Every alert, kept.

← Wed, Nov 11

Thursday, November 12, 2026 · 106 alerts

NewsGovernmentVendorLinux advisories

1. Macfinger ClickFix campaign sends DownTheDRAIN infostealer for macOS, (Fri, Nov 13th)SANS Internet Storm Center · 10:41 PM
2. FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From BinanceSecurityWeek · 9:28 PM
3. Africa's solar revolution is vast and speedyHacker News · 9:28 PM
4. Nvidia employees petition to bring back Jensen HuangHacker News · 9:16 PM
5. NYC Council passes ban on 'surveillance pricing'Hacker News · 9:04 PM
6. ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178, (Fri, Nov 13th)SANS Internet Storm Center · 9:00 PM
7. VU#644655: TightVNC and UltraVNC Viewer contains a heap-based buffer overflowCERT/CC Vulnerability Notes · 7:08 PM
8. Edge0-145B: Frontier AI Capabilities on Your Own ComputerHacker News · 6:06 PM
9. New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacksBleepingComputer · 5:53 PM
10. Getting Past the Post-Quantum Cryptography Discovery PhaseDark Reading · 5:46 PM
11. Hackers compromise 4,800 GitHub accounts to steal cloud credentialsBleepingComputer · 5:25 PM
12. Chinese frontier AI models carry the fingerprint of export-controlled GPUsHacker News · 4:56 PM
13. Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ toolsThe Record · 4:42 PM
14. Show HN: RealtimeVAD – trading false positives for 110ms earlier end-of-speechHacker News · 4:30 PM
15. Cyber Experts Weigh In: How to Fight Artex & AntiFoxDark Reading · 4:18 PM
16. Foundation Models frameworkHacker News · 4:13 PM
17. AI is turning Apple's app review process into a nightmare for synth developersHacker News · 4:09 PM
18. Microsoft 365 Outage Disrupts Outlook, Exchange Online and TeamsSecurityWeek · 3:55 PM
19. Announcement: Conductor Is BackHacker News · 3:37 PM
20. Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwideBleepingComputer · 3:15 PM
21. Extortion Group Luna Moth Flits Into Law Firms a Second TimeDark Reading · 3:09 PM
22. Major Microsoft Outlook Outage Leaves People With Email Jobs Unable to EmailWIRED Security · 3:01 PM
23. Former Nvidia CEO Huang had a relationship with a second employee, sources sayHacker News · 2:51 PM
24. New N-able "4EverAble2Shell" zero-day exploited hours after PoC releasedBleepingComputer · 2:51 PM
25. United to block customers from using AI agents, citing cyber threatsThe Record · 2:20 PM
26. Apache HTTP Server patches critical HTTP/2 remote code execution flawBleepingComputer · 2:12 PM
27. Dwarf planet candidate appears which takes roughly 280 years to orbit our sunHacker News · 2:05 PM
28. Never be afraid to ask questionsCisco Talos · 2:00 PM
29. Gemini 4 Hydrogen and OrchestratorHacker News · 1:52 PM
30. Rust 1.100Hacker News · 1:39 PM
31. Shipping giant Maersk says recent cyber incident affected legacy systemThe Record · 1:28 PM
32. Turning a 22-year-old Postgres type-confusion primitive into RCEHacker News · 1:22 PM
33. Service degradation on Microsoft 365Hacker News · 1:20 PM
34. Show HN: AgentRun – open-source, Self-improving Managed AgentsHacker News · 1:15 PM
35. VU#580079: Arbitrary file read/write vulnerability in ImageMagick-based applications with default configurationCERT/CC Vulnerability Notes · 1:12 PM
36. Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close ThemThe Hacker News · 1:07 PM
37. ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More StoriesThe Hacker News · 1:02 PM
38. Gemini 4 HydrogenHacker News · 1:01 PM
39. Show HN: Kapso – Iterative learning from enterprise dataHacker News · 12:51 PM
40. New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM AccessThe Hacker News · 12:50 PM
41. Show HN: My $300 embroidery machine needed a subscription, so I built my own appHacker News · 12:02 PM
42. Trained to betray: How post-training supply chain attacks hijack coding agentsMicrosoft Security Blog · 12:00 PM
43. Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a RegistryThe Hacker News · 11:27 AM
44. European authorities take down SteaIC malware servers for second time this yearThe Record · 11:21 AM
45. ConnectWise investigates ScreenConnect breaches after reports of incidents at nearly 50 organizationsThe Record · 11:16 AM
46. New Windows SignDrop zero-day gives hackers SYSTEM privilegesBleepingComputer · 11:04 AM
47. Weak Passwords Expose SQL Servers to Cryptominer and Gh0st RATInfosecurity Magazine · 11:00 AM
48. Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication BypassThe Hacker News · 10:38 AM
49. Apache Patches Critical HTTP Server RCE Found by Anthropic, GoogleSecurityWeek · 10:38 AM
50. ExcalidrawZ: Local Native Excalidraw on macOS/iOSHacker News · 10:25 AM
51. I'm making LLMs work on small and old devicesHacker News · 10:23 AM
52. 186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search HijackersThe Hacker News · 10:15 AM
53. VU#685399: PromZard context key code injection leads to remote code executionCERT/CC Vulnerability Notes · 10:09 AM
