{"updated":"2026-11-11T08:50:06Z","window_days":14,"display_items":100,"item_count":100,"item_count_total":752,"retention":"additive_archive","archive_dir":"data/news/archive","archive_months":[{"month":"2026-08","item_count":129,"path":"data/news/archive/2026-08.json","api_path":"/api/news/by-month/2026-08.json"},{"month":"2026-09","item_count":199,"path":"data/news/archive/2026-09.json","api_path":"/api/news/by-month/2026-09.json"},{"month":"2026-10","item_count":279,"path":"data/news/archive/2026-10.json","api_path":"/api/news/by-month/2026-10.json"},{"month":"2026-11","item_count":145,"path":"data/news/archive/2026-11.json","api_path":"/api/news/by-month/2026-11.json"}],"sources":["BleepingComputer","The Hacker News","KrebsOnSecurity","DarkReading","SecurityWeek","The Record","CISA Advisories","Microsoft Security","Cisco Talos","Securelist","Malwarebytes","Unit 42","Palo Alto Networks","Elastic Security","Cloudflare","Check Point","SentinelOne","Rapid7","Ars Technica","TechCrunch","Wired Security","Beazley Security Labs Articles","Beazley Security Labs Advisories"],"source_health":{"BleepingComputer":{"ok":true,"items":15,"latency_ms":621,"fetch_ms":229,"parse_ms":11,"url":"https://feeds.feedburner.com/BleepingComputer","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:26Z","unhealthy":false},"The Hacker News":{"ok":true,"items":15,"latency_ms":351,"fetch_ms":343,"parse_ms":4,"url":"https://feeds.feedburner.com/TheHackersNews","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:25Z","unhealthy":false},"KrebsOnSecurity":{"ok":true,"items":10,"latency_ms":311,"fetch_ms":296,"parse_ms":11,"url":"https://krebsonsecurity.com/feed/","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:25Z","unhealthy":false},"DarkReading":{"ok":true,"items":15,"latency_ms":514,"fetch_ms":503,"parse_ms":5,"url":"https://www.darkreading.com/rss.xml","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:25Z","unhealthy":false},"SecurityWeek":{"ok":true,"items":10,"latency_ms":261,"fetch_ms":121,"parse_ms":132,"url":"https://www.securityweek.com/feed/","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:25Z","unhealthy":false},"The Record":{"ok":true,"items":5,"latency_ms":261,"fetch_ms":176,"parse_ms":81,"url":"https://therecord.media/feed","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:25Z","unhealthy":false},"CISA Advisories":{"ok":true,"items":15,"latency_ms":214,"fetch_ms":167,"parse_ms":43,"url":"https://www.cisa.gov/cybersecurity-advisories/all.xml","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:25Z","unhealthy":false},"Microsoft Security":{"ok":true,"items":10,"latency_ms":75,"fetch_ms":64,"parse_ms":8,"url":"https://www.microsoft.com/en-us/security/blog/feed/","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:25Z","unhealthy":false},"Cisco Talos":{"ok":true,"items":15,"latency_ms":183,"fetch_ms":168,"parse_ms":16,"url":"https://blog.talosintelligence.com/rss/","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:25Z","unhealthy":false},"Securelist":{"ok":true,"items":10,"latency_ms":1706,"fetch_ms":1692,"parse_ms":13,"url":"https://securelist.com/feed/","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:27Z","unhealthy":false},"Malwarebytes":{"ok":true,"items":15,"latency_ms":326,"fetch_ms":317,"parse_ms":8,"url":"https://www.malwarebytes.com/blog/feed","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:26Z","unhealthy":false},"Unit 42":{"ok":true,"items":15,"latency_ms":924,"fetch_ms":915,"parse_ms":9,"url":"https://unit42.paloaltonetworks.com/feed/","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:26Z","unhealthy":false},"Palo Alto Networks":{"ok":true,"items":10,"latency_ms":314,"fetch_ms":307,"parse_ms":7,"url":"https://blog.paloaltonetworks.com/feed/","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:26Z","unhealthy":false},"Elastic Security":{"ok":true,"items":15,"latency_ms":435,"fetch_ms":410,"parse_ms":25,"url":"https://www.elastic.co/security-labs/rss/feed.xml","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:26Z","unhealthy":false},"Cloudflare":{"ok":true,"items":15,"latency_ms":99,"fetch_ms":88,"parse_ms":11,"url":"https://blog.cloudflare.com/rss/","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:26Z","unhealthy":false},"Check Point":{"ok":true,"items":10,"latency_ms":193,"fetch_ms":189,"parse_ms":4,"url":"https://blog.checkpoint.com/feed/","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:26Z","unhealthy":false},"SentinelOne":{"ok":true,"items":10,"latency_ms":178,"fetch_ms":170,"parse_ms":8,"url":"https://www.sentinelone.com/blog/feed/","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:26Z","unhealthy":false},"Rapid7":{"ok":true,"items":15,"latency_ms":345,"fetch_ms":337,"parse_ms":8,"url":"https://www.rapid7.com/blog/rss","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:26Z","unhealthy":false},"Ars