The Wave

1. 2d agoYahooMicrosoft says it "restored service" after major worldwide outageMicrosoft 365 outage disrupted Outlook, Teams and Copilot worldwide for a second day, with Microsoft attributing it to cascading server health-check failures across data centers and no sign of a cyberattack.

   4 articles · 2 outlets · WIRED

   1. 2d agoYahooPickupMicrosoft says it "restored service" after major worldwide outage
   2. 2d agoWIREDEarliestThe Microsoft Outage Is a Warning for the World
   3. 2d agoWIREDPickupMicrosoft 365 Crawls Back to Life After a 24-Hour Outage
   4. 2d agoYahooPickupMicrosoft says services fully restored after day-long global outage

   Microsoft 365 outage lasts about 24 hours, renewing dependence concerns89 linked
2. 3d agoBleepingComputer · research by PrevidianNew N-able "4EverAble2Shell" zero-day exploited hours after PoC releasedThreat actors began exploiting the public 4EverAble2Shell zero-day in N-able N-central within hours of its proof-of-concept release, deploying cryptominers on compromised servers.

   2 articles

   1. 3d agoBleepingComputerPickupNew N-able "4EverAble2Shell" zero-day exploited hours after PoC released
   2. 2d agoSecurityWeekEarliestHackers Exploit New N-central Zero-Day Hours After PoC Publication

   CyberN-able N-central zero-days exploited after researcher publishes exploit code22 linked
3. CT2d agoCisco TalosARTEX and beyond: AI-enabled penetration testing platformsCisco Talos documents growing in-the-wild misuse of AI-enabled penetration testing frameworks, focusing on the ARTEX platform used by criminal and China-nexus actors to automate reconnaissance and intrusion, and lists associated tooling and detection coverage.1 outletCyberAI16 linked
4. 5d agoSecurityWeek · research by MicrosoftExploited Outlook Zero-Day Among 1,094 Flaws Patched by MicrosoftMicrosoft's November 2026 Patch Tuesday release fixes 1,094 flaws, including an exploited Outlook spoofing zero-day (CVE-2026-124194) that can leak NTLMv2 hashes.

   6 articles · Daily Mail

   1. 5d agoSecurityWeekEarliestExploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
   2. 5d agoThe RecordPickupMicrosoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row
   3. 5d agoCyberScoopPickupMicrosoft fixes over 1,000 vulnerabilities in November Patch Tuesday
   4. 4d agoDark ReadingPickupNovember Patch Tuesday: An Overflowing Cornucopia of CVEs
   5. 4d agoCSO OnlinePickupNovember 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentials
   6. 3d agoDaily MailPickupOutlook users warned about dangerous flaw that lets hackers hijack email accounts: Act now

   Cyber122 linked
5. YesterdayN-ableN-able Vulnerability Remediation UpdateN-able details how it patched N-central through hotfix HF2 after two rounds of undisclosed zero-day vulnerabilities, bringing its hosted servers back online while deferring remaining authenticated and agent impersonation fixes to a forthcoming HF3.1 outletCyberN-able N-central zero-days exploited after researcher publishes exploit code12 linked
6. 2d agoThe Register · research by VulnCheckThis year’s bug count just passed 100KThe 2026 CVE count passed 100,000 by mid-November, more than double 2025's total, which VulnCheck attributes largely to AI-driven vulnerability hunting.1 outletCyber9 linked
7. YesterdayYahooGerman experts warn against digital dependence after Microsoft outageGerman experts respond to a global Microsoft 365 cloud outage by warning that dependence on a single provider threatens businesses, schools and government, and urging more European alternatives and fallback options.1 outletCyberMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns17 linked
8. 2d agoSecurityWeekIn Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data BreachSecurityWeek's weekly roundup bundles the nomination of Palantir CISO Michael LoSapio to lead CISA with several other incidents, including the Baker Tilly data theft, OpenAI research-cluster agent activity, and Railway's October breach report.1 outletCyber25 linked
9. YesterdayEuronewsCan Europe’s tech firms really replace Amazon, Google and Microsoft?A week-long Microsoft Outlook and Teams outage across 74 countries has revived European concern over reliance on a few US cloud providers, alongside a draft MEP report urging public buyers to favor European cloud services.1 outletAIMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns20 linked
10. C2d agoCyberScoop · research by VulnCheckResearchers continue to find serious vulnerabilities in internet connected refrigeratorsVulnCheck disclosed 14 serious flaws in Copeland's Dixell XWEB EVO refrigeration supervision systems, with patches now available, as honeypot tests showed attackers rapidly targeting exposed controllers.1 outletCyberFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks2 linked
11. N2d agoN-ableNew Security Update on N-centralN-able urges on-premises N-central customers to install the 2026.4 HF2 security hotfix quickly and keep servers offline until done, while disputing a researcher's claim of ignored responsible disclosure.

