Operation Endgame seizes 6.4 million stolen logins from Gootloader and StealC
International police dismantled servers for Gootloader, CastleRAT, and StealC, recovering millions of credentials and cleaning hundreds of hacked WordPress sites.
Security & privacy
TLS and certificates, encryption, safe file transfer, breaches and how to avoid them.
Lonewolf v0.3.0 adds XMPP federation and direct TLS support
The Lonewolf XMPP server v0.3.0 enables federation with other servers, introduces direct TLS connections, and updates authentication methods for self-hosted communications.
AI-driven pentesting tools surge after ARTEX takedown
Cloudflare reports a thirty-fold increase in AI-powered penetration testing requests since October, driven by forks of the discontinued ARTEX framework.
Node.js patches critical HTTP/2 crashes and TLS memory leaks
Node.js released security updates for versions 22, 24, and 26 to fix 16 vulnerabilities, including high-severity bugs that allow remote crashes and data leakage in HTTP/2 and HTTPS servers.
Fireworks AI breach exposes Notion customer chat transcripts and billing data
A cyberattack on Fireworks AI compromised customer billing info and datasets, leading to the exposure of Notion AI chat transcripts for about 1% of its users.
Critical Apache HTTP/2 flaw allows remote code execution in versions 2.4.55 to 2.4.70
A critical vulnerability in Apache's mod_http2 module enables unauthenticated remote code execution. Patches are available for version 2.4.71 and specific Linux distributions.
Massive GitHub CI attack steals secrets from thousands of repositories
Attackers used 4,837 compromised GitHub accounts to inject secret-stealing malware into over 1,800 repositories, targeting CI workflows and cloud credentials.
Major security patches released for Nextcloud, Bind, and .NET stacks
Red Hat, Fedora, Oracle, and other distributions issued critical security updates on November 11, 2026, affecting core infrastructure components like Bind, Nextcloud, and multiple .NET versions.
Over 35,000 Grok-built apps exposed online with sensitive data leaks
Security researchers found 35,578 publicly accessible apps built with Grok AI, including internal tools from X and SpaceXSI that leaked confidential business and personal data.
eMudhra revokes eight more CAs after script error exposed RSA keys
eMudhra revoked eight intermediate certificate authorities after discovering its Python migration script exposed RSA private keys in memory, violating its own security policies.
Attackers target AhsayCBS backup servers with stealthy Python backdoor
Threat actors exploited two zero-day vulnerabilities in AhsayCBS to deploy web shells and a sandbox-evading Python implant on backup infrastructure.
Microsoft rejects email lacking DMARC records without prior notice
Microsoft mail systems began rejecting legitimate emails missing DMARC records on November 7, 2026. Adding a 'none' policy resolves the issue temporarily.
OpenSSH flaw allows login with blank passwords on specific Linux setups
Attackers are exploiting CVE-2026-123158 in OpenSSH to access accounts with no password on Alpine Linux and other musl-based systems.
Single attacker uses local AI agents to breach Taipei emergency services
A lone hacker in Taiwan used modified AI models to steal dispatch records and patient data from poorly secured APIs across multiple countries.
Scamwich campaign uses reverse proxies to steal restaurant delivery payments
A new payment-skimming campaign called Scamwich uses reverse proxies and live Google ads to intercept credit card data from restaurant customers without disrupting the browsing experience.