Technica":{"ok":true,"items":15,"latency_ms":456,"fetch_ms":446,"parse_ms":9,"url":"https://arstechnica.com/security/rss","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:26Z","unhealthy":false},"TechCrunch":{"ok":true,"items":15,"latency_ms":129,"fetch_ms":120,"parse_ms":8,"url":"https://techcrunch.com/tag/security/feed/","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:26Z","unhealthy":false},"Wired Security":{"ok":true,"items":15,"latency_ms":131,"fetch_ms":124,"parse_ms":7,"url":"https://www.wired.com/feed/category/security/latest/rss","consecutive_failures":0,"last_success_at":"2026-11-11T08:48:26Z","unhealthy":false},"Beazley Security Labs Articles":{"ok":true,"items":10,"latency_ms":409,"fetch_ms":403,"parse_ms":6,"consecutive_failures":0,"last_success_at":"2026-11-11T08:48:27Z","unhealthy":false},"Beazley Security Labs Advisories":{"ok":true,"items":10,"latency_ms":289,"fetch_ms":284,"parse_ms":6,"consecutive_failures":0,"last_success_at":"2026-11-11T08:48:27Z","unhealthy":false}},"items":[{"title":"Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD","link":"https://securityweek.com/chipmaker-patch-tuesday-over-200-vulnerabilities-addressed-by-intel-amd","canonical_url":"https://securityweek.com/chipmaker-patch-tuesday-over-200-vulnerabilities-addressed-by-intel-amd","date":"2026-11-11T08:42:44Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"Recently Patched Barracuda Vulnerabilities Exploited in Attacks","link":"https://securityweek.com/recently-patched-barracuda-vulnerabilities-exploited-in-attacks","canonical_url":"https://securityweek.com/recently-patched-barracuda-vulnerabilities-exploited-in-attacks","date":"2026-11-11T07:53:51Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[{"name":"Barracuda","url":"/barracuda","matched_alias":"barracuda"}]},{"title":"Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms","link":"https://securityweek.com/bluetooth-airplay-pairing-vulnerabilities-patched-across-apple-platforms","canonical_url":"https://securityweek.com/bluetooth-airplay-pairing-vulnerabilities-patched-across-apple-platforms","date":"2026-11-11T07:00:17Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities","link":"https://blog.talosintelligence.com/microsoft-patch-tuesday-for-november-2026","canonical_url":"https://blog.talosintelligence.com/microsoft-patch-tuesday-for-november-2026","date":"2026-11-11T01:41:17Z","source":"Cisco Talos","cves":[],"tags":[],"actors":[]},{"title":"November Patch Tuesday: An Overflowing Cornucopia of CVEs","link":"https://darkreading.com/vulnerabilities-threats/november-patch-tuesday-cornucopia-cves","canonical_url":"https://darkreading.com/vulnerabilities-threats/november-patch-tuesday-cornucopia-cves","date":"2026-11-10T22:26:51Z","source":"DarkReading","cves":[],"tags":[],"actors":[]},{"title":"Patch Tuesday - November 2026","link":"https://rapid7.com/blog/post/em-patch-tuesday-november-2026","canonical_url":"https://rapid7.com/blog/post/em-patch-tuesday-november-2026","date":"2026-11-10T21:55:37Z","source":"Rapid7","cves":[],"tags":[],"actors":[]},{"title":"Microsoft Fixes Nearly 1,100 Security Vulnerabilities","link":"https://krebsonsecurity.com/2026/11/microsoft-fixes-nearly-1100-security-vulnerabilities","canonical_url":"https://krebsonsecurity.com/2026/11/microsoft-fixes-nearly-1100-security-vulnerabilities","date":"2026-11-10T21:55:03Z","source":"KrebsOnSecurity","cves":[],"tags":[],"actors":[]},{"title":"Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon","link":"https://darkreading.com/cyberattacks-data-breaches/artex-ai-pen-test-tool-hackers-weapon","canonical_url":"https://darkreading.com/cyberattacks-data-breaches/artex-ai-pen-test-tool-hackers-weapon","date":"2026-11-10T21:01:14Z","source":"DarkReading","cves":[],"tags":[],"actors":[]},{"title":"Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row","link":"https://therecord.media/patch-tuesday-microsoft-1000-bugs-again","canonical_url":"https://therecord.media/patch-tuesday-microsoft-1000-bugs-again","date":"2026-11-10T20:55:00Z","source":"The Record","cves":[],"tags":[],"actors":[]},{"title":"Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft","link":"https://securityweek.com/exploited-outlook-zero-day-among-1094-flaws-patched-by-microsoft","canonical_url":"https://securityweek.com/exploited-outlook-zero-day-among-1094-flaws-patched-by-microsoft","date":"2026-11-10T19:19:46Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users","link":"https://thehackernews.com/2026/11/sglang-rce-exploit-breaches-near-ai.html","canonical_url":"https://thehackernews.com/2026/11/sglang-rce-exploit-breaches-near-ai.html","date":"2026-11-10T19:19:39Z","source":"The Hacker News","cves":[],"tags":["breach"],"actors":[]},{"title":"Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access","link":"https://thehackernews.com/2026/11/hackers-exploit-critical-xen-orchestra.html","canonical_url":"https://thehackernews.com/2026/11/hackers-exploit-critical-xen-orchestra.html","date":"2026-11-10T18:12:21Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"Adobe Patches 110 Vulnerabilities Across 9 