AX·NEWS
Sign in

Cybersecurity

Cybersecurity news — Monday 09 November 2026

63 stories from 9 sources, every one in English. Each links to its publisher.

Open in the live feedRSS feedOn a TV

  1. Vanderbilt University hit in BYOD ransomware attack, data theft claimed
    USBleepingComputer

    Vanderbilt University warns it is responding to a cyberattack claimed by the BYOD ransomware gang, which claims to have encrypted the university's databases and stolen sensitive student, employee, and research data. [...]

  2. SEGA newsletter data breach exposes 2.2 million email addresses
    USBleepingComputer

    Japanese gaming giant SEGA has disclosed that a data breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2.2 million newsletter subscribers. [...]

  3. N-able takes cloud platform offline after 30+ "zero-days" published
    USBleepingComputer

    N-able has taken its hosted N-central environments offline and urged on-premises customers to shut down their servers after a security researcher publicly disclosed more than 30 alleged zero-day vulnerabilities, including exploits that…

  4. York University breach exposed personal information dating to 2007
    USBleepingComputer

    York University has announced it suffered a cybersecurity incident in which a threat actor stole personal information people submitted through online forms. [...]

  5. You can change Windows settings directly from a search now – how to try it
    USZDNet Security

    The latest Windows 11 Insiders Preview enhances the Search feature so that you can access specific settings right from a search window.

  6. France blames Iranian hackers for supermarket attacks that sparked fires
    USBleepingComputer

    France has linked October cyberattacks that disrupted refrigeration systems at more than 700 supermarkets and other retail locations to Iranian state-backed hackers, saying the attacks caused food losses and sparked at least 15 fires. [...]

  7. AMD confirms GPU driver bug is wearing out your SSD – how to stop it
    USZDNet Security

    AMD has admitted a bug within its External Events Utility is wearing out SSDs, and promises a fix.

  8. Attackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th)
    USSANS ISC

    Just saw a new (to me) URL in our honeypot data today:

  9. Ready for a Siri AI agent? Apple under pressure to upgrade its assistant faster
    USZDNet Security

    Apple’s public-facing satisfaction with the Siri AI launch obscures internal pressures and tensions.

  10. Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data
    INThe Hacker News

    An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today. The attacker used credentials for an AWS account that…

  11. Russian cloud firm Beget rebuilds from scratch after data wiper attack
    USBleepingComputer

    A data-wiping malware attack has forced Russian cloud services provider Beget to rebuild its cloud infrastructure from scratch, the company said. [...]

  12. Android Auto requires Android 11 or higher now – check your compatibility
    USZDNet Security

    Android Auto’s minimum requirements have changed. Here’s what to know.

  13. Samsung’s new SmartTag 3 debuts with next-gen Bluetooth – and one big problem
    USZDNet Security

    The Galaxy SmartTag 3 supports emerging Bluetooth tracking tech, but it’s not a match for Samsung’s OS exclusivity.

  14. Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware
    INThe Hacker News

    Attackers used the Ethersphere project's own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: bee-js 13.3.0 and Swarm Desktop 0.56.2. Both releases download and run code…

  15. Samsung mulls Galaxy AI usage limits and subscription tiers – what we know
    USZDNet Security

    Galaxy device owners who are heavy AI users would likely start paying for some features they’ve long enjoyed for free.

  16. Binance denies data breach after alleged ShinyHunters claims
    USBleepingComputer

    Binance, the world's largest crypto exchange, has denied claims of a new security breach made by a threat actor using the 'ShinyHunters' handle on a newly emerged underground cybercrime forum. [...]

  17. Hackers exploit SSHole OpenSSH flaw to breach Linux systems
    USBleepingComputer

    Hackers are actively exploiting the "SSHole" vulnerability (CVE-2026-123158) in OpenSSH to execute commands, steal credentials, and establish persistent access. [...]

