provided robust authentication. But for its smart home device, HomeView, the company is betting on new “person recognition”…
Nvidia’s Jensen Huang resigns, chipmaker names CFO Colette Kress as interim CEO
Nvidia gets a new chief executive, days after former CEO Jensen Huang admitted to a romantic affair with an alleged Chinese spy.
Microsoft November Patch Tuesday: one exploited Outlook bug and 30 wormable flaws
Microsoft November Patch Tuesday security updates fix 1,090 flaws, including one exploited Outlook bug and 30 potentially wormable issues. Microsoft…
Critical Red Hat Quay Vulnerability Allows Unauthenticated Attackers to Hijack Container Registries
A critical flaw in Red Hat Quay lets anyone who can reach a registry’s key server take over its token signing. The bug is tracked as CVE-2026-123710 and…
Cloud Penetration Testing Methodology
Kaspersky’s security research team has released a comprehensive framework for penetration testing cloud platforms, highlighting significant gaps in…
CrowdStrike Advances AI Security and Safety from Endpoint to Cloud
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Advances AI Security and Safety from Endpoint to Cloud
What 70 European CISOs told us about securing the AI era
Last week I spent three days in Bavaria with more than 70 CISOs from across Europe, the Middle East and Africa at Leaders Point EMEA. Led by our CEO Nadav…
CISA Confirms Active Exploitation of Outlook User Interaction 0-Day Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency has confirmed active exploitation of a Microsoft Outlook zero-day vulnerability CVE-2026-124194…
n0n Ransomware Group: 93 Victims in 5 Weeks
A data extortion group operating under the name n0n has compromised 93 organizations worldwide in approximately five weeks, according to research…
Dissecting StrikeStub: ClickFix PowerShell Malware and Modular RAT
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Dissecting StrikeStub: ClickFix PowerShell Malware and Modular RAT
Security Advisory: Active Exploitation of PHP2Shell and Local Privilege Escalation
Check Point Research has identified active, in-the-wild exploitation of PHP2Shell, a vulnerability in PHP that also affects Check Point Security Gateways.…
Qilin Ransomware Admin Identified as 36-Year-Old Russian Hacker After Cybercrime Probe
A cybercrime investigation has linked the administrator of Qilin ransomware to Aleksey Mikhailovich Yakovtsev, a 36-year-old man living in St. Petersburg,…
EU Digital Fairness Act targets app design practices
The European Union is moving forward with the Digital Fairness Act, proposed legislation that would ban manipulative design practices commonly found in…
Lenovo Warns of High-Severity Server Flaw That Restores Default Root Credentials After Reset
Lenovo has disclosed a high-severity security flaw in ThinkSystem V4 server management firmware that restores a default OpenBMC root password after a…
GPUStack Auth Bypass Exploit Attempts
Active exploitation attempts are targeting CVE-2026-102895, a critical authentication bypass vulnerability in GPUStack, open-source software used to…
AWS MCP Gateway Security Flaw Allowing Access to Internal Networks and Cloud Credentials
AWS has fixed a server-side request forgery flaw in mcp-gateway-registry that could let an authenticated attacker reach internal services through the…
EU tech buyers shift to local cybersecurity vendors
European technology buyers are shifting their cybersecurity purchasing patterns toward local vendors in response to digital sovereignty concerns and…
Romania says it stopped Russian cyberattack targeting government emails
Romania’s intelligence agency said it stopped a cyber-espionage campaign by Russian state-linked hackers before the group exfiltrated sensitive data.