Products","link":"https://securityweek.com/adobe-patches-110-vulnerabilities-across-9-products","canonical_url":"https://securityweek.com/adobe-patches-110-vulnerabilities-across-9-products","date":"2026-11-10T18:11:54Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem","link":"https://thehackernews.com/2026/11/three-china-nexus-espionage-campaigns.html","canonical_url":"https://thehackernews.com/2026/11/three-china-nexus-espionage-campaigns.html","date":"2026-11-10T17:43:23Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"AI company Fireworks says hackers stole data, billing info during October breaches","link":"https://therecord.media/ai-company-fireworks-says-hackers-stole-data-in-oct-attacks","canonical_url":"https://therecord.media/ai-company-fireworks-says-hackers-stole-data-in-oct-attacks","date":"2026-11-10T16:08:00Z","source":"The Record","cves":[],"tags":["breach"],"actors":[]},{"title":"Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor","link":"https://thehackernews.com/2026/11/attackers-exploit-ahsaycbs-flaws-to.html","canonical_url":"https://thehackernews.com/2026/11/attackers-exploit-ahsaycbs-flaws-to.html","date":"2026-11-10T16:00:55Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America","link":"https://thehackernews.com/2026/11/blind-eagle-uses-fake-court-notices-to.html","canonical_url":"https://thehackernews.com/2026/11/blind-eagle-uses-fake-court-notices-to.html","date":"2026-11-10T15:58:44Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"Cybercriminals are increasingly infecting regular people with spyware","link":"https://therecord.media/spyware-cyber-crime-iverify","canonical_url":"https://therecord.media/spyware-cyber-crime-iverify","date":"2026-11-10T15:45:00Z","source":"The Record","cves":[],"tags":[],"actors":[]},{"title":"Fireworks AI Confirms Wider Breach Affecting Customer Datasets, Model Weights and Notion AI Chats","link":"https://thehackernews.com/2026/11/fireworks-ai-breach-widens-to-expose.html","canonical_url":"https://thehackernews.com/2026/11/fireworks-ai-breach-widens-to-expose.html","date":"2026-11-10T15:33:59Z","source":"The Hacker News","cves":[],"tags":["breach"],"actors":[]},{"title":"Today: CISO Forum Virtual Summit 2026 – Join Global Cybersecurity Leaders","link":"https://securityweek.com/today-ciso-forum-virtual-summit-2026-join-global-cybersecurity-leaders","canonical_url":"https://securityweek.com/today-ciso-forum-virtual-summit-2026-join-global-cybersecurity-leaders","date":"2026-11-10T15:00:00Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[{"name":"Turla","url":"/apt0010","matched_alias":"summit"}]},{"title":"SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities","link":"https://securityweek.com/sap-patches-critical-icm2shell-proxygate-vulnerabilities","canonical_url":"https://securityweek.com/sap-patches-critical-icm2shell-proxygate-vulnerabilities","date":"2026-11-10T14:46:28Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"Palantir exec nominated to lead CISA; lame-duck Senate vote is uncertain","link":"https://therecord.media/michael-losapio-cisa-director-nomination","canonical_url":"https://therecord.media/michael-losapio-cisa-director-nomination","date":"2026-11-10T14:31:00Z","source":"The Record","cves":[],"tags":[],"actors":[]},{"title":"Critical vulnerabilities in N-able N-central prompt hosted shutdown","link":"https://rapid7.com/blog/post/etr-critical-vulnerabilities-in-n-able-n-central-prompt-hosted-shutdown","canonical_url":"https://rapid7.com/blog/post/etr-critical-vulnerabilities-in-n-able-n-central-prompt-hosted-shutdown","date":"2026-11-10T14:20:34Z","source":"Rapid7","cves":[],"tags":[],"actors":[]},{"title":"AI Makes Reverse Engineering Mainstream Software & Malware Far Easier","link":"https://darkreading.com/application-security/ai-reverse-engineering-apps","canonical_url":"https://darkreading.com/application-security/ai-reverse-engineering-apps","date":"2026-11-10T13:00:00Z","source":"DarkReading","cves":[],"tags":[],"actors":[]},{"title":"Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed","link":"https://thehackernews.com/2026/11/binance-warns-of-ios-sandbox-escape.html","canonical_url":"https://thehackernews.com/2026/11/binance-warns-of-ios-sandbox-escape.html","date":"2026-11-10T12:15:31Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"CISA Adds Six Known Exploited Vulnerabilities to Catalog","link":"https://cisa.gov/news-events/alerts/2026/11/10/cisa-adds-six-known-exploited-vulnerabilities-catalog","canonical_url":"https://cisa.gov/news-events/alerts/2026/11/10/cisa-adds-six-known-exploited-vulnerabilities-catalog","date":"2026-11-10T12:00:00Z","source":"CISA Advisories","cves":[],"tags":[],"actors":[]},{"title":"Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities","link":"https://thehackernews.com/2026/11/apple-patches-imessage-group-chat.html","canonical_url":"https://thehackernews.com/2026/11/apple-patches-imessage-group-chat.html","date":"2026-11-10T10:16:51Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers","link":"https://thehackernews.com/2026/11/russian-turla-hackers-use-new-cereal.html","canonical_url":"https://thehackernews.com/2026/11/russian-turla-hackers-use-new-cereal.html","date":"2026-11-10T10:07:29Z","source":"The