https://breach-signal.com/threat-actors/weak-sql-server-passwords-gh0st-rat-cryptominer/Breach Signalen2026-11-12T22:31:58+00:00Attackers use weak SQL Server passwords to deploy cryptominer and Gh0st RAT https://breach-signal.com/privacy/greek-spyware-convictions-europe-lacks-accountability/Breach Signalen2026-11-12T22:01:58+00:00Greek court convicts four spyware executives, but European spyware cases lack convictions https://breach-signal.com/vulnerabilities/citrix-patches-12-netscaler-secure-access-client-flaws/Breach Signalen2026-11-12T21:32:02+00:00Citrix patches 12 NetScaler and Secure Access Client flaws https://breach-signal.com/vulnerabilities/signdrop-zero-day-windows-system-access/Breach Signalen2026-11-12T20:40:27+00:00Researcher discloses SignDrop zero-day for Windows SYSTEM access https://breach-signal.com/data-breaches/lego-disables-bricklink-marketplace-unusual-activity/Breach Signalen2026-11-12T20:10:31+00:00Lego takes BrickLink Marketplace offline after unusual activity https://breach-signal.com/threat-actors/china-nexus-cairn-ai-agent-intrusion-campaign/Breach Signalen2026-11-12T19:37:20+00:00Unit 42 tracks China-nexus attackers using autonomous Cairn AI agents https://breach-signal.com/policy/jensen-huang-agrees-closed-door-congress-testimony/Breach Signalen2026-11-12T19:21:59+00:00Jensen Huang agrees to closed-door congressional testimony after subpoena threat https://breach-signal.com/artificial-intelligence/claude-api-key-remote-controlled-implant/Breach Signalen2026-11-12T18:08:50+00:00Darktrace shows stolen Claude key can turn coding agent into remote-controlled implant https://breach-signal.com/cybercrime/europol-seizes-6-million-stolen-credentials/Breach Signalen2026-11-12T17:38:54+00:00Police in nine countries with Europol seize 6 million stolen credentials https://breach-signal.com/vulnerabilities/node-js-patches-16-high-severity-flaws/Breach Signalen2026-11-12T16:57:02+00:00Node.js fixes 16 flaws, including HTTP/2 bugs that crash servers and leak memory https://breach-signal.com/cybercrime/attackers-impersonate-ai-agent-credential-stuffing/Breach Signalen2026-11-12T16:27:02+00:00Attackers impersonated consumer AI agent to generate 414,210 marketplace sign-in visits https://breach-signal.com/critical-infrastructure/hoax-bomb-threats-evacuate-italian-schools/Breach Signalen2026-11-12T15:57:02+00:00Hoax bomb warnings force evacuation of thousands of Italian schools https://breach-signal.com/cybercrime/github-ci-secret-stealer-supply-chain-attack/Breach Signalen2026-11-12T15:27:02+00:00Aikido Security ties 4,837 hijacked GitHub accounts to CI secret stealer https://breach-signal.com/threat-actors/nikke-pc-launcher-hijacked-credential-theft/Breach Signalen2026-11-12T14:57:02+00:00Bitdefender links credential theft campaign to hijacked NIKKE PC launcher https://breach-signal.com/threat-actors/rogue-screenconnect-clients-sckit-malware-288-endpoints/Breach Signalen2026-11-12T14:27:02+00:00Attackers deployed rogue ScreenConnect clients and SCKit malware across 288 endpoints https://breach-signal.com/vulnerabilities/mongodb-cve-2026-118383-server-crash-failover/Breach Signalen2026-11-12T13:57:06+00:00MongoDB flaw lets unauthenticated attackers crash servers on failover https://breach-signal.com/vulnerabilities/apache-mod-http2-cve-2026-119618-remote-code/Breach Signalen2026-11-12T12:28:45+00:00Apache Patches critical unauthenticated remote code execution in mod_http2 versions 2.4.55 to 2.4.70 https://breach-signal.com/threat-actors/connectwise-disables-screenconnect-extensions-rogue-clients/Breach Signalen2026-11-12T11:55:27+00:00ConnectWise disables five ScreenConnect extensions after rogue client access https://breach-signal.com/tech-industry/nvidia-board-reviews-jensen-huang-amid-fbi-probe/Breach Signalen2026-11-12T11:25:31+00:00Nvidia’s board reviews CEO Jensen Huang’s future amid FBI probe https://breach-signal.com/vulnerabilities/enisa-eu-providers-months-patch-critical-systems/Breach Signalen2026-11-12T05:38:45+00:00ENISA finds 45 percent of EU IT providers take months to patch