Compromised Qubole AWS credentials abused to steal customer secrets 
Default ForgeRock Password Exposed Two Automakers’ Connected-Car Accounts 
Agentic AI framework used to exploit exposed credentials in cloud environments 
Azure Linux 3.0.2022 bundles more than 470 CVE references 
Google Disrupts XCPE Botnet Linked to 1.3 Million Android TV Boxes 
SonicWall fixes actively exploited SSL-VPN flaw that bypasses SAML MFA
SonicWall has released fixes for an actively exploited flaw in its SonicOS SSL-VPN service that can let an attacker with...
Refrigeration-system attacks disrupt European supermarkets and medical facilities
Cyberattacks targeting commercial refrigeration controllers have disrupted supermarkets across Europe, with incidents reported in France and at least 10 other...
MOLE explores post-quantum privacy for web access credentials
Post-quantum planning for the web extends beyond the key-agreement mechanisms used in TLS. Privacy Pass, which sites can use to...
Crédit Mutuel Arkéa confirms attack enabled fraudulent transactions
French banking group Crédit Mutuel Arkéa says attackers used a service provider’s platform to reach its network and carry out...
Vanderbilt Responds to Ransomware Group’s Data-Theft Claims
Vanderbilt University says it is responding to a cyberattack claimed by the BYOD ransomware gang. The group alleges that it...
Three men charged in alleged $129 million deepfake CEO fraud scheme
Three men have been charged in connection with an alleged scheme that used artificial intelligence-generated impersonations of company executives and...
Sega Reports 2.196 Million Customer Email Addresses Exposed in Vendor Breach
Sega said on November 9, 2026, that email addresses associated with approximately 2.196 million customer newsletter subscriptions were exposed after...
SSHole OpenSSH flaw is being exploited against accounts on affected Linux systems
Threat actors are attempting to exploit SSHole, a high-severity authentication bypass in OpenSSH tracked as CVE-2026-123158. The flaw can allow...
CISA Announces Enhanced Form for Cyber Incident Reporting
The Cybersecurity and Infrastructure Security Agency (CISA) has announced an enhanced reporting form for cyber incidents. The agency says the...
Arkose Labs adds session policies and Agent ID to Agent Trust Manager
Arkose Labs has expanded its Agent Trust Manager with controls for classifying and governing agent sessions across customer-facing workflows. Announced...