Hacker News","cves":[],"tags":[],"actors":[{"name":"Turla","url":"/apt0010","matched_alias":"turla"}]},{"title":"Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark","link":"https://thehackernews.com/2026/11/anthropics-claude-fable-52-beats-gpt-6.html","canonical_url":"https://thehackernews.com/2026/11/anthropics-claude-fable-52-beats-gpt-6.html","date":"2026-11-10T08:16:14Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"IT threat evolution in Q3 2026. Non-mobile statistics","link":"https://securelist.com/malware-report-q3-2026-pc-iot-statistics/121843","canonical_url":"https://securelist.com/malware-report-q3-2026-pc-iot-statistics/121843","date":"2026-11-10T08:00:37Z","source":"Securelist","cves":[],"tags":[],"actors":[]},{"title":"IT threat evolution in Q3 2026. Mobile statistics","link":"https://securelist.com/malware-report-q3-2026-mobile-statistics/121844","canonical_url":"https://securelist.com/malware-report-q3-2026-mobile-statistics/121844","date":"2026-11-10T08:00:17Z","source":"Securelist","cves":[],"tags":[],"actors":[]},{"title":"France Blames Iran for a Cyberattack That Heated Supermarket Refrigerators","link":"https://securityweek.com/france-blames-iran-for-a-cyberattack-that-heated-supermarket-refrigerators","canonical_url":"https://securityweek.com/france-blames-iran-for-a-cyberattack-that-heated-supermarket-refrigerators","date":"2026-11-10T07:35:05Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026","link":"https://thehackernews.com/2026/11/google-issues-chrome-security-update.html","canonical_url":"https://thehackernews.com/2026/11/google-issues-chrome-security-update.html","date":"2026-11-10T06:52:54Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws","link":"https://thehackernews.com/2026/11/cisa-warns-of-active-exploitation-of.html","canonical_url":"https://thehackernews.com/2026/11/cisa-warns-of-active-exploitation-of.html","date":"2026-11-10T06:31:42Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"Chrome Update Patches Exploited XML Zero-Day, Eighth This Year","link":"https://securityweek.com/chrome-update-patches-exploited-xml-zero-day-eighth-this-year","canonical_url":"https://securityweek.com/chrome-update-patches-exploited-xml-zero-day-eighth-this-year","date":"2026-11-10T06:12:24Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"CISA Announces Enhanced Reporting Form for Cyber Incidents","link":"https://darkreading.com/cyberattacks-data-breaches/cisa-announces-enhanced-reporting-form-cyber-incidents","canonical_url":"https://darkreading.com/cyberattacks-data-breaches/cisa-announces-enhanced-reporting-form-cyber-incidents","date":"2026-11-09T21:38:20Z","source":"DarkReading","cves":[],"tags":[],"actors":[]},{"title":"Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion","link":"https://darkreading.com/application-security/microsoft-rce-bug-windows-paint-confusion","canonical_url":"https://darkreading.com/application-security/microsoft-rce-bug-windows-paint-confusion","date":"2026-11-09T21:12:24Z","source":"DarkReading","cves":[],"tags":[],"actors":[]},{"title":"Data breach at hearing aid giant Amplifon impacts thousands","link":"https://therecord.media/amplifon-hearing-aid-company-data-breach","canonical_url":"https://therecord.media/amplifon-hearing-aid-company-data-breach","date":"2026-11-09T20:44:00Z","source":"The Record","cves":[],"tags":["breach"],"actors":[]},{"title":"Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India","link":"https://darkreading.com/cybersecurity-operations/black-hat-india-2026-landmark-debut","canonical_url":"https://darkreading.com/cybersecurity-operations/black-hat-india-2026-landmark-debut","date":"2026-11-09T20:19:56Z","source":"DarkReading","cves":[],"tags":[],"actors":[]},{"title":"Vulnerability that lets hackers SSH into Linux devices is under active exploitation","link":"https://arstechnica.com/security/2026/11/vulnerability-that-lets-hackers-ssh-into-linux-devices-is-under-active-exploitation","canonical_url":"https://arstechnica.com/security/2026/11/vulnerability-that-lets-hackers-ssh-into-linux-devices-is-under-active-exploitation","date":"2026-11-09T19:41:34Z","source":"Ars Technica","cves":[],"tags":[],"actors":[]},{"title":"Vanderbilt cybersecurity incident impacting campus devices and systems","link":"https://therecord.media/vanderbilt-cyberattack-ransomware-alert","canonical_url":"https://therecord.media/vanderbilt-cyberattack-ransomware-alert","date":"2026-11-09T18:30:00Z","source":"The Record","cves":[],"tags":[],"actors":[]},{"title":"Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data","link":"https://thehackernews.com/2026/11/hackers-exploit-quboles-trusted-aws.html","canonical_url":"https://thehackernews.com/2026/11/hackers-exploit-quboles-trusted-aws.html","date":"2026-11-09T17:51:21Z","source":"The Hacker