Protecting customer data and keeping financial services available requires knowing which weaknesses put them at risk. Periodic assessments provide a snapshot, but changes to systems, applications, and access can create exploitable paths between tests.
For the latest discoveries in cyber research for the week of 9th November, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Queens Public Library, a New York City public library system serving approximately 2.3 million residents, was…
Binance, the world's largest crypto exchange, has denied claims of a new security breach made by a threat actor using the 'ShinyHunters' handle on a newly emerged underground cybercrime forum. [...]
You can now use tokens from AWS Identity and Access Management (IAM) outbound federation to assume roles in other Amazon Web Services (AWS) partitions.
Hackers are actively exploiting the "SSHole" vulnerability (CVE-2026-123158) in OpenSSH to execute commands, steal credentials, and establish persistent access. [...]
Jailbroken DeepSeek agent spent two weeks attacking a European telecom, Malbear Labs found
Ukraine's cyber police said the four arrested men included the alleged leader of the scam call centers.
AI agents are taking over routine governance, risk, and compliance tasks, forcing GRC professionals to rethink the skills needed to stay relevant.
A security researcher’s AI agent breached an internal sales application used by WorkOS’s go-to-market teams, the developer platform provider confirmed on Friday.
Internet-exposed refrigeration controllers used in supermarkets and cold storage facilities are being hijacked and turned into infrastructure for a suspected spam botnet and proxy services, SecurityScorecard has found.
Socket’s Threat Research Team analyzed the November 9, 2026 compromise of Ethersphere’s release pipeline, in which a threat actor used the project’s own GitHub automation to publish a malicious @ethersphere/bee-js 13.3.0 to npm and a trojanized Swarm Desktop…
Serial Number: AV26-1112 Date: November 2, 2026 Updated: November 9, 2026 As of November 2, 2026, Barracuda Networks is affected by a vulnerability in the following products: Barracuda Email Security Gateway (ESG) Prior to 9.4.0.030 Barracuda Load Balancer…
Serial number: AV26-1136 Date: November 9, 2026 As of November 4, 2026, Red Hat is affected by vulnerabilities in the following products: Exploit Intelligence All version OpenShift Serverless All version Red Hat AMQ Broker 7 All version Red Hat Ansible…
Security researchers have detected a malicious workflow affecting tens of thousands of GitHub repositories, including Uber-owned ones