  18. The Biggest Threat to Your GRC Job Isn’t AI. It’s Ignoring AI.
    USBleepingComputer

    AI agents are taking over routine governance, risk, and compliance tasks, forcing GRC professionals to rethink the skills needed to stay relevant. Anecdotes examines three essential skills for the AI-driven GRC workplace: data literacy…

  19. FBI agent stole $2.5 million in crypto from hackers under investigation
    USBleepingComputer

    A former FBI agent has pleaded guilty to stealing nearly $2.5 million from the wallets of fraud victims and nation-state hackers under investigation. [...]

  20. Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia
    INThe Hacker News

    The South Asian cyber espionage group known as Bitter (aka APT-C-08, APT-Q-37, Hazy Tiger, Orange Yali, T-APT-17, and TA397) has been observed targeting South Asian organizations with a previously unreported remote access trojan called…

  21. Revolve Puts Data Breach Victim Count at 1.5 Million
    USSecurityWeek

    Online fashion retailer Revolve has told regulators that the September cyberattack affected more than 1.5 million individuals. The post Revolve Puts Data Breach Victim Count at 1.5 Million appeared first on SecurityWeek .

  22. US bans MEXC crypto exchange over sanctions evasion, cybercrime links
    USBleepingComputer

    The US Department of the Treasury has cut off the MEXC Global crypto exchange from the US financial system over sanctions evasion and links with cybercrime gangs. [...]

  23. ⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More
    INThe Hacker News

    A system doesn't always need a complicated bug to let someone in. Sometimes, a blank password is enough. That's one of the bigger stories this week. And it gets worse when the tools meant to keep systems updated or running safely become…

  24. Plex2Shell Exploited Against QNAP NAS Users
    USSecurityWeek

    Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices. The post Plex2Shell Exploited Against QNAP NAS Users appeared first on SecurityWeek .

  25. 13.3 million people’s medical data exposed; companies pay $300,000
    USMalwarebytes Labs

    The New York attorney general (AG) has reached a settlement over a medical data breach that affected 13.3 million people after basic security failures. Perry Johnson & Associates (PJ&A) and four related companies have agreed to pay…

  26. Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers
    USSecurityWeek

    Hackers compromised an external cloud service used by the shopping platform and may have stolen personal information from it. The post Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers appeared first on SecurityWeek .

  27. Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web
    USSecurityWeek

    Italian Foreign Minister Antonio Tajani said Saturday that his personal data had been disseminated on the dark web. The post Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web appeared first on…

  28. Ukraine dismantles crypto scam network that stole €4.3 million
    USBleepingComputer

    Ukrainian law enforcement arrested four suspects in a case involving the theft of more than €4.3 million using a network of cryptocurrency investment scam call centers. [...]

  29. Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH
    USSecurityWeek

    The initial exploitation attempts are attributed to botnets and crypto miners, but other threat actors are expected to follow suit. The post Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH appeared first on SecurityWeek .

  30. AI Security
    USSchneier on Security

    Two weeks ago, I attended the [un]prompted AI security conference in San Francisco. It was an excellent event: three days of very dense talks about all aspects of AI security. (My talk was about integrous AI, and I will post it when it is…

  31. Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars
    INThe Hacker News

    The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock the doors and start the…

  32. Amplifon Americas Data Breach Impacts 1.3 Million
    USSecurityWeek

    Hackers stole personal, health, and insurance information, including Social Security numbers, from the company’s internal systems. The post Amplifon Americas Data Breach Impacts 1.3 Million appeared first on SecurityWeek .

  33. AI doesn’t have to go rogue to break the world
    USCyberScoop

    I want to talk about AI hacking. There are three aspects: people hacking AI systems, people using AI to hack other systems, and AIs hacking systems on their own, not even maliciously. The last two matter more than the first. The third is…

  34. Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety
    INThe Hacker News

    Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used a security flaw at that…

  35. Over 3 Million People Hit by Frontline Education Data Breach
    USSecurityWeek

    Frontline Education told Indiana regulators that its August data breach affected over 3 million school district staff and students. The post Over 3 Million People Hit by Frontline Education Data Breach appeared first on SecurityWeek .