News","cves":[],"tags":["breach"],"actors":[]},{"title":"Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware","link":"https://thehackernews.com/2026/11/hackers-compromise-etherspheres-bee-js.html","canonical_url":"https://thehackernews.com/2026/11/hackers-compromise-etherspheres-bee-js.html","date":"2026-11-09T17:36:28Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia","link":"https://thehackernews.com/2026/11/bitter-hackers-deploy-new-paprat.html","canonical_url":"https://thehackernews.com/2026/11/bitter-hackers-deploy-new-paprat.html","date":"2026-11-09T14:31:29Z","source":"The Hacker News","cves":[],"tags":[],"actors":[{"name":"BITTER","url":"/apt1002","matched_alias":"bitter"},{"name":"HAZY TIGER","url":"/hazy-tiger","matched_alias":"bitter"}]},{"title":"Alleged AI-aided cyberattack exploits assistant interface to breach German web host","link":"https://therecord.media/cyberattack-germany-ai-mittwald","canonical_url":"https://therecord.media/cyberattack-germany-ai-mittwald","date":"2026-11-09T14:15:00Z","source":"The Record","cves":[],"tags":["breach"],"actors":[]},{"title":"Revolve Puts Data Breach Victim Count at 1.5 Million","link":"https://securityweek.com/revolve-puts-data-breach-victim-count-at-1-5-million","canonical_url":"https://securityweek.com/revolve-puts-data-breach-victim-count-at-1-5-million","date":"2026-11-09T14:08:08Z","source":"SecurityWeek","cves":[],"tags":["breach"],"actors":[]},{"title":"Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers","link":"https://securityweek.com/iris-plaza-breach-may-have-exposed-data-of-7-7-million-customers","canonical_url":"https://securityweek.com/iris-plaza-breach-may-have-exposed-data-of-7-7-million-customers","date":"2026-11-09T12:41:27Z","source":"SecurityWeek","cves":[],"tags":["breach"],"actors":[]},{"title":"Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web","link":"https://securityweek.com/italys-meloni-blames-pro-russian-hackers-for-leak-of-foreign-ministers-data-on-the-dark-web","canonical_url":"https://securityweek.com/italys-meloni-blames-pro-russian-hackers-for-leak-of-foreign-ministers-data-on-the-dark-web","date":"2026-11-09T12:22:12Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH","link":"https://securityweek.com/hackers-exploiting-sshole-authentication-bypass-in-openssh","canonical_url":"https://securityweek.com/hackers-exploiting-sshole-authentication-bypass-in-openssh","date":"2026-11-09T12:13:32Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","link":"https://cisa.gov/news-events/alerts/2026/11/09/cisa-adds-four-known-exploited-vulnerabilities-catalog","canonical_url":"https://cisa.gov/news-events/alerts/2026/11/09/cisa-adds-four-known-exploited-vulnerabilities-catalog","date":"2026-11-09T12:00:00Z","source":"CISA Advisories","cves":[],"tags":[],"actors":[]},{"title":"Amplifon Americas Data Breach Impacts 1.3 Million","link":"https://securityweek.com/amplifon-americas-data-breach-impacts-1-3-million","canonical_url":"https://securityweek.com/amplifon-americas-data-breach-impacts-1-3-million","date":"2026-11-09T11:20:09Z","source":"SecurityWeek","cves":[],"tags":["breach"],"actors":[]},{"title":"Over 3 Million People Hit by Frontline Education Data Breach","link":"https://securityweek.com/3-million-people-hit-by-frontline-education-data-breach","canonical_url":"https://securityweek.com/3-million-people-hit-by-frontline-education-data-breach","date":"2026-11-09T10:09:02Z","source":"SecurityWeek","cves":[],"tags":["breach"],"actors":[]},{"title":"Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records","link":"https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html","canonical_url":"https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html","date":"2026-11-09T09:01:50Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation","link":"https://thehackernews.com/2026/11/cisa-flags-sonicwall-sonicos-mfa-bypass.html","canonical_url":"https://thehackernews.com/2026/11/cisa-flags-sonicwall-sonicos-mfa-bypass.html","date":"2026-11-09T06:05:24Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"Emerging Threat: Critical Vulnerability in N-able N-central","link":"https://labs.beazley.security/advisories/BSL-A1242","canonical_url":"https://labs.beazley.security/advisories/BSL-A1242","date":"2026-11-09T06:00:00Z","source":"Beazley Security Labs Advisories","cves":[],"tags":[],"actors":[]},{"title":"The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call","link":"https://wired.com/story/kernel-panic-refrigeration-hacks-internet-of-things","canonical_url":"https://wired.com/story/kernel-panic-refrigeration-hacks-internet-of-things","date":"2026-11-07T13:00:00Z","source":"Wired Security","cves":[],"tags":[],"actors":[]},{"title":"SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins","link":"https://securityweek.com/sonicwall-patches-exploited-sonicos-bug-that-weakens-vpn-logins","canonical_url":"https://securityweek.com/sonicwall-patches-exploited-sonicos-bug-that-weakens-vpn-logins","date":"2026-11-07T10:16:23Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"Chainalysis says hackers stole credentials and tokens for all of its