    2 articles

    1. 4d agoN-ableEarliestUpdate on N-central 2026.4 HF2 and ongoing security response
    2. 2d agoN-ableNew Security Update on N-central

    CyberN-able N-central zero-days exploited after researcher publishes exploit code23 linked
12. 3d agoHuntback4EverAble2Shell is already mining Monero on live N-central serversHuntback reports that the 4EverAble2Shell N-central exploit was weaponised within hours and has been used to install a Monero miner on 21 live N-central servers, many already patched to Hotfix 2.1 outletCyberN-able N-central zero-days exploited after researcher publishes exploit code11 linked
13. 4d agoDark ReadingN-able Takes N-central Platform Offline After Discovery of 33 FlawsN-able shipped a hotfix for critical flaws in its RMM platform after an independent researcher released proof-of-concept exploits in a disclosure dispute, and it briefly took the platform offline.

    2 articles

    1. 4d agoCybersecurity DiveEarliestN-able issues hotfix after researcher dumps PoCs in disclosure spat
    2. 4d agoDark ReadingPickupN-able Takes N-central Platform Offline After Discovery of 33 Flaws

    CyberN-able N-central zero-days exploited after researcher publishes exploit code24 linked
14. 6d agoBleepingComputer · research by Sean BalesN-able takes cloud platform offline after 30+ "zero-days" publishedAfter a researcher published over 30 alleged N-central zero-days with exploit code, N-able took its hosted N-central environments offline and told on-premises customers to shut their servers down while it develops a hotfix.

    4 articles · 3 outlets · TechCrunch

    1. 6d agoBleepingComputerEarliestN-able takes cloud platform offline after 30+ "zero-days" published
    2. 5d agoTechCrunchPickupN-able takes its remote access service offline after researcher publishes dozens of zero-day bugs
    3. 5d agoCSO OnlinePickupN-able N-central gets emergency fix two days after 33 exploits published
    4. 4d agoBleepingComputerN-able releases security hotfixes for zero-day vulnerabilities

    CyberN-able N-central zero-days exploited after researcher publishes exploit code50 linked
15. 5d agoBleepingComputer · research by Barracuda NetworksHackers now exploit critical Barracuda ESG flaws to gain root accessThreat actors are exploiting two chained Barracuda vulnerabilities (CVE-2026-116606 and CVE-2026-111560), and CISA has added both to its KEV catalog with a three-day federal patch deadline.

    3 articles · 2 outlets

    1. 5d agoBleepingComputerPickupHackers now exploit critical Barracuda ESG flaws to gain root access
    2. 4d agoSecurityWeekEarliestRecently Patched Barracuda Vulnerabilities Exploited in Attacks
    3. 4d agoSecurityWeekPickupThreat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities

    Cyber11 linked
16. 4d agoBleepingComputer · research by CiscoCISA flags Cisco BroadWorks flaw as actively exploited in attacksCISA marked a Cisco BroadWorks XXE flaw (CVE-2026-20320) as actively exploited and added it to the KEV Catalog, setting a November 24 patch deadline for federal agencies.1 outletCyber5 linked
17. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz BlogWiz Research reports that 82% of organizations grant third-party cloud vendors wide read access and 76% grant roles enabling full account takeover, based on an analysis of 1,300+ AWS accounts and 40+ vendors.

