Hackers are exploiting a vulnerability in the Telegram widgets feature to run PowerShell commands on user's systems
Kaspersky has seen attackers install the WebRAT malware and steal credentials
Telegram has fixed the bug for Android, but not for Windows
Hackers have breached Lithuania's customs agency. The LRV shut down some of its platforms following the incident
‘The Netherlands is negotiating with the US over the erosion of the powers of the International Criminal Court (ICC). This erosion is so drastic that, according to legal experts, it would amount to the dismantling of the Court.’ (11 Nov 2026) https://rightsforum.org/en/diplomatic-sources-the-netherlands-is-negotiating-the-dismantling-of-the-international-criminal-court/
Threat actors are exploiting two new vulnerabilities in Copeland XWEB EVO refrigeration systems
Copeland retired the product in March, so no patches
https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root
ESLint, a JavaScript linting tool, has ended its paid code contributions programs, citing the influx of AI-generated submissions
Vulnerability management VulnCheck says more than 100,000 CVEs have now been assigned this year, more than double the 2025 total of roughly 48,000
https://www.linkedin.com/feed/update/urn:li:activity:7527128411186675712/
Microsoft is changing the way the Sleep feature works to prioritize availability when lifting up laptop lids
https://techcommunity.microsoft.com/blog/windowsosplatform/a-dynamic-approach-to-sleep/4572688
On December 8, GitHub will pause its Dependabot security tool on repositories that have been inactive for more than a year
https://github.blog/changelog/2026-11-10-dependabot-alerts-will-pause-on-inactive-repositories/
So... someone leaked a Russian propagandist's data on Twitter (Dougan leaks), and Twitter removed it within 24h... but women have to sue until they reach the Supreme Court to have nudes removed?
What?
Hackers are exploiting a vulnerability in the UnrealIRCd software to take over IRC servers.
The attacks began a day after the patch was shipped last week
Meta's red team and Nik Tsytsarkin have published a technical write-up into a bug that allowed sandboxed apps to record audio via the microphone without the proper permissions or being logged.
This was patched back in August
https://rtx.meta.security/exploitation/2026/11/09/CVE-2026-65339.html
Google Project Zero to reduce notification and disclosure timelines
Will go from 90+30 to just 60 next year, and just 30 days in 2028
Looks like the Cursor IDE breach was also caused by Fireworks AI... prolly this investigation led to Fireworks finding their own breach
Cloudflare has open-sourced Kitesurf, an experimental browser engine that runs on Cloudflare Workers, with no Chromium process or container behind it
-Chinese APT uses SS7, Diameter attacks to spy on targets
-Cyberattack takes down Poland's government platform
-Brazil's largest port hit by cyberattack
-Europol takes down Gootloader, CastleRAT, and StealC
-SMS blaster arrested in Hungary
-US village loses $26m in email scam
-Hackers hit South Korea's financial security agency
-Hackers hit MSPs through ConnectWise
-Baker Tilly discloses breach
-n0n group takes credit for Qubole hack
N: https://news.risky.biz/risky-bulletin-chinese-apt-uses-ss7-diameter-attacks-to-spy-on-targets/
P: https://risky.biz/RBNEWS633/
-Microsoft sees GSocket abuse
-wfx-loot campaign hits thousands of repos
-ZoidWays campaign
-Indie studio turns users into proxies
-Wpcdoor targets DVRs
-New AntiFox AI framework
-New Falcon (XG) framework
-New SANSAR cryptominer hides GPU readings
-Kazakh hackers hit neighboring countries
-Void Blizzard/Laundry Bear members doxxed
-New DarkLunnen APT
-Hackers target Check Point devices with PHP2Shell
-More Danfoss refrigerator bugs
-SignDrop zero-day
-Apache patches major RCE
-Glasswing is mid
A growing number of young victims whose photos were sexualized using Grok are seeking to hold xAI legally accountable for allowing users to generate such images (Alexandra S. Levine/Bloomberg)
https://www.bloomberg.com/features/2026-grok-sexualized-childhood-photos/?accessToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzb3VyY2UiOiJTdWJzY3JpYmVyR2lmdGVkQXJ0aWNsZSIsImlhdCI6MTc5NDQwNTgwMiwiZXhwIjoxNzk1MDEwNjAyLCJhcnRpY2xlSWQiOiJUT0NBVUxLSUpIOTMwMCIsImJjb25uZWN0SWQiOiJCNzYzRUJEQUI3QjQ0MjNEOTI0Qzc0MzFBNTkyMkZCQyJ9.iQrQRGwQgxw2Q_MsneYnaVoUsKDdoN0XNrxTO4zRiPg
http://www.techmeme.com/261112/p7#a261112p7
RE: https://flipboard.social/@newsguyusa/117605794414401031
Found out why MS was down.
😮😂