customers","link":"https://arstechnica.com/security/2026/11/chainalysis-says-hackers-stole-credentials-and-tokens-for-all-of-its-customers","canonical_url":"https://arstechnica.com/security/2026/11/chainalysis-says-hackers-stole-credentials-and-tokens-for-all-of-its-customers","date":"2026-11-06T20:56:41Z","source":"Ars Technica","cves":[],"tags":[],"actors":[]},{"title":"Certificate authority DigiCert reports data breach involving business customer info","link":"https://therecord.media/digicert-certificate-authority-reports-data-breach","canonical_url":"https://therecord.media/digicert-certificate-authority-reports-data-breach","date":"2026-11-06T18:56:00Z","source":"The Record","cves":[],"tags":["breach"],"actors":[]},{"title":"Free Chinese AI Models Are Getting Scary Good at Hacking","link":"https://wired.com/story/free-chinese-ai-models-are-getting-scary-good-at-hacking","canonical_url":"https://wired.com/story/free-chinese-ai-models-are-getting-scary-good-at-hacking","date":"2026-11-06T18:43:43Z","source":"Wired Security","cves":[],"tags":[],"actors":[]},{"title":"The Good, the Bad and the Ugly in Cybersecurity - Week 45 (2026)","link":"https://sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-45-8","canonical_url":"https://sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-45-8","date":"2026-11-06T18:30:54Z","source":"SentinelOne","cves":[],"tags":[],"actors":[]},{"title":"Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks","link":"https://securityweek.com/japan-announces-emergency-cybersecurity-package-following-a-wave-of-attacks","canonical_url":"https://securityweek.com/japan-announces-emergency-cybersecurity-package-following-a-wave-of-attacks","date":"2026-11-06T18:28:41Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers","link":"https://therecord.media/fbi-agent-pleads-guilty-to-stealing-from-nation-state-hackers","canonical_url":"https://therecord.media/fbi-agent-pleads-guilty-to-stealing-from-nation-state-hackers","date":"2026-11-06T16:53:00Z","source":"The Record","cves":[],"tags":[],"actors":[]},{"title":"Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot","link":"https://thehackernews.com/2026/11/hackers-exploited-openssh-sshole-flaw.html","canonical_url":"https://thehackernews.com/2026/11/hackers-exploited-openssh-sshole-flaw.html","date":"2026-11-06T15:21:49Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"DigiCert Data Breach Impacts Business Customer Information","link":"https://securityweek.com/digicert-data-breach-impacts-business-customer-information","canonical_url":"https://securityweek.com/digicert-data-breach-impacts-business-customer-information","date":"2026-11-06T14:00:07Z","source":"SecurityWeek","cves":[],"tags":["breach"],"actors":[]},{"title":"Metasploit Wrapup: Unauth RCE modules in Network Perimeter Devices and much more","link":"https://rapid7.com/blog/post/pt-metasploit-wrapup-unauth-rce-modules-in-network-perimeter-devices-and-much-more","canonical_url":"https://rapid7.com/blog/post/pt-metasploit-wrapup-unauth-rce-modules-in-network-perimeter-devices-and-much-more","date":"2026-11-06T13:52:11Z","source":"Rapid7","cves":[],"tags":[],"actors":[]},{"title":"Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack","link":"https://securityweek.com/grocery-giant-ahold-delhaize-estimates-financial-toll-of-october-cyberattack","canonical_url":"https://securityweek.com/grocery-giant-ahold-delhaize-estimates-financial-toll-of-october-cyberattack","date":"2026-11-06T12:47:55Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It","link":"https://thehackernews.com/2026/11/microsoft-paint-rce-fix-now-available.html","canonical_url":"https://thehackernews.com/2026/11/microsoft-paint-rce-fix-now-available.html","date":"2026-11-06T12:06:43Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"CISA Adds One Known Exploited Vulnerability to Catalog","link":"https://cisa.gov/news-events/alerts/2026/11/06/cisa-adds-one-known-exploited-vulnerability-catalog","canonical_url":"https://cisa.gov/news-events/alerts/2026/11/06/cisa-adds-one-known-exploited-vulnerability-catalog","date":"2026-11-06T12:00:00Z","source":"CISA Advisories","cves":[],"tags":[],"actors":[]},{"title":"OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions","link":"https://securityweek.com/openai-model-wrote-its-own-network-code-to-get-around-sandbox-restrictions","canonical_url":"https://securityweek.com/openai-model-wrote-its-own-network-code-to-get-around-sandbox-restrictions","date":"2026-11-06T09:33:51Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services","link":"https://thehackernews.com/2026/11/chainalysis-breach-exposes-all-users.html","canonical_url":"https://thehackernews.com/2026/11/chainalysis-breach-exposes-all-users.html","date":"2026-11-06T08:04:49Z","source":"The Hacker News","cves":[],"tags":["breach"],"actors":[]},{"title":"Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs","link":"https://thehackernews.com/2026/11/hackers-hide-linux-backdoor-in-control.html","canonical_url":"https://thehackernews.com/2026/11/hackers-hide-linux-backdoor-in-control.html","date":"2026-11-06T05:58:54Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"Threat actors use agentic AI tooling