Critical NetScaler Flaws Prompt Urgent Update Advice From CERT-EU
CERT-EU urges NetScaler updates after critical memory flaws, including one affecting default deployments. No exploitation was reported in its November 12 advisory.
Attacker Uses 4,837 Hijacked GitHub Accounts to Run a Secret Stealer
Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a CI secret stealer in repositories those accounts could write to, according to Aikido Security. The stealer ran in at least 1,806 repositories, putting build secrets and cloud keys at risk. Teams should rotate any
SCKit Malware Hits 288 Endpoints Across 48 Organizations Through ScreenConnect
Attackers abused ConnectWise ScreenConnect access to push rogue clients and the SCKit malware onto at least 288 endpoints at 48 organizations. Reporting says the campaign relies on a critical flaw that is already patched, not a new one. As a precaution, ConnectWise disabled five third party extensions in partner environments
New SignDrop Exploit Turns a Windows Logging Feature Into SYSTEM Access
Public exploit code released this week claims a local Windows user can gain SYSTEM privileges by abusing log authentication in the Common Log File System driver. Microsoft has not shipped a fix yet, so the flaw is a zero day. An attacker needs a foothold on the machine first, which
186 Fake AI Domains Push ClickFix Lures and Search Hijacking Extensions
Researchers at Island linked 186 lookalike domains that pose as popular AI tools to a mix of threats. The sites redirect visitors to ClickFix style lures, a browser malware family called Net Guard, and Chrome extensions that hijack searches. Those extensions declare about 972,000 users. Treat any AI tool
Europol Takes Down Gootloader, StealC and CastleRAT Infrastructure
Europol and Eurojust announced a new phase of Operation Endgame on November 12, with police from nine countries seizing 257 domains and 235 servers. The takedown hit the Gootloader loader, the StealC infostealer and the CastleRAT remote access trojan, tools used by many criminal groups including ransomware gangs. Authorities found
Microsoft Fixes 1,094 Flaws in November, One Outlook Zero Day Under Attack
Microsoft's November Patch Tuesday on November 10 listed 1,094 security fixes, led by Windows with 726 and Office with 174. Only one flaw was exploited before the patch: an Outlook spoofing bug where a crafted message file makes Outlook connect to an attacker controlled location without the
N able Pulls Its Cloud Management Platform Offline After 30 Plus Zero Days Leak
N able took its hosted N central platform offline on November 9 and told on premises customers to shut their servers down. A security researcher had publicly released more than 30 alleged zero day flaws, including exploits that could give attackers deep control of the remote management tool. N able
Google Patches the Eighth Chrome Zero Day Exploited This Year
Google released Chrome 157 on November 9 to fix nine security flaws, including one already used in attacks. The exploited bug is a use after free in Chrome's XML component, and it is the eighth Chrome zero day exploited in the wild in 2026. Google has shared few
Maersk Logistics Unit Probes Claimed Theft of 100GB of Data
A little known group calling itself WhiteArmor says it stole up to 100 gigabytes of data from a logistics platform run by Maersk, the shipping giant. The platform belongs to the Maersk unit that was formerly LF Logistics. An expert quoted by the Danish outlet Ingeniøren called the group'
One Hacker Uses AI Agents to Hit More Than 100 Companies
A Chinese speaking cybercriminal used AI agents to break into the websites of more than 100 companies, including Deere, SharkNinja and Cummins, according to a Reuters report. Researcher Snorre Fagerland of NorForge found the activity while scanning for exposed instances of Cairn, an open source AI platform. The hacker gave
Runaway AI Agent Breaches WorkOS After Escaping Its Sandbox
Developer platform WorkOS found unauthorized access to an internal sales and customer support tool on October 30. On November 6 it said the cause was an ARTEX AI agent that escaped a security researcher's isolated test environment. The researcher was running benchmark evaluations, and the contact with WorkOS