54. Police dismantle Gootloader, CastleRAT, StealC malware infrastructureBleepingComputer · 10:07 AM
55. Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society SectorsUnit 42 (Palo Alto Networks) · 10:00 AM
56. Your Endpoint Management Platform Could Be Your Biggest Security RiskBleepingComputer · 10:00 AM
57. VU#944667: ComfyUI-Easy-Use contains unauthenticated path traversal vulnerabilityCERT/CC Vulnerability Notes · 9:48 AM
58. Apify rotates API tokens, prompts 2FA resets after breachBleepingComputer · 9:36 AM
59. Hacked Asian Telcos Used to Intercept Taiwanese Calls and TextsInfosecurity Magazine · 9:30 AM
60. nDiligence Releases Four-Year Study Identifying a Critical Supply-Chain Vulnerability Across 50 Platform TypesGBHackers · 9:23 AM
61. Abandoned Quake 4 expansion finished by modders and now playableHacker News · 9:18 AM
62. Talking Zen 6 with Mike Clark at AMD In-DepthHacker News · 9:12 AM
63. Our software engineering interviews are changing a littleHacker News · 9:05 AM
64. Lego Takes BrickLink Marketplace Offline After Detecting Unusual ActivityInfosecurity Magazine · 9:00 AM
65. Apple’s HomeView Tries Face Authentication Without FaceIDWIRED Security · 9:00 AM
66. Jensen Huang resignsHacker News · 8:52 AM
67. Chrome, Firefox Updates Patch Over 180 VulnerabilitiesSecurityWeek · 8:42 AM
68. Attacker Targets 60,000 GitHub Repositories in Credential Theft CampaignSecurityWeek · 8:39 AM
69. CISA Warns of Actively Exploited Microsoft Outlook Zero-Day VulnerabilityGBHackers · 8:32 AM
70. ESET Blocks Over 700,000 Cruciferra Malware Attacks Using Advanced Encryption to Evade Antivirus DetectionGBHackers · 8:30 AM
71. Global Scam Networks Use AI, Deepfakes, and Crypto to Steal Billions From Victims, FATF WarnsGBHackers · 8:20 AM
72. Daylight Lands $80 Million for AI-Powered Security OperationsSecurityWeek · 8:12 AM
73. SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack PathsThe Hacker News · 8:08 AM
74. Adapting CPython for YkHacker News · 7:51 AM
75. Critical MongoDB Use-After-Free Vulnerability Allows Remote Code Execution Without AuthenticationGBHackers · 7:24 AM
76. Microsoft: Recent Windows updates cause SQL Server performance issuesBleepingComputer · 7:11 AM
77. Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMsThe Hacker News · 7:09 AM
78. Google Chrome Fixes 83 Security Flaws, Including 5 Critical Use-After-Free VulnerabilitiesGBHackers · 7:06 AM
79. Another Way Police Are Locating People from Their SmartphonesSchneier on Security · 7:02 AM
80. Siemens Industrial Edge ManagementCISA Cybersecurity Advisories · 7:00 AM
81. Siemens Building Automation and Energy ProductsCISA Cybersecurity Advisories · 7:00 AM
82. Siemens RUGGEDCOM APE1808CISA Cybersecurity Advisories · 7:00 AM
83. Siemens RUGGEDCOM APE1808CISA Cybersecurity Advisories · 7:00 AM
84. Siemens Desigo, GridscaleCISA Cybersecurity Advisories · 7:00 AM
85. Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)SANS Internet Storm Center · 6:56 AM
86. New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM AccessThe Hacker News · 6:51 AM
87. Calendar Invites and Live Proxies: Inside a Google Session Hijacking CampaignThe Hacker News · 6:51 AM
88. AntiFox AI Agents Linked to AWS Attacks That Exposed Production Secrets and Compromised Web ServersGBHackers · 6:47 AM
89. PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code ExecutionThe Hacker News · 6:33 AM
90. State-Sponsored Hackers Deploy Up to 8 AI Agents to Target Taiwanese Government SystemsGBHackers · 6:10 AM
91. Notion Customer Data Compromised in Fireworks AI HackSecurityWeek · 6:08 AM
92. Inside an AI Attack Against a US RetailerDark Reading · 6:00 AM
93. PoC Exploit Released for Critical Cisco Expressway RCE Vulnerability With CVSS 9.8 ScoreGBHackers · 5:53 AM
94. Security Teams Must Shift from Patching to Mitigation in the AI EraInfosecurity Magazine · 5:45 AM
95. Hackers Deploy Malware in Fresh ScreenConnect CampaignSecurityWeek · 5:39 AM
96. Palo Alto Networks Patches PAN-OS Vulnerability Allowing Remote Code Execution With Root PrivilegesGBHackers · 5:34 AM
97. Microsoft confirms Windows security updates installation issuesBleepingComputer · 5:24 AM
98. NCSC Launches Cyber Adversary Testing to Boost ResilienceInfosecurity Magazine · 5:00 AM
99. Hackers Target N-central Zero-Days as N-able Rushes PatchesSecurityWeek · 4:39 AM
100. Hackers plant GSocket on Linux servers for persistent accessBleepingComputer · 4:38 AM
101. Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on FailoverThe Hacker News · 4:25 AM
102. Critical Red Hat Quay Vulnerability Could Expose Private Container ImagesSecurityWeek · 4:23 AM
103. Maersk Reveals Data Breach as Extortion Group Demands $5mInfosecurity Magazine · 3:49 AM
104. Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' DataThe Hacker News · 3:20 AM
105. Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ RepositoriesThe Hacker News · 1:42 AM
106. Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code RemotelyThe Hacker News · 12:12 AM