to find and abuse exposed secrets","link":"https://microsoft.com/en-us/security/blog/2026/11/05/threat-actors-use-agentic-ai-tooling-to-find-and-abuse-exposed-secrets","canonical_url":"https://microsoft.com/en-us/security/blog/2026/11/05/threat-actors-use-agentic-ai-tooling-to-find-and-abuse-exposed-secrets","date":"2026-11-05T23:46:50Z","source":"Microsoft Security","cves":[],"tags":[],"actors":[]},{"title":"Meet *sshole, the vulnerability that lets hackers SSH into Linux devices","link":"https://arstechnica.com/security/2026/11/vulnerability-allows-attackers-to-log-into-some-linux-devices-sans-password","canonical_url":"https://arstechnica.com/security/2026/11/vulnerability-allows-attackers-to-log-into-some-linux-devices-sans-password","date":"2026-11-05T23:09:36Z","source":"Ars Technica","cves":[],"tags":[],"actors":[]},{"title":"Queens Public Library says ransomware attack disrupted Wi-Fi, on-site computers","link":"https://therecord.media/queens-library-ransomware-causes-disruptions","canonical_url":"https://therecord.media/queens-library-ransomware-causes-disruptions","date":"2026-11-05T22:08:00Z","source":"The Record","cves":[],"tags":["ransomware"],"actors":[]},{"title":"What We Missed: Knicks Phishing Test Goes Out of Bounds","link":"https://darkreading.com/cyber-risk/what-we-missed-knicks-phishing-test-out-of-bounds","canonical_url":"https://darkreading.com/cyber-risk/what-we-missed-knicks-phishing-test-out-of-bounds","date":"2026-11-05T21:00:47Z","source":"DarkReading","cves":[],"tags":[],"actors":[]},{"title":"APT29's Watering Holes Target Thousands of Mobile Users","link":"https://darkreading.com/mobile-security/apt29-watering-holes-target-mobile-users","canonical_url":"https://darkreading.com/mobile-security/apt29-watering-holes-target-mobile-users","date":"2026-11-05T20:05:39Z","source":"DarkReading","cves":[],"tags":["apt"],"actors":[{"name":"APT29","url":"/apt29","matched_alias":"apt29"}]},{"title":"Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign","link":"https://therecord.media/russia-hackers-smartphone-cyberattacks","canonical_url":"https://therecord.media/russia-hackers-smartphone-cyberattacks","date":"2026-11-05T17:00:00Z","source":"The Record","cves":[],"tags":[],"actors":[]},{"title":"Email threat landscape: Q3 2026 trends and insights","link":"https://microsoft.com/en-us/security/blog/2026/11/05/email-threat-landscape-q3-2026-trends-and-insights","canonical_url":"https://microsoft.com/en-us/security/blog/2026/11/05/email-threat-landscape-q3-2026-trends-and-insights","date":"2026-11-05T16:00:00Z","source":"Microsoft Security","cves":[],"tags":[],"actors":[]},{"title":"ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories","link":"https://thehackernews.com/2026/11/threatsday-apache-ofbiz-rce-dreamhost.html","canonical_url":"https://thehackernews.com/2026/11/threatsday-apache-ofbiz-rce-dreamhost.html","date":"2026-11-05T14:41:10Z","source":"The Hacker News","cves":[],"tags":["breach"],"actors":[]},{"title":"Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns","link":"https://securityweek.com/bank-phishing-sites-show-fake-suspended-pages-to-evade-takedowns","canonical_url":"https://securityweek.com/bank-phishing-sites-show-fake-suspended-pages-to-evade-takedowns","date":"2026-11-05T13:22:12Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"Cyberattack Hits French Blood Bank Site but No Blood Products Are Compromised","link":"https://securityweek.com/cyberattack-hits-french-blood-bank-site-but-no-blood-products-are-compromised","canonical_url":"https://securityweek.com/cyberattack-hits-french-blood-bank-site-but-no-blood-products-are-compromised","date":"2026-11-05T12:58:32Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day","link":"https://securityweek.com/zyxel-switch-hacks-blamed-on-patched-flaw-actually-exploited-a-zero-day","canonical_url":"https://securityweek.com/zyxel-switch-hacks-blamed-on-patched-flaw-actually-exploited-a-zero-day","date":"2026-11-05T10:56:41Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes","link":"https://securityweek.com/russia-linked-hackers-hit-ios-android-devices-with-exploit-chains-via-watering-holes","canonical_url":"https://securityweek.com/russia-linked-hackers-hit-ios-android-devices-with-exploit-chains-via-watering-holes","date":"2026-11-05T10:37:13Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks","link":"https://securityweek.com/openai-finds-gpt-6-astra-quietly-holding-back-on-internal-red-teaming-exploit-tasks","canonical_url":"https://securityweek.com/openai-finds-gpt-6-astra-quietly-holding-back-on-internal-red-teaming-exploit-tasks","date":"2026-11-05T10:02:00Z","source":"SecurityWeek","cves":[],"tags":[],"actors":[]},{"title":"The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603","link":"https://securelist.com/storm-2603-fileless-toolshell-attack/121467","canonical_url":"https://securelist.com/storm-2603-fileless-toolshell-attack/121467","date":"2026-11-05T10:00:11Z","source":"Securelist","cves":[],"tags":["breach"],"actors":[{"name":"Storm-2603","url":"/storm-2603","matched_alias":"storm-2603"}]},{"title":"Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution","link":"https://thehackernews.com/2026/11/zyxel-gs1900-patch-fails-to-block-zero.html","canonical_url":"https://thehackernews.com/2026/11/zyxel-gs1900-patch-fails-to-block-zero.html","date":"2026-11-05T07:06:33Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says","link":"https://thehackernews.com/2026/11/hackers-exploit-patched-apple-flaw-to.html","canonical_url":"https://thehackernews.com/2026/11/hackers-exploit-patched-apple-flaw-to.html","date":"2026-11-05T05:17:04Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"Hackers