access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
Attackers Exploit Third-Party Provider to Raid French Bank Crédit Mutuel Arkéa
French Bank Crédit Mutuel Arkéa says hackers exploited a service provider to steal up to $133 million using the bank’s own account. French cooperative bank Crédit Mutuel Arkéa was hit by a cyberattack that let attackers make fraudulent transactions of up to $133 million, forcing it to suspend certain systems. Crédit Mutuel Arkéa is a…
-
Week in review: Refrigeration cyberattacks hit European retailers again, Patch Tuesday forecast
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: The first ten lines of a command policy for AI coding agents In this Help Net … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/08/week-in-review-refrigeration-cyberattacks-hit-european-retailers-again-patch-tuesday-forecast/ also interesting: Week in review: Refrigeration cyberattacks hit European retailers again, Patch Tuesday forecast Energiesektor…
-
Week in review: Refrigeration cyberattacks hit European retailers again, Patch Tuesday forecast
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: The first ten lines of a command policy for AI coding agents In this Help Net … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/08/week-in-review-refrigeration-cyberattacks-hit-european-retailers-again-patch-tuesday-forecast/ also interesting: Week in review: Refrigeration cyberattacks hit European retailers again, Patch Tuesday forecast Energiesektor…
-
Flughafen Leipzig: BKA sucht mit KI-Bild nach mutmaßlichem Drohnenangreifer
Tags: aiDie ukrainische Transportmaschine wurde mit einer Sprengstoffdrohne attackiert. Die Ermittler vermuten russische Sabotage. First seen on golem.de Jump to article: www.golem.de/news/leipzig-fahnder-suchen-mutmasslichen-drohnen-taeter-mit-ki-gesicht-2611-214948.html also interesting: Gen Alpha: Navigating Cybersecurity in an AI-Native World DevSecOps: Sichere Softwareentwicklung mit GenAI? How Predictive AI in Cardiology is Fueling the Next Wave of Digital Health Innovation Angreifer machen mehr Tempo: Wie…
-
KI-Agenten ohne Kontrolle: Warum Unternehmen ihre KI-Identitäten jetzt steuern müssen
Tags: aiKI-Agenten beschleunigen Abläufe, greifen auf Unternehmensdaten zu und übernehmen zunehmend eigenständige Aufgaben. Doch ihr Handlungsspielraum wächst schneller als die passenden Sicherheitskontrollen. Die globale SailPoint-Studie verdeutlicht diese Lücke. Für IT-Verantwortliche kommt es jetzt darauf an, Transparenz, eindeutige Zuständigkeiten und begrenzte Zugriffsrechte miteinander zu verbinden damit aus Automatisierung kein Kontrollverlust wird. [1, 3] Management Summary Governance… First…
-
Black Friday: Fake-Shops erkennen, Zahlungsbetrug vermeiden
Professionell gestaltete Fake-Shops machen aus vermeintlichen Schnäppchen ein Risiko für Geld und Daten. Der Fake-Shop Detection Test 2026 von AV-Comparatives zeigt, welche sieben Sicherheitsprodukte unter den geprüften Bedingungen vor betrügerischen Shops warnen. Die Konsequenz ist klar: Technischer Schutz sollte mit bewussten Kaufentscheidungen und einem klaren Vorgehen im Betrugsfall zusammenspielen. [1][3][5] Management Summary Risiko jenseits von……
-
Angreifer missbrauchen vertrauenswürdige KI- und IT-Tools für Attacken gegen Unternehmen
KI-Agenten beschleunigen Geschäftsprozesse und eröffnen Angreifern neue Wege in die Unternehmens-IT. Der Elastic-Bericht »Threats, etc.« beschreibt den Missbrauch legitimer KI-Anwendungen, signierter Fernwartungstools und gestohlener Zugangsdaten. Für IT-Verantwortliche lautet die Konsequenz: Nicht die Freigabe einer Software entscheidet über Sicherheit, sondern ihr tatsächliches Verhalten. Gefragt sind begrenzte Rechte, systemübergreifende Transparenz und schnelle Reaktionsprozesse. [1] Management Summary… First…
-
Hot fridges, a fake nuclear alert and a $6bn heist: are we in the foothills of a hacking epidemic?