critical systems https://breach-signal.com/threat-actors/microsoft-gsocket-linux-servers-command-control/Breach Signalen2026-11-12T05:04:55+00:00Microsoft finds persistent GSocket command and control on Linux servers https://breach-signal.com/critical-infrastructure/new-plymouth-school-district-cyber-threat/Breach Signalen2026-11-12T04:34:59+00:00New Plymouth School District suspends classes after cyber threat https://breach-signal.com/vulnerabilities/zoom-asus-patches-windows-router-flaws/Breach Signalen2026-11-12T03:18:12+00:00Zoom and Asus issue patches for Windows and router flaws https://breach-signal.com/vulnerabilities/zoom-patches-cve-2026-108186-cve-2026-108187/Breach Signalen2026-11-12T02:48:16+00:00Zoom patches CVE-2026-108186 and CVE-2026-108187 in Zoom Workplace for Windows https://breach-signal.com/critical-infrastructure/ireland-warns-russian-shadow-fleet-undersea-cables/Breach Signalen2026-11-12T02:16:15+00:00Ireland warns Russian vessels and shadow fleet threaten undersea cables https://breach-signal.com/artificial-intelligence/united-airlines-bans-ai-agents-booking-flights/Breach Signalen2026-11-12T01:46:19+00:00United Airlines bans AI agents from booking flights https://breach-signal.com/cybercrime/cranbury-township-loses-26-million-wire-transfer/Breach Signalen2026-11-12T01:14:34+00:00Cranbury Township loses $26 million in fraudulent wire transfer https://breach-signal.com/privacy/northeastern-tv-opt-outs-fail-samsung-vizio/Breach Signalen2026-11-12T00:44:34+00:00Northeastern researchers find TV opt-outs fail on major platforms https://breach-signal.com/data-breaches/york-university-webform-breach-personal-data/Breach Signalen2026-11-12T00:14:34+00:00York University discloses breach of personal data from webforms https://breach-signal.com/artificial-intelligence/microsoft-ai-agent-sleeper-neuron-edit/Breach Signalen2026-11-11T23:44:34+00:00Microsoft Research shows neuron edits can turn AI agents into sleeper agents https://breach-signal.com/threat-actors/unit-42-falcon-c2-government-entities-browser-framework/Breach Signalen2026-11-11T23:07:49+00:00Unit 42 identifies Falcon C2 browser framework targeting government entities https://breach-signal.com/ransomware/investigators-link-qilin-haise-st-petersburg-man/Breach Signalen2026-11-11T22:37:53+00:00Investigators tie Qilin administrator Haise to St. Petersburg man https://breach-signal.com/threat-actors/us-indicts-iran-backed-facetime-network/Breach Signalen2026-11-11T21:59:06+00:00U.S. prosecutors unseal indictment against Iran-backed network that used FaceTime https://breach-signal.com/ransomware/maersk-whitearmor-ransom-demand-legacy-system/Breach Signalen2026-11-11T21:29:10+00:00Maersk confirms breach of inherited legacy system as WhiteArmor demands $5 million https://breach-signal.com/vulnerabilities/citrix-ivanti-patch-critical-remote-access-vulnerabilities/Breach Signalen2026-11-11T19:58:02+00:00Citrix and Ivanti patch critical flaws in remote-access products https://breach-signal.com/critical-infrastructure/dreeze-emerges-stealth-33m-cloud-application-recovery/Breach Signalen2026-11-11T19:28:02+00:00Dreeze emerges from stealth with $33 million for cloud application recovery https://breach-signal.com/critical-infrastructure/poland-shuts-epuap-platform-cyber-attack/Breach Signalen2026-11-11T18:58:06+00:00Poland shuts down nationwide ePUAP platform after cyber attack https://breach-signal.com/vulnerabilities/git-patches-recursive-clone-code-execution-flaw/Breach Signalen2026-11-11T17:46:46+00:00Git patches recursive clone code execution flaw in version 2.56.1 https://breach-signal.com/data-breaches/qubole-compromised-credentials-aws-customers-breach/Breach Signalen2026-11-11T17:16:46+00:00Threat actor uses compromised Qubole credentials to breach multiple AWS customers https://breach-signal.com/critical-infrastructure/siemens-schneider-industrial-control-vulnerabilities-advisories/Breach Signalen2026-11-11T16:46:46+00:00Siemens and other vendors issue industrial control advisories https://breach-signal.com/cybercrime/three-men-charged-129-million-ai-fraud-scheme/Breach