The Wave

1. 3h agoBleepingComputerFBI warns ARTEX AI hacking tool is powering global cyberattacksThe FBI issued a flash alert warning that the open-source Artex AI hacking framework is being used by cybercriminals and nation-state actors to automate intrusions at machine speed, with Amazon publishing a corroborating study the same day.

   2 articles

   1. 2d agoThe RecordEarliestFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’
   2. 3h agoBleepingComputerPickupFBI warns ARTEX AI hacking tool is powering global cyberattacks

   CyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks37 linked
2. 6h agoWiz Research · research by NordStellarThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz BlogWiz Research maps the cloud, code and AI secrets that infostealer malware harvests from developer endpoints and details how attackers turn them into cloud access, using NordStellar telemetry to rank stealer families and secret types.

   2 articles

   1. 6h agoWiz ResearchLiteLLM Compromised, Steals Credentials | Wiz Blog
   2. 6h agoWiz ResearchEarliestThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz Blog

   Cyber27 linked
3. 6h agoWiz ResearchARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors | Wiz BlogWiz Research reports an actor using ARTEX, an open-source agentic AI penetration-testing framework, to run automated reconnaissance and identity-provider attacks against IT and software vendors throughout October 2026, linked to Microsoft's Storm-0940 supply-chain activity.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks21 linked
4. 2d agoPOLITICO Europe · research by ReutersJensen Huang’s fall further exposes EU leaders on AIHouse China Select Committee chair John Moolenaar says he still wants Jensen Huang to testify after his exit from Nvidia, with subpoenas threatened if scheduling talks fail.

   14 articles · 7 outlets · TechCrunch, Politico, Daily Mail

   1. 4d agoFlipboardPickupNvidia’s spy scandal threatens America’s AI edge | Flipboard
   2. 4d agoTechCrunchPickupCongress to call Jensen Huang in to answer for alleged Chinese spy affair
   3. 4d agoYahooPickupRepublicans Prepared To Subpoena Nvidia CEO Over Alleged Chinese Spy Links: Report
   4. 3d agoYahooHouse Republicans push for Nvidia's Huang to testify, float subpoena over spy allegations
   5. 3d agoAl JazeeraPickupWhat could Chinese intelligence have learned from Nvidia CEO’s affair?
   6. 3d agoPoliticoEarliestChina panel chair still wants Huang to testify after Nvidia exit
   7. 3d agoDaily MailPickupRepublicans call to subpoena 'arrogant' newly-ousted Nvidia CEO Jensen Huang after alleged Chinese spy threat despite Trump support
   8. 3d agoTechCrunchPickupJensen Huang agrees to testify before Congress
   9. 3d agoYahooPickupGOP lawmakers press Huang and Lutnick to testify over Nvidia
   10. 3d agoYahooPickupEx-Nvidia CEO should testify before Congress, Rep. John Moolenaar says
   11. 3d agoYahooPickupJensen Huang agrees to testify before House Foreign Affairs Committee
   12. 2d agoPOLITICO EuropeJensen Huang’s fall further exposes EU leaders on AI
   13. 2d agoYahooPickupHow Jensen Huang’s ouster is paving the way for the policy outcome he fiercely battled
   14. YesterdayYahooSilicon Valley plots Jensen Huang’s comeback

   AICongress presses Nvidia and Commerce over Megaspeed chips and China ties516 linked
5. 3d agoYahooAdvocacy groups sue AI giants to freeze new models, warning of 'catastrophic' risksFour advocacy groups filed a California civil suit asking a court to freeze AI model training and deployments at five major AI developers until safeguards are in place.

   5 articles · 2 outlets

   1. 3d agoYahooPickupAdvocacy groups sue AI giants to freeze new models, warning of 'catastrophic' risks
   2. 3d agoYahooPickupOpenAI, Google, Anthropic hit with lawsuit seeking halt to frontier AI development
   3. 3d agoAl JazeeraEarliestUS nonprofits sue tech giants to halt AI development
   4. 2d agoYahooPickupMajor AI developers can't control their own tech, lawsuit alleges
   5. YesterdayYahooPickupOpenAI, Anthropic, Google and Other AI Giants Face Lawsuit Demanding Development Freeze

   AI166 linked
6. 6h agoWiz Research · research by WizA U.S. Navy Cloud Broker enhances cloud security with Wiz | WizWiz's free Scan for Good initiative, built with Google DeepMind and CISA, has surfaced more than 475 high and critical exposures across public sector, healthcare and open-source environments.

