Fortinet finds weak SQL Server passwords used to deliver a miner and Gh0st RAT
Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass
Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead…
ConnectWise disables third-party extensions as it probes cyberattack targeting ScreenConnect users
Researchers warn the platform is being abused to gain remote access and install malicious toolkits.
eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise
The in-house Python script behind eMudhra’s October key compromise has now cost the company 8 more of its intermediate certificate authorities (CAs), even…
Shipping giant Maersk probes ‘IT security incident,’ data theft
Says it ‘strongly’ suspects attack limited to legacy system, and that nothing sensitive is at risk
We Built An Agent That Broke All of Our Security Rules. Here’s What We Learned.
We tell customers three things about securing AI agents: they need their own identities, access that fits the job they’re given, and traceability that’s…
ConnectWise investigates ScreenConnect breaches after reports of incidents at nearly 50 organizations
Abuse of an independent third-party tool led to breaches at ScreenConnect customers, confirmed the software’s maker, ConnectWise. Cybersecurity…
186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers
Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence (AI) tools are being used to serve ClickFix-style…
European authorities take down SteaIC malware servers for second time this year
German authorities on Thursday said investigators traced the rebuilt network to the Virtualine bulletproof hosting provider, seized by the FBI in October,…
SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack Paths
The ongoing campaign targeting ConnectWise ScreenConnect deployments involves the exploitation of a now-patched critical security flaw in the remote…
Railway Breach Leads to $740,000 in Fraudulent AI Charges
Railway says attackers stole customer AI credentials and generated approximately $740,000 in fraudulent usage. The company has committed to covering…
Unocoin Goes Dark As 81,000 Wallets Show Zero Holdings
Damilola Esebame reports: Indian cryptocurrency exchange Unocoin said it discovered unauthorized access to its servers on 9 November and temporarily…
Apache Patches Critical HTTP Server RCE Found by Anthropic, Google
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
AI found widespread IoT vulnerabilities more quickly and cheaply than humans could
The newly discovered vulnerabilities illustrate AI’s growing power — as well as critical infrastructure’s continuing weaknesses.
Your Endpoint Management Platform Could Be Your Biggest Security Risk
Endpoint management platforms can become powerful attack tools when compromised, allowing hackers to deploy malware, execute commands, and disrupt…
Check Point Extends Its Penetration Testing Capabilities
The Check Point Services organization is extending its penetration testing capabilities with deeper, adversary-led engagements. Customers can now choose…
Investment scams with potential victims in at least 50 countries: over 100 servers seized
Led by the German Itzehoe Public Prosecutor’s Office (Staatsanwaltschaft Itzehoe), the operation targeted a company suspected of supplying fraudulent…
Microsoft Patch Tuesday fixes Outlook flaw already under attack
Microsoft has fixed an actively exploited Outlook vulnerability. Check for Office updates separately.
WhiteArmor gang claims responsibility for latest cyber attack on shipping giant Maersk
Shipping giant Maersk has confirmed that one of its systems was broken into by hackers who have stolen data. The WhiteArmor gang has claimed responsbility…
Microsoft Teams AI Phishing Detection: Rollout and Deepfake Warnings
Microsoft Teams is introducing AI phishing detection for external chats, while separate deepfake detection will require third-party providers and…
Hong Kong Sogo data breach puts personal information of 820,000 members at risk
Danny Mok reports: Major Hong Kong retailers Sogo and Chow Sang Sang have disclosed separate data breaches after unauthorised parties accessed their…
Police dismantle Gootloader, CastleRAT, StealC malware infrastructure
Europol and law enforcement partners from nine countries have seized hundreds of servers and domains used by the Gootloader, CastleRAT, and StealC malware…
IT Security News Hourly Summary 2026-11-12 17h : 28 posts
28 posts published in the last hour 15:35When AI Finds the Bugs: Rethinking Exposure in a Flood of Vulnerabilities 15:34UK Backs North Sea Data Cable Plan Amid Heightened Risks 15:34354 dark web vendors and buyers arrested in Europol-coordinated global crackdown…
When AI Finds the Bugs: Rethinking Exposure in a Flood of Vulnerabilities
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: When AI Finds the Bugs: Rethinking Exposure in a Flood of Vulnerabilities