  36. LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks
    INThe Hacker News

    Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said yesterday. It has several security fixes to release and asked operators to be…

  37. Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records
    INThe Hacker News

    A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis's Threat Research Unit said last week. The agents also found a Taipei fire department platform exposing patient…

  38. Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack
    USSecurityWeek

    Working with cryptographers, DeepMind’s AI agents cut the cost of forging RSA-1024 signatures and found a cheaper way to factor keys. The post Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack appeared first on…

  39. A week in security (November 2 – November 8)
    USMalwarebytes Labs

    Last week on Malwarebytes Labs: Big Tech sues over California plan to limit kids’ scrolling Attacks on supermarket and blood storage systems prompt US warning Phone return scams: where a real delivery and a fake return end up in a bill for…

  40. Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting Room
    INThe Hacker News

    The OpenAI engineer who was arrested and charged last month for planting a covert audio recording device in the company's office has pleaded not guilty. According to reports from Bloomberg and CNBC, Saudi national Abdulrahman Alfozan made…

  41. U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses
    INThe Hacker News

    U.S. government agencies have warned that threat actors are actively targeting industrial refrigeration and cold-chain monitoring systems globally with an aim to cause service disruptions, fire hazards, and loss of inventory. "The actors…

  42. CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation
    INThe Hacker News

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports that it said may have been…

  43. Federated Forensics: Jurisdictional constraints as a design driver for multi-agency federated learning
    USarXiv cs.CR (Security)

    arXiv:2611.09277v1 Announce Type: new Abstract: Digital forensic investigations increasingly cross borders, and law enforcement agencies need to build analytical models together without centralizing their data. Federated Learning (FL)…

  44. Verification of Security Properties of Cryptographic Protocols
    USarXiv cs.CR (Security)

    arXiv:2611.09315v1 Announce Type: new Abstract: Developing cryptographic protocols that are free from vulnerabilities is very challenging, as evidenced by numerous design flaws and implementation bugs in widely used protocols. Recent work…

  45. Performance Bottlenecks in Computing ZK Proofs on a GPU
    USarXiv cs.CR (Security)

    arXiv:2611.09569v1 Announce Type: new Abstract: Zero-knowledge proofs allow one party to prove the correctness of a statement or execution of a computation while revealing no more than the statement of correctness itself. Recent use cases…

  46. GuardrailAgent: An Agentic Framework for Jailbreak Defense
    USarXiv cs.CR (Security)

    arXiv:2611.09734v1 Announce Type: new Abstract: Despite undergoing safety training to align with human values, large language models (LLMs) remain vulnerable to jailbreak attacks that circumvent built-in safeguards and elicit malicious…

  47. PhotoFinish: Portable Timerless Probing of Microarchitectural Latencies
    USarXiv cs.CR (Security)

    arXiv:2611.09879v1 Announce Type: new Abstract: Timing measurements are a fundamental building block of microarchitectural attacks, enabling software to convert otherwise invisible latency differences into architectural observations. Thus…

  48. Aegis OS: A Transactional Multi-Tenant Operating System Runtime for Eliminating Authorization Fatigue in Autonomous Coding Agents
    USarXiv cs.CR (Security)

    arXiv:2611.08516v1 Announce Type: cross Abstract: Autonomous coding agents such as Google Antigravity (agy), Anthropic Claude Code (claude), and OpenAI Codex CLI (codex) execute multi-step software engineering workflows on workstations and…

  49. Replication Certification at Publication: Checkable by Anyone, Anywhere, in Seconds, Forever
    USarXiv cs.CR (Security)

    arXiv:2611.09214v1 Announce Type: cross Abstract: Authors increasingly deposit replication datasets---the data and code behind publications---in archives, and journals increasingly require them to, under progressively onerous rules. But a…

  50. A Blockchain-Based Audit Mechanism for Trust and Integrity in IoT-Fog Environments
    USarXiv cs.CR (Security)

    arXiv:2405.00844v2 Announce Type: replace Abstract: The full realization of smart city technology is dependent on the secure and honest collaboration between IoT applications and edge-computing. In particular, resource constrained IoT…

  51. Privacy Filters are Captured by Residues: A Characterization of Free Natural Filters and the Cost of Adaptivity
    USarXiv cs.CR (Security)

    arXiv:2602.15815v3 Announce Type: replace Abstract: We study privacy filters, which enable privacy accounting for differentially private (DP) mechanisms with adaptively chosen privacy characteristics. We show that the worst-case privacy…