   15 articles · 2 outlets · TechTarget

   1. 5d agoWiz ResearchPickupTowards a better cloud vulnerability response model | Wiz Blog
   2. 4d agoTechTargetPickupScan for Good: Free AI security tool finds nearly 500 critical flaws
   3. 4d agoWiz ResearchSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz Blog
   4. 2d agoWiz ResearchPickupClaude Mythos and Cybersecurity: What Actually Changes? | Wiz
   5. 2d agoWiz ResearchPickupSoftware Supply Chain Security: Key Risks and Best Defenses | Wiz
   6. 6h agoWiz Research“Black October” for AI Developer Platforms | Wiz Blog
   7. 6h agoWiz ResearchPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog
   8. 6h agoWiz ResearchGitHub Actions Security Pt 1: Attacks & Defenses | Wiz Blog
   9. 6h agoWiz ResearchGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz Blog
   10. 6h agoWiz ResearchScan for Good: Finding Critical Exposures with AI | Wiz Blog
   11. 6h agoWiz ResearchHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz Blog
   12. 6h agoWiz ResearchScan for Good: AIを活用した重大な露出の特定 | Wiz ブログ
   13. 6h agoWiz ResearchArtifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 | Wiz Blog
   14. 6h agoWiz ResearchBreaking LiteLLM: From Auth Bypass to Cloud Compromise | Wiz Blog
   15. 6h agoWiz ResearchPickupA U.S. Navy Cloud Broker enhances cloud security with Wiz | Wiz

   Cyber169 linked
7. 3d agoSecurityWeek · research by HuntressHackers Deploy Malware in Fresh ScreenConnect CampaignHuntress reports an intruder abused a third-party RMM+ extension in cloud-hosted ScreenConnect partner panels to push attacker-controlled ScreenConnect clients to at least 288 computers across 48 organizations, prompting ConnectWise to disable five extensions.

   4 articles · The Register

   1. 3d agoSecurityWeekPickupHackers Deploy Malware in Fresh ScreenConnect Campaign
   2. 3d agoThe RegisterPickupHackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs
   3. 3d agoCybersecurity DivePickupConnectWise disables third-party extensions as it probes cyberattack targeting ScreenConnect users
   4. 3d agoCyberScoopEarliestRogue remote-access campaign spread through ScreenConnect add-on, researchers say

   Cyber32 linked
8. 2d agoWIREDMicrosoft 365 Crawls Back to Life After a 24-Hour OutageMicrosoft 365 outage disrupted Outlook, Teams and Copilot worldwide for a second day, with Microsoft attributing it to cascading server health-check failures across data centers and no sign of a cyberattack.

   4 articles · 2 outlets

   1. 2d agoYahooPickupMicrosoft says it "restored service" after major worldwide outage
   2. 2d agoWIREDEarliestThe Microsoft Outage Is a Warning for the World
   3. 2d agoWIREDPickupMicrosoft 365 Crawls Back to Life After a 24-Hour Outage
   4. 2d agoYahooPickupMicrosoft says services fully restored after day-long global outage

   Microsoft 365 outage lasts about 24 hours, renewing dependence concerns89 linked
9. 3d agoBleepingComputer · research by PrevidianNew N-able "4EverAble2Shell" zero-day exploited hours after PoC releasedThreat actors began exploiting the public 4EverAble2Shell zero-day in N-able N-central within hours of its proof-of-concept release, deploying cryptominers on compromised servers.

   2 articles

   1. 3d agoBleepingComputerPickupNew N-able "4EverAble2Shell" zero-day exploited hours after PoC released
   2. 2d agoSecurityWeekEarliestHackers Exploit New N-central Zero-Day Hours After PoC Publication

   CyberN-able N-central zero-days exploited after researcher publishes exploit code22 linked
10. CT2d agoCisco TalosARTEX and beyond: AI-enabled penetration testing platformsCisco Talos documents growing in-the-wild misuse of AI-enabled penetration testing frameworks, focusing on the ARTEX platform used by criminal and China-nexus actors to automate reconnaissance and intrusion, and lists associated tooling and detection coverage.1 outletCyberAI16 linked
11. 5d agoThe Record · research by MicrosoftMicrosoft’s Patch Tuesday surpasses 1,000 bugs for second month in a rowMicrosoft's November 2026 Patch Tuesday release fixes 1,094 flaws, including an exploited Outlook spoofing zero-day (CVE-2026-124194) that can leak NTLMv2 hashes.