Signalen2026-11-11T16:16:46+00:00Federal prosecutors charge three men in $129 million AI fraud scheme https://breach-signal.com/artificial-intelligence/microsoft-lazarus-ai-agent-backdoor-technique/Breach Signalen2026-11-11T15:46:50+00:00Microsoft Research discloses Lazarus backdoor technique for AI agents https://breach-signal.com/vulnerabilities/microsoft-fixes-outlook-cve-2026-124194-november-patch/Breach Signalen2026-11-11T15:29:44+00:00Microsoft fixes actively exploited Outlook vulnerability in November Patch Tuesday https://breach-signal.com/data-breaches/davita-pays-15-million-ransomware-breach-settlement/Breach Signalen2026-11-11T14:21:11+00:00DaVita to pay $15 million to settle ransomware breach claims https://breach-signal.com/critical-infrastructure/sans-ot-incidents-hit-one-third-industrial-organizations/Breach Signalen2026-11-11T13:34:55+00:00SANS Institute Finds OT incidents hit one-third of industrial organizations https://breach-signal.com/threat-actors/leaked-darksword-kit-iphone-spyware-instagram-ads/Breach Signalen2026-11-11T13:04:55+00:00iVerify finds leaked DarkSword kit compromising employees’ iPhones via Instagram ads https://breach-signal.com/policy/northwestern-polytechnical-nvidia-h200-chip-purchase/Breach Signalen2026-11-11T12:34:59+00:00Northwestern Polytechnical bought restricted Nvidia H200 chips via domestic supplier https://breach-signal.com/vulnerabilities/barracuda-flaws-active-exploitation-cisa-kev/Breach Signalen2026-11-11T11:53:48+00:00Attackers exploit patched Barracuda flaws, CISA adds to KEV https://breach-signal.com/ransomware/byod-ransomware-claims-texas-hhsc-breach/Breach Signalen2026-11-11T11:23:52+00:00BYOD ransomware cartel claims breach of Texas Health and Human Services Commission https://breach-signal.com/data-breaches/claroc-grok-build-apps-exposed-online/Breach Signalen2026-11-11T05:14:36+00:00Claroc finds thousands of Grok Build apps exposed online https://breach-signal.com/vulnerabilities/microsoft-windows-11-kb5132061-kb5131087-patch-tuesday/Breach Signalen2026-11-11T04:44:36+00:00Microsoft releases KB5132061 and KB5131087 for Windows 11 versions 23H2 to 26H2 https://breach-signal.com/data-breaches/railway-breach-exposes-ai-credentials-workspaces/Breach Signalen2026-11-11T04:14:40+00:00Railway discloses breach exposing up to 100,000 workspaces and $740,000 in fraudulent AI charges https://breach-signal.com/vulnerabilities/microsoft-november-patch-tuesday-1093-vulnerabilities-outlook-zero/Breach Signalen2026-11-11T03:00:10+00:00Microsoft fixes 1,093 November vulnerabilities, including actively exploited Outlook flaw https://breach-signal.com/data-breaches/nitori-37-62-million-customer-records-breach/Breach Signalen2026-11-11T02:29:54+00:00Nitori says outsider may have copied 37.62 million customer records https://breach-signal.com/data-breaches/near-ai-sglang-vulnerability-data-breach/Breach Signalen2026-11-11T01:57:31+00:00NEAR AI says SGLang vulnerability exposed data from 18 agents and about 100 users https://breach-signal.com/data-breaches/fireworks-ai-wider-october-breach-notion-chat-impact/Breach Signalen2026-11-11T00:59:53+00:00Fireworks AI discloses wider October breach as Notion confirms chat impact https://breach-signal.com/threat-actors/uk-arrests-us-army-soldier-russia-spying/Breach Signalen2026-11-11T00:30:47+00:00British authorities arrest U.S. Army soldier in UK on Russia spying suspicion https://breach-signal.com/threat-actors/turla-cereal-exchange-breaches-romania-kazakhstan/Breach Signalen2026-11-11T00:29:53+00:00ESET ties Russian Turla group to e-mail server breaches in Romania and Kazakhstan https://breach-signal.com/critical-infrastructure/cisa-installed-base-program-secure-ot-assets/Breach Signalen2026-11-10T23:59:53+00:00CISA Launches voluntary Installed Base Program to secure exposed OT assets https://breach-signal.com/vulnerabilities/microsoft-november-patch-tuesday-1000-vulnerabilities/Breach Signalen2026-11-10T23:29:56+00:00Microsoft ships November Patch Tuesday fixes for more than 1,000 flaws