As AI exposes flaws in IT systems and geopolitics plays out on the cyber frontline, some experts say the events of recent weeks could soon be a common occurenceAlex Pearce was doing the morning rounds at his fruit and vegetable wholesale business in London on Monday last week when he noticed something odd.The defrost light…
-
AI Agent Discovery: API, Browser Identity Signals – Grip
Executive Summary AI agent discovery is the process of identifying individual AI agents and connecting them to evidence about their platform, owner, identity, permissions, and activity. Application APIs, browser telemetry, and identity signals reveal different parts of that picture. Reliable… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/11/ai-agent-discovery-api-browser-identity-signals-grip/ also interesting: Why Enterprises Need JustTime Provisioning…
-
Palo Alto Networks in Advanced Talks to Buy AI Agent Startup Clutch Security for $500M: Report
Palo Alto Networks Inc. is in advanced discussions to acquire Clutch Security, an early-stage startup specializing in securing autonomous artificial intelligence (AI) agents, for roughly $500 million in cash plus milestone-based earnouts. Neither company has officially confirmed the transaction, and sources emphasize that no binding agreement has been signed, according to a TechCrunch report. However,..…
-
AI Security Database Change Governance: 2026
In April, an AI coding agent wiped a company’s production database, and its backups along with it, in about nine seconds. Nobody hacked anything. The agent was doing ordinary development work with credentials someone had given it on purpose.A few… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/11/ai-security-database-change-governance-2026/ also interesting: Ransomware attacks: The evolving extortion…
-
The Agents Have Now Found Your Secrets On GitHub: ARTEX Is Abusing Public Secrets Right Now
On November 5, Microsoft Threat Intelligence published research showing threat actors using an agentic AI framework called ARTEX to search public GitHub for exposed secrets and abuse them. The agents found OAuth application secrets, signed in as service principals, and… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/11/the-agents-have-now-found-your-secrets-on-github-artex-is-abusing-public-secrets-right-now/ also interesting: Securing RAG pipelines in enterprise…
-
External Penetration Testing: Scope, Process, and What It Finds
A forgotten staging server, an exposed remote access service, or an unpatched gateway can create an entry point into a business. These assets may sit outside the systems security teams review most often, yet remain accessible to anyone on the… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/11/external-penetration-testing-scope-process-and-what-it-finds/ also interesting: AI development pipeline attacks expand…
-
LLM output handling and insecure output vulnerabilities
Large language models are often treated as if they are a trusted component in an application stack. That is a mistake. From a security engineering perspective, model output is just another external input, and it should be handled with the… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/11/llm-output-handling-and-insecure-output-vulnerabilities/ also interesting: Top cyber threats to your…
-
Daily OT Security News: November 07, 2026
Daily OT Security News: November 07, 2026 Five source-verified developments affecting operational technology, connected devices and physical security, with practical implications for operators. The WAGO advisory was revised four hours before the usual 24-hour news window; its timing is identified… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/11/daily-ot-security-news-november-07-2026/ also interesting: Microsoft’s January 2025 Patch Tuesday…
-
Chinese Intelligence Targeted NVIDIA CEO Jensen Huang in AI Chip Espionage Effort: Report
China’s primary intelligence service orchestrated an operation targeting NVIDIA Corp. CEO Jensen Huang, deploying an operative to cultivate access to the tech leader as Beijing sought to pierce U.S. export controls on advanced artificial intelligence (AI) semiconductors. According to intelligence accounts detailed in a New York Times report Friday, China’s Ministry of State Security (M.S.S.)..…
-
ChatGPT Hit One-Fifth of Google’s Search Volume. What Changes for B2B
OpenAI says ChatGPT now handles about one-fifth as many searches as Google. Five days earlier, Google told investors it is putting more ads inside its AI answers, because AI Mode earns less than classic search. Neither number is clean. Read… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/11/chatgpt-hit-one-fifth-of-googles-search-volume-what-changes-for-b2b/ also interesting: DeepSeek R1 Jailbreaked to Create…
-
Saturday Security: DigiCert’s Server Migration Mistake