    10 articles

    1. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog
    2. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog
    3. 5d agoWiz ResearchThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog
    4. 5d agoWiz ResearchHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz Blog
    5. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog
    6. 5d agoWiz ResearchBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz Blog
    7. 5d agoWiz ResearchAttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes | Wiz Blog
    8. 5d agoWiz ResearchChaosDB: How we hacked thousands of Azure customers’ databases | Wiz Blog
    9. 5d agoWiz Research“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz Blog
    10. 4d agoWiz ResearchPickupBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | Wiz

    Cyber161 linked
18. 5d agoWiz ResearchStorm-0558 Update: Takeaways from Microsoft's recent report | Wiz BlogWiz Research analyzes Microsoft's September 2023 follow-up report on the Storm-0558 breach, drawing out takeaways on how the MSA signing key was likely stolen and what remains unanswered.1 outletCyber27 linked
19. 5d agoWiz ResearchCompromised Microsoft Key: More Impactful Than We Thought | Wiz BlogWiz Research finds the compromised Microsoft MSA signing key could forge tokens for far more Azure AD applications than Microsoft disclosed, and that forged tokens are hard for customers to detect.1 outletCyber33 linked
20. 5d agoSecurityWeekIBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in AttacksCISA added IBM Aspera Faspex and SignalWire FreeSwitch vulnerabilities, both reported as exploited in attacks, to its KEV catalog and set a three-day federal patch deadline.1 outletCyber13 linked
21. 5d agoUSA Today · research by Cisco TalosFood delivery habits are giving cybercriminals personal infoCisco Talos reported that the VOLTA-AUTODOXER Windows infostealer uses a large language model to build detailed victim profiles from stolen credentials and email receipts.1 outletCyber2 linked
22. 5d agoWiz ResearchCVE-2023-34362 RCE vulnerability in MOVEit Transfer exploited in the wild: everything you need to know | Wiz BlogWiz Research outlines the CVE-2023-34362 MOVEit Transfer SQL injection zero-day being exploited in the wild, attributed to Cl0p, and recommends patching and reducing internet exposure.1 outletCyber2 linked
23. 6d agoNextgov/FCWCongress returns to slew of cyber deadlines and unfinished AI safety billsCongress returns for a lame-duck session with CISA 2015 set to expire Dec. 11, the NDAA stalled in the Senate, and AI safety bills such as the FRONTIER Act and AI Kill Switch Act unresolved.1 outletCyberAI15 linked
24. 7d agoMalbear LabsOperation Snowball: Inside an Autonomous AI Intrusion CampaignMalbear Labs reports an autonomous AI-driven intrusion campaign, recovered from an exposed open directory, that used a jailbroken DeepSeek Flash agent harness to compromise a European telecom provider and organizations hosted on its infrastructure over roughly two weeks in November 2026.1 outletCyberAI2 linked
25. 10d agoAxiosTech giants turn to cash, concessions for AI rebrand after voters pummeled data centers 43-1Tech companies including OpenAI, Amazon, Google and Microsoft are offering community payments and concessions to win back public support for data centers after voters backed restrictions in 43 of 44 ballot measures.1 outletAIVoters back data center limits in 2026 elections; Hawley seeks national moratorium21 linked
26. 10d agoN2K CyberWire · research by VulnCheckPHP2Shell: What’s Real, What’s Noise, and What Actions to TakeA Microsoft Threat Intelligence podcast episode distributed by N2K CyberWire examines the critical PHP2Shell vulnerabilities, separating real attack activity from hype and urging patching plus additional protective controls.1 outletCyber3 linked
27. CTOct 20Cisco TalosThere's only so much code: the rise in vulnerability numbersCisco Talos argues that AI-driven surges in vulnerability counts, including 1,415 Microsoft Patch Tuesday advisories, do not translate proportionally into exploitation, and urges defense-in-depth.1 outletCyberAI6 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.