    6 articles · Daily Mail

    1. 5d agoSecurityWeekEarliestExploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
    2. 5d agoThe RecordPickupMicrosoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row
    3. 5d agoCyberScoopPickupMicrosoft fixes over 1,000 vulnerabilities in November Patch Tuesday
    4. 4d agoDark ReadingPickupNovember Patch Tuesday: An Overflowing Cornucopia of CVEs
    5. 4d agoCSO OnlinePickupNovember 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentials
    6. 3d agoDaily MailPickupOutlook users warned about dangerous flaw that lets hackers hijack email accounts: Act now

    Cyber122 linked
12. YesterdayN-ableN-able Vulnerability Remediation UpdateN-able details how it patched N-central through hotfix HF2 after two rounds of undisclosed zero-day vulnerabilities, bringing its hosted servers back online while deferring remaining authenticated and agent impersonation fixes to a forthcoming HF3.1 outletCyberN-able N-central zero-days exploited after researcher publishes exploit code12 linked
13. 2d agoThe Register · research by VulnCheckThis year’s bug count just passed 100KThe 2026 CVE count passed 100,000 by mid-November, more than double 2025's total, which VulnCheck attributes largely to AI-driven vulnerability hunting.1 outletCyber9 linked
14. YesterdayYahooGerman experts warn against digital dependence after Microsoft outageGerman experts respond to a global Microsoft 365 cloud outage by warning that dependence on a single provider threatens businesses, schools and government, and urging more European alternatives and fallback options.1 outletCyberMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns17 linked
15. 2d agoSecurityWeekIn Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data BreachSecurityWeek's weekly roundup bundles the nomination of Palantir CISO Michael LoSapio to lead CISA with several other incidents, including the Baker Tilly data theft, OpenAI research-cluster agent activity, and Railway's October breach report.1 outletCyber25 linked
16. YesterdayEuronewsCan Europe’s tech firms really replace Amazon, Google and Microsoft?A week-long Microsoft Outlook and Teams outage across 74 countries has revived European concern over reliance on a few US cloud providers, alongside a draft MEP report urging public buyers to favor European cloud services.1 outletAIMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns20 linked
17. 2d agoThe RegisterMicrosoft outage gives customers a crash course in dependence on RedmondA prolonged Microsoft 365 outage in November 2026 knocked out Exchange Online, Teams and Copilot, prompting critics to renew warnings about dependence on a single vendor.1 outletMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns15 linked
18. 5d agoDefense OneTrump nominates Palantir security chief Michael LoSapio to lead CISATrump's nomination of Palantir CISO Michael LoSapio to lead CISA raises questions about his Palantir ties and the agency's long-vacant leadership.

    6 articles · 5 outlets

    1. 5d agoDefense OnePickupTrump nominates Palantir security chief Michael LoSapio to lead CISA
    2. 5d agoNextgov/FCWEarliestTrump nominates Palantir security chief Michael LoSapio to lead CISA
    3. 5d agoCyberScoopPickupTrump picks Palantir’s LoSapio to head CISA
    4. 5d agoThe RecordPalantir exec nominated to lead CISA; lame-duck Senate vote is uncertain
    5. 5d agoN2K CyberWirePickupThe next name on CISA's door.
    6. 4d agoCyberScoopCISA director pick already drawing concern from Hill Dems over Palantir connection

    CyberTrump nominates Palantir's Michael LoSapio to lead CISA as Democrats plan oversight105 linked
19. 3d agoThe RegisterOpenAI launches security products, tells orgs they’re doomed if they don’t use themOpenAI unveiled Daybreak Red Team and Daybreak Defense Factory under its Daybreak security platform, arguing companies can only stay secure by using frontier AI models for defense, as a nonprofit coalition sued to block more capable AI development.1 outletCyberAI22 linked
20. 4d agoNextgov/FCWCISA outlines internal plan to swiftly address cyber, infrastructure threatsCISA revised its cyber incident reporting questionnaire to capture more attack detail and adopt MITRE ATT&CK, even as the broader CIRCIA final rule sits under White House review.