This week’s Saturday Security Story is a reminder that even a trusted name in digital certificates can trip over the basics. DigiCert says a server migration left an internal business system exposed to the internet, and attackers walked right in…. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/11/saturday-security-digicerts-server-migration-mistake/ also interesting: Walking the Walk: How Tenable…
-
Saturday Security: DigiCert’s Server Migration Mistake
This week’s Saturday Security Story is a reminder that even a trusted name in digital certificates can trip over the basics. DigiCert says a server migration left an internal business system exposed to the internet, and attackers walked right in…. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/11/saturday-security-digicerts-server-migration-mistake/ also interesting: Walking the Walk: How Tenable…
-
Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches
Hunt.io traced ARTEX servers and AI-powered hacking tools used in breaches affecting seven South Korean financial institutions. Between late September and early October 2026, seven South Korean financial institutions had data breached through internet-facing systems. About 66,000 to 67,000 people and around 2,200 corporations were affected, and personal, employment, income and loan data was exposed.…
-
One Product Isn’t the Problem: Monetizing an AI Portfolio Without Confusing Your Customers
Software vendors can boost revenue by tracking customer usage across products, while AI accelerates pricing and consumption decisions. It is hard to find any software vendor that sells just one product. Portfolios have expanded from modules to editions, cloud services, add-ons, and now AI capabilities. A lot can be achieved through an expanded portfolio. IDC…
-
Hackers pull off $133 million French bank heist via service provider
French cooperative bank Crédit Mutuel Arkéa was targeted in a cyberattack that enabled fraudulent transactions of up to $133 million, forcing it to respond by suspending certain systems.v First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-pull-off-133-million-french-bank-heist-via-service-provider/ also interesting: The biggest data breach fines, penalties, and settlements so far Scattered Spider nimmt Luftfahrtbranche ins Visier UNC3886…
-
(g+) Sicherheitslücke in der Firmware: PHP2Shell bleibt in Firewalls und Industriegeräten gefährlich
Bei Firewalls, Routern und Industrieanlagen können Admins verwundbares PHP oft nicht selbst patchen. Selbst nach einem Update bleibt deshalb Handlungsbedarf. First seen on golem.de Jump to article: www.golem.de/news/sicherheitsluecke-in-der-firmware-php2shell-bleibt-in-firewalls-und-industriegeraeten-gefaehrlich-2611-214898.html also interesting: Sicherheitslücke in der Firmware: PHP2Shell bleibt in Firewalls und Industriegeräten gefährlich How are you securing your communications in the wake of the Volt Typhoon revelations?…
-
CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands
Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger unwanted subscriptions. CTM360 reveals how these campaigns use deceptive verification steps and affiliate networks to generate revenue without delivering the promised rewards. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ctm360-exposes-fake-gift-card-scams-exploiting-trusted-brands/ also interesting: 5 things…
-
The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call
Escalating hacks affecting blood labs and grocery stores show the very real risks to critical infrastructure that come from basic security lapses involving internet-connected devices. First seen on wired.com Jump to article: www.wired.com/story/kernel-panic-refrigeration-hacks-internet-of-things/ also interesting: Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as Cyber Agencies Offer Prevention Tips Against Telecom Spying Attacks When…
-
Amsterdam: Eskalation vor Microsoft-RZ-Baustelle endet mit 200 Festnahmen
Tags: microsoftWas als Demonstration gegen ein neues Rechenzentrum begann, mündete in Amsterdam in einen der größten Polizeieinsätze der jüngsten Zeit. First seen on golem.de Jump to article: www.golem.de/news/amsterdam-eskalation-vor-microsoft-rz-baustelle-endet-mit-200-festnahmen-2611-214961.html also interesting: Microsoft makes all new accounts passwordless by default Proofpoint Buys Hornetsecurity, A Microsoft 365 Security Specialist For $1 Billion Microsoft Defender Antivirus vs McAfee: Which Is…
-
British soldier ignored order to pull his SIM card, then got blackmailed
Tags: unclassifiedSoldier told repeatedly to lock down devices before deploying, got sextorted, court-martialed. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/11/british-soldier-ignored-order-to-pull-his-sim-card-then-got-blackmailed/ also interesting: Datenschutzbarometer – 37 Prozent empfinden den Datenschutz als übertrieben Resilienzlücken schließen – Commvault startet Clumio auf AWS Westcon-Comstor gains minority backer in General Atlantic You were onto something with “It’s the Climb,” Miley
-
(g+) Surveillance Pricing: Wie weit dürfen Händler Preise personalisieren?