  52. Resilient Liquid Democracy: Mitigating Voting Power Imbalances via Secure Delegation Networks
    USarXiv cs.CR (Security)

    arXiv:2607.01730v4 Announce Type: replace Abstract: Liquid democracy lets voters either vote directly or delegate their voting power to another trusted participant. It is often deployed in political parties, municipal participation…

  53. Unconditional Unclonable Encryption
    USarXiv cs.CR (Security)

    arXiv:2607.21551v4 Announce Type: replace-cross Abstract: We give an unconditional construction of information-theoretically secure one-time private-key unclonable encryption for one-bit messages, with efficient encryption and decryption…

  54. Beyond a Single Commit: Anchor-Guided Reconstruction of Multi-Commit Patches
    USarXiv cs.CR (Security)

    arXiv:2611.09026v1 Announce Type: new Abstract: Vulnerability patch identification plays a critical role in software security by linking reported vulnerabilities and the corresponding fixes, enabling reliable vulnerability analysis…

  55. A Cross-Domain TARA-to-NAC Rule Mapping Methodology: From Automotive OEM Networks to Energy Storage Systems
    USarXiv cs.CR (Security)

    arXiv:2611.09771v1 Announce Type: new Abstract: Threat analysis and risk assessment under ISO/SAE 21434 ends with cybersecurity goals, but existing methods give little structured guidance for turning those goals into enforceable network…

  56. SciCheck: A Framework for Verifying the Integrity of Deep Learning Training
    USarXiv cs.CR (Security)

    arXiv:2611.09889v1 Announce Type: new Abstract: Deep learning training is difficult to verify within a scientific workflow: its architecture, hyperparameters, and procedure are rarely fixed until training has been attempted, and two honest…

  57. On the Order of Privacy and Smoothing in Functional Mean Estimation
    USarXiv cs.CR (Security)

    arXiv:2611.09799v1 Announce Type: cross Abstract: Differential privacy (DP) is a leading framework for privacy protection, yet privacy mechanisms tailored to functional data analysis (FDA) remain relatively underexplored. For functional…

  58. A Practical Post-Quantum Distributed Ledger Protocol for Financial Institutions
    USarXiv cs.CR (Security)

    arXiv:2603.05005v2 Announce Type: replace Abstract: Traditional financial institutions face inefficiencies that can be addressed by distributed ledger technology. However, a primary barrier to adoption is the privacy concerns surrounding…

  59. Differential privacy with adjustable preservation of multivariate relationships
    USarXiv cs.CR (Security)

    arXiv:2610.26460v2 Announce Type: replace Abstract: This paper derives an exact attenuation formula for multivariate cross-moments under differential privacy achieved through randomized response. From a proposed alternative formulation of…

  60. I Don't Care How You Hide It, I Care What You Do: Runtime Detection of Malicious ML Models
    USarXiv cs.CR (Security)

    arXiv:2611.08745v1 Announce Type: new Abstract: Pre-trained machine learning (ML) models shared through public platforms can be weaponized to execute malicious payloads during loading or inference. Existing scanners prove inadequate for…

  61. Jev as an LLM Safety Guardrail: An Empirical Study of Input Filtering, Selective Output Review, and Over-Refusal
    USarXiv cs.CR (Security)

    arXiv:2611.08845v1 Announce Type: new Abstract: External safety filters can prevent unsafe requests from reaching a large language model (LLM), but may also reject legitimate queries. We present an end-to-end empirical evaluation of Jev, a…

  62. NotaryMark: Multi-Bit Watermarking for Black-Box DatasetUsage Auditing in Text-to-Image Diffusion Models
    USarXiv cs.CR (Security)

    arXiv:2611.08985v1 Announce Type: new Abstract: As generative artificial intelligence (AI) models increasingly require data, more publicly available yet licensed data is being harvested and used without authorization. Although several…

  63. ISC Stormcast For Monday, November 9th, 2026 https://isc.sans.edu/podcastdetail/10170, (Mon, Nov 9th)
    USSANS ISC