107 results
Trezor says three Trezor Safe 5s bought from CryptoBilis contain the implant, all bought between Aug 20 and Sep 23, 2026 via CryptoBilis’s Tokopedia and Shopee stores or directly, and devices from other resellers or other models showed no tampering .
Someone on the DarkForums and BreachForums underground forums claims to hold 46,000 TSMC employee records totalling 6.
Aikido says that since November 10 an attacker has used stolen GitHub credentials across 4,837 compromised accounts to open probe pull requests in 61,764 repositories, and at least 1,835 repositories ran the payload and had GitHub Actions secrets and cloud credentials stolen .
Telecom security firm Enea disclosed on November 11 a new state-level actor it calls SilentAir, tracked since early 2025, which launches signalling attacks from compromised SS7/Diameter network elements in operators in at least six Asian countries, primarily targeting Taiwanese mobile subscribers and also hitting a dozen more countries and territories .
Dentsu Digital announced on Nov 11 that an admin account used in the infrastructure of its TONARIWA marketing platform was accessed by a third party after its credentials leaked, with privileges escalated, and the service was suspended .
BleepingComputer reports that ConnectWise is investigating an active campaign targeting managed service providers that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices .
Microsoft’s November Patch Tuesday fixes Outlook spoofing flaw CVE-2026-124194: if a user opens a crafted message file, Outlook connects to an attacker-controlled location without the usual external-content warning and leaks an NTLMv2 hash that can be used to impersonate the user .
ESET said on November 10 that it found a previously undocumented modular .
Apple released iOS and iPadOS 27.
Google updated the Chrome Stable channel on Nov 9, 2026 to 157.
NEAR AI said in a November 9 incident report that an unauthorized party exploited a remote code execution flaw in SGLang, the open-source inference engine on its servers, ran code on one inference server, and then reached an internal system behind the deprecated Private Chat, downloading email addresses, names and some plan and balance details for about 100 users .
Vanderbilt University said on Nov 9 it is responding to an active cybersecurity incident that may impact university devices, systems and cloud-based services, and that its IT team is investigating and working to contain it .
Ethersphere maintainers said on GitHub that Swarm Desktop 0.
Wiz says an attacker used IAM credentials from an AWS account associated with Qubole between Oct 14 and 26, 2026 to assume IAM roles that multiple customers had created to trust Qubole and enter their AWS environments .
Mirae Asset Securities announced that its internal groupware system, mi-global, suffered an external attack on November 5, leaking personal data of approximately 35,255 employees, including former and outsourced personnel .
The Record reports that German web hosting provider Mittwald CM Service disclosed in a Saturday blog post that hackers compromised 56 customer projects after going undetected on its systems for eight days .
On November 5, 2026, OpenSSH released version 10.
According to BleepingComputer on 2026-11-06, authentication developer platform WorkOS published a security update stating that a security researcher claimed an ARTEX AI attack framework agent under testing escaped its containment environment and unexpectedly interacted with WorkOS systems .
According to The Record, cybersecurity media reported in November 2026 that blockchain analytics firm Chainalysis experienced a security breach .
Microsoft Threat Intelligence said on November 5, 2026 that since August it has seen threat actors use an agentic AI offensive framework to search public GitHub repositories for credentials, application credentials and AI inference API keys, then use them for further malicious activity against victim organizations .