Tags: unclassifiedEin Produkt, zwei Kunden, zwei unterschiedliche Preise: Wir erklären, wann Händler in der EU Kundendaten zur Preisgestaltung nutzen dürfen und wo Datenschutz- und Verbraucherrecht Grenzen setzen. First seen on golem.de Jump to article: www.golem.de/news/surveillance-pricing-wie-weit-duerfen-haendler-preise-personalisieren-2611-214937.html also interesting: Website der Tourismusgesellschaft einer australischen Insel entstellt [Video] CCCAMP 2015 – Basics of hydroponics Türkischer Rüstungssektor im Visier von…
-
Java unter Beschuss: 53 Schwachstellen und zwei Notfall-Patches innerhalb von 5 Tagen
53 Java-Sicherheitslücken und zwei Notfall-Patches in fünf Tagen: Warum KI-Angriffe das Patch-Management verändern und Security-only-Updates wichtiger werden. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/java-unter-beschuss-53-schwachstellen-und-zwei-notfall-patches-innerhalb-von-5-tagen/a47036/ also interesting: OpenAIs Aardvark soll Fehler im Code erkennen und beheben Cybercrime Inc.: Wenn Hacker besser organsiert sind als die IT Bug in Open WebUI macht Kostenlos-Tool zur Backdoor Beating…
-
U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog
Tags: authentication, cisa, cve, cybersecurity, exploit, flaw, infrastructure, kev, service, vpn, vulnerabilityU.S. CISA adds SonicWall SonicOS SSLVPN vulnerability CVE-2026-19868 to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a SonicWall SonicOS SSLVPN flaw, tracked as CVE-2026-19868 (CVSS score of 7.5), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-19868 is an authentication bypass vulnerability affecting the SSL VPN service in SonicWall SonicOS.…
-
Leipzig: Fahnder suchen mutmaßlichen Drohnen-Täter mit KI-Gesicht
Tags: aiNach dem Drohnenanschlag auf den Flughafen Leipzig suchen Generalbundesanwalt und BKA mit einem ungewöhnlichen Mittel nach einer unbekannten Person. First seen on golem.de Jump to article: www.golem.de/news/leipzig-fahnder-suchen-mutmasslichen-drohnen-taeter-mit-ki-gesicht-2611-214948.html also interesting: Vibe Hacking Not Yet Possible Researchers Reveal Six New OpenClaw Vulnerabilities The Future of Modern Observability No more blind trust: Identity controls for AI agents
-
Claude Code’s >>Don’t Ask Again<< Feature Exposes 2,539 Secrets Across 1,994 GitHub Repositories
A newly identified 2,539 distinct secrets across 1,994 public GitHub repositories, tracing exposure to coding-agent configuration files, Git history, and saved transcripts. Their November 5 research describes how Claude Code’s “Yes, and don’t ask again” approval can persist credential-bearing shell commands inside .claude/settings.local.json. Exposed material included production database passwords, cloud credentials, API tokens, and SSH…
-
Claude Code’s >>Don’t Ask Again<< Feature Exposes 2,539 Secrets Across 1,994 GitHub Repositories
A newly identified 2,539 distinct secrets across 1,994 public GitHub repositories, tracing exposure to coding-agent configuration files, Git history, and saved transcripts. Their November 5 research describes how Claude Code’s “Yes, and don’t ask again” approval can persist credential-bearing shell commands inside .claude/settings.local.json. Exposed material included production database passwords, cloud credentials, API tokens, and SSH…
-
Claude Code’s “Don’t Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them.When a user selects “Yes, and don’t ask again,” Anthropic’s AI coding assistant can save the command, word-for-word, including the secret, in a project settings file.Software security company Apiiro said yesterday…
-
Hackers Exploit WordPress Core RCE Vulnerability in Over 240,000 Attack Attempts
Attackers have launched more than 240,000 exploit attempts against a WordPress Core upgrade-process flaw that can enable unauthenticated remote code execution. Wordfence researcher István Márton reported that targeting began on October 28, 2026. Tracked as CVE-2026-119977, the high-severity issue carries a CVSS score of 8.1 and affects unpatched branches spanning WordPress 4.7 through 7.1.3. The…
-
WorkOS Confirms Data Breach After ARTEX AI Agent Escapes Security Researcher’s Sandbox
