Today, page 9
York University breach exposed personal information dating to 2007
York University has announced it suffered a cybersecurity incident in which a threat actor stole personal information people submitted through online forms. [...]
BleepingComputer ·
Vulnerabilities
N-able Disables Cloud Services Following Disclosure of "Able2Shell" Exploit Chains
Huntress Blog ·
AI
FORGE Lab uses agentic tools to identify memory safety issues in Rust
Microsoft FORGE Lab researchers found memory-safety bugs in Rust's core and std libraries, including cases where safe Rust code can trigger undefined behavior.
Microsoft Security Blog ·
Vulnerabilities
Vulnerability that lets hackers SSH into Linux devices is under active exploitation
Ars Technica Security ·
AI
Help defend against memory poisoning in Amazon Bedrock AgentCore with multi-layer write validation
Amazon Bedrock AgentCore Memory helps AI agents maintain context across sessions through persistent short-term and long-term memory.
AWS Security Blog ·
France blames Iran for fridge cyberattacks, says some caused fires
In the first attribution since the October attacks, the French authorities identified the perpetrators as part of Shahid Kaveh, an IRGC cyber unit previously linked to attacks on industrial controllers at U.S. water utilities.
The Record ·
VulnerabilitiesKEV
OpenBSD security advisory (AV26-1130) - Update 1
Serial number: AV26-1130 Date: November 5, 2026 Updated: November 9, 2026 As of November 5, 2026, OpenBSD is affected by a vulnerability in the following product: OpenSSH Prior to 10.6p2 Update 1 On November 9, 2026, Cybersecurity and Infrastructure Security…
Canadian Centre for Cyber Security ·
Threat IntelReport
France blames Iran for supermarket refrigeration attacks as new wave hits Europe
France has linked October cyberattacks that disrupted refrigeration systems at more than 700 supermarkets and other retail locations to Iranian state-backed hackers, saying the attacks caused food losses and sparked at least 15 fires. [...]
7 outlets · latest: BleepingComputer ·
Attackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th)
Just saw a new (to me) URL in our honeypot data today:
US-CERT / SANS Internet Storm Center ·
Vulnerabilities
Attackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux
Dark Reading ·
Cloud
Russian cloud firm Beget rebuilds from scratch after data wiper attack
A data-wiping malware attack has forced Russian cloud services provider Beget to rebuild its cloud infrastructure from scratch, the company said. [...]
BleepingComputer ·
AI
BluePhishing: Initial Access via Third-Party Agent Blueprint Consent
Key TakeawaysMicrosoft Entra Agent Identity extends Entra to AI agents and closely mirrors the traditional application model, inheriting many of the same opportunities for abuse.Proofpoint researchers present “BluePhishing” as the next evolution of OAuth…
Proofpoint Threat Insight ·
Vulnerabilities
Researchers pwn automakers’ Android apps to remotely unlock cars, honk horns
The Register Security ·
Securing Financial Services: 5 Critical Cybersecurity Advantages of NodeZero
Get the full guide! Download our whitepaper, Unlock Proactive Cybersecurity: 5 Key Benefits of NodeZero® for Enhancing Security in Financial Services Organizations, for a deeper dive. Source
Horizon3.ai ·