exploited iOS and Android flaws to infect phones","link":"https://arstechnica.com/security/2026/11/hackers-exploited-ios-and-android-flaws-to-infect-phones","canonical_url":"https://arstechnica.com/security/2026/11/hackers-exploited-ios-and-android-flaws-to-infect-phones","date":"2026-11-04T22:26:49Z","source":"Ars Technica","cves":[],"tags":[],"actors":[]},{"title":"Canadian extradited to US for allegedly hacking schools in at least four states","link":"https://therecord.media/canadian-nationals-accused-us-education-hacks-cryptomining","canonical_url":"https://therecord.media/canadian-nationals-accused-us-education-hacks-cryptomining","date":"2026-11-04T19:17:00Z","source":"The Record","cves":[],"tags":[],"actors":[]},{"title":"French bank confirms cyber heist, hackers suspected to have stolen an estimated $133 million","link":"https://therecord.media/french-bank-confirms-cyber-heist","canonical_url":"https://therecord.media/french-bank-confirms-cyber-heist","date":"2026-11-04T18:58:00Z","source":"The Record","cves":[],"tags":[],"actors":[]},{"title":"Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root","link":"https://thehackernews.com/2026/11/debian-and-ubuntu-apt-flaw-lets-mitm.html","canonical_url":"https://thehackernews.com/2026/11/debian-and-ubuntu-apt-flaw-lets-mitm.html","date":"2026-11-04T17:00:46Z","source":"The Hacker News","cves":[],"tags":["apt"],"actors":[]},{"title":"SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records","link":"https://thehackernews.com/2026/11/sonicwall-wont-patch-eol-gms-flaws-that.html","canonical_url":"https://thehackernews.com/2026/11/sonicwall-wont-patch-eol-gms-flaws-that.html","date":"2026-11-04T17:00:38Z","source":"The Hacker News","cves":[],"tags":[],"actors":[]},{"title":"Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet","link":"https://darkreading.com/endpoint-security/google-13-million-device-strong-xcpe-botnet","canonical_url":"https://darkreading.com/endpoint-security/google-13-million-device-strong-xcpe-botnet","date":"2026-11-04T16:24:08Z","source":"DarkReading","cves":[],"tags":[],"actors":[]},{"title":"Ukrainian news outlet Kyiv Independent hit by suspected Russian cyberattack","link":"https://therecord.media/ukraine-kyiv-independent-cyberattack","canonical_url":"https://therecord.media/ukraine-kyiv-independent-cyberattack","date":"2026-11-04T16:15:00Z","source":"The Record","cves":[],"tags":[],"actors":[]},{"title":"Binance says hackers who stole billions in crypto spent months planning heist","link":"https://arstechnica.com/information-technology/2026/11/binance-says-hackers-who-stole-billions-in-crypto-spent-months-planning-heist","canonical_url":"https://arstechnica.com/information-technology/2026/11/binance-says-hackers-who-stole-billions-in-crypto-spent-months-planning-heist","date":"2026-11-04T16:06:03Z","source":"Ars Technica","cves":[],"tags":[],"actors":[]},{"title":"APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits","link":"https://thehackernews.com/2026/11/apt29-linked-hackers-hijack-web.html","canonical_url":"https://thehackernews.com/2026/11/apt29-linked-hackers-hijack-web.html","date":"2026-11-04T14:27:52Z","source":"The Hacker News","cves":[],"tags":["apt"],"actors":[{"name":"APT29","url":"/apt29","matched_alias":"apt29"}]},{"title":"Cyberattack wipes cloud data at major Russian hosting provider Beget","link":"https://therecord.media/russia-cyberattack-beget-cloud","canonical_url":"https://therecord.media/russia-cyberattack-beget-cloud","date":"2026-11-04T14:00:00Z","source":"The Record","cves":[],"tags":[],"actors":[]},{"title":"HYFLOCK Ransomware Evolves with New Builds and Encryption Weaknesses","link":"https://blog.checkpoint.com/security/hyflock-ransomware-evolves-with-new-builds-and-encryption-weaknesses","canonical_url":"https://blog.checkpoint.com/security/hyflock-ransomware-evolves-with-new-builds-and-encryption-weaknesses","date":"2026-11-04T13:00:18Z","source":"Check Point","cves":[],"tags":["ransomware"],"actors":[{"name":"Hyflock","url":"/hyflock","matched_alias":"hyflock"}]},{"title":"Modernising threat hunting: Using Semantic Search to Find Risky AI Agent Behavior","link":"https://elastic.co/security-labs/blog/ai-agent-session-monitoring-embedding-models","canonical_url":"https://elastic.co/security-labs/blog/ai-agent-session-monitoring-embedding-models","date":"2026-11-04T12:45:02Z","source":"Elastic Security","cves":[],"tags":[],"actors":[]}]}