WorkOS confirmed that an ARTEX security agent escaped a researcher’s isolated testing environment and accessed an internal application, exposing customer business information. In its November 6 update, the company attributed the incident to unintended activity during cybersecurity benchmark evaluations, rather than a malicious operation. WorkOS accepted responsibility and cooperated with investigators. The incident highlights the…
-
Hackers Exploit SonicWall SSL-VPN Vulnerability to Bypass Multi-Factor Authentication in Active Attacks
SonicWall has disclosed an SSL-VPN authentication enforcement flaw that could let attackers bypass SAML authentication and associated multi-factor authentication controls. Tracked as CVE-2026-19868, the issue carries a CVSS score of 7.1. Advisory SNWLID-2026-0014, published November 6, 2026, states that SonicWall PSIRT investigated a report indicating potential exploitation. That wording signals suspected malicious activity, rather than…
-
Hackers Use Fake GitHub Security Tools to Spread Malware, Infecting Over 2,000 Computers
Tags: access, backdoor, blockchain, computer, credentials, crypto, cyber, cybersecurity, github, hacker, malware, threat, toolThreat actors are distributing malware through GitHub repositories masquerading as security utilities, infecting more than 2,000 computers. According to Doctor Web’s November 5 investigation, the campaign targets cybersecurity professionals alongside blockchain gaming enthusiasts, weaponizing Visual Studio projects and Python and Go scripts to deploy remote access backdoors, cryptocurrency clippers, and credential stealers. The operation initially…
-
Insignary Releases Free Insignary-Chk Tool to Detect PHP2Shell and Node2Shell Exposure
Toronto, Canada, November 6th, 2026, CyberNewswire Free, read-only scanner helps organizations find Linux servers and container images exposed to two actively exploited vulnerabilities in PHP and Node.js Insignary, a global open-source security company, today released insignary-chk, a free tool that checks for PHP2Shell and Node2Shell, two recently disclosed runtime vulnerabilities affecting PHP and Node.js. PHP2Shell…
-
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/ also interesting: Cisco Firewall and VPN Zero Day Attacks: CVE-2025-20333 and CVE-2025-20362 Top 7 zero-day exploitation trends of 2024 CVE-2024-55591: Fortinet Authentication Bypass Zero-Day Vulnerability Exploited…
-
OpenAI Hopes to Ease Backlash Against AI Data Centers
Community Commitments Leave Questions About Future AI Compute Capacity. OpenAI is promising to cover power costs and give communities more say over data center construction after an election backlash. The commitments apply to campuses it owns and operates, leaving questions about partner-built capacity and the pace of enterprise AI expansion. First seen on govinfosecurity.com Jump…
-
Anthropic IPO to Test AI Industry’s Financial Viability
Potential $1.5 Trillion Valuation Raises Stakes for Frontier Model Makers and AI Supply Chain. The Anthropic IPO represents the first true test of the longevity and financial viability of AI as a sector, and it may affect how other companies within the AI supply chain may or may not benefit from the monster-sized investment Anthropic…
-
How the $6.3B Proofpoint-Varonis Acquisition Came Together
Tags: ceoA Look at How Efforts to Get Competing Suitors to Pursue Varonis Came Up Empty. The largest security acquisition of 2026 started with initial outreach 20 months ago and included extensive, unsuccessful efforts to get counteroffers from other tech and private equity firms. Thoma Bravo Partner Chip Virnig first requested a meeting with Varonis CEO…
-
Runaway AI hacking agent behind WorkOS breach after escaping sandbox
WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing environment and unintentionally attacked the company. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/runaway-ai-hacking-agent-behind-workos-breach-after-escaping-sandbox/ also interesting: Cybercriminals take malicious AI to the next level Cybercriminals take…
-
US Warns Hospitals of Attacks on Refrigeration Systems
Agencies and AHA Warn of Risks to Blood Supplies, Critical OT Systems. U.S. officials are urging healthcare organizations and other critical infrastructure operators to strengthen cyber protections for internet-connected refrigeration systems amid a wave of attacks in Europe that have disrupted cold storage equipment, including systems used to preserve blood supplies. First seen on govinfosecurity.com…