    5 articles · 4 outlets

    1. 6d agoCISA NewsPickupCISA Announces Enhanced Reporting Form for Cyber Incidents
    2. 6d agoDark ReadingPickupCISA Announces Enhanced Reporting Form for Cyber Incidents
    3. 6d agoNextgov/FCWEarliestCISA updates cyber reporting form as broader incident mandate awaits approval
    4. 4d agoNextgov/FCWCISA outlines internal plan to swiftly address cyber, infrastructure threats
    5. 4d agoDefense OnePickupCISA outlines internal plan to swiftly address cyber, infrastructure threats

    Cyber57 linked
21. N2d agoN-ableNew Security Update on N-centralN-able urges on-premises N-central customers to install the 2026.4 HF2 security hotfix quickly and keep servers offline until done, while disputing a researcher's claim of ignored responsible disclosure.

    2 articles

    1. 4d agoN-ableEarliestUpdate on N-central 2026.4 HF2 and ongoing security response
    2. 2d agoN-ableNew Security Update on N-central

    CyberN-able N-central zero-days exploited after researcher publishes exploit code23 linked
22. 2d agoElasticWindows Endpoint Security Platform: Inside wesp.sysElastic's analysis of Microsoft's undocumented Windows Endpoint Security Platform finds that its kernel driver wesp.sys is a file system mini-filter that talks to user mode over a filter communication port, with no one-way reply path yet.1 outletCyber3 linked
23. 3d agoHuntback4EverAble2Shell is already mining Monero on live N-central serversHuntback reports that the 4EverAble2Shell N-central exploit was weaponised within hours and has been used to install a Monero miner on 21 live N-central servers, many already patched to Hotfix 2.1 outletCyberN-able N-central zero-days exploited after researcher publishes exploit code11 linked
24. 4d agoDark ReadingN-able Takes N-central Platform Offline After Discovery of 33 FlawsN-able shipped a hotfix for critical flaws in its RMM platform after an independent researcher released proof-of-concept exploits in a disclosure dispute, and it briefly took the platform offline.

    2 articles

    1. 4d agoCybersecurity DiveEarliestN-able issues hotfix after researcher dumps PoCs in disclosure spat
    2. 4d agoDark ReadingPickupN-able Takes N-central Platform Offline After Discovery of 33 Flaws

    CyberN-able N-central zero-days exploited after researcher publishes exploit code24 linked
25. 4d agoBleepingComputer · research by Sean BalesN-able releases security hotfixes for zero-day vulnerabilitiesAfter a researcher published over 30 alleged N-central zero-days with exploit code, N-able took its hosted N-central environments offline and told on-premises customers to shut their servers down while it develops a hotfix.

    4 articles · 3 outlets · TechCrunch

    1. 6d agoBleepingComputerEarliestN-able takes cloud platform offline after 30+ "zero-days" published
    2. 5d agoTechCrunchPickupN-able takes its remote access service offline after researcher publishes dozens of zero-day bugs
    3. 5d agoCSO OnlinePickupN-able N-central gets emergency fix two days after 33 exploits published
    4. 4d agoBleepingComputerN-able releases security hotfixes for zero-day vulnerabilities

    CyberN-able N-central zero-days exploited after researcher publishes exploit code50 linked
26. 3d agoComputerworldHackers stole AI credentials to get $740,000 in free compute; Railway picked up the billRailway's new incident report says a October 2026 breach let attackers steal environment variables and AI provider credentials, generating about $740,000 in fraudulent AI usage across at most 100,000 workspaces.

    2 articles · BleepingComputer

    1. 4d agoBleepingComputerEarliestRailway breach leads to $740,000 in fraudulent AI charges
    2. 3d agoComputerworldPickupHackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill

    CyberFireworks AI breach exposes customer data at Uber, Notion and Cursor10 linked
27. 5d agoBleepingComputer · research by Barracuda NetworksHackers now exploit critical Barracuda ESG flaws to gain root accessThreat actors are exploiting two chained Barracuda vulnerabilities (CVE-2026-116606 and CVE-2026-111560), and CISA has added both to its KEV catalog with a three-day federal patch deadline.

    3 articles · 2 outlets

    1. 5d agoBleepingComputerPickupHackers now exploit critical Barracuda ESG flaws to gain root access
    2. 4d agoSecurityWeekEarliestRecently Patched Barracuda Vulnerabilities Exploited in Attacks
    3. 4d agoSecurityWeekPickupThreat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities

    Cyber11 linked
28. 4d agoBleepingComputer · research by CiscoCISA flags Cisco BroadWorks flaw as actively exploited in attacksCISA marked a Cisco BroadWorks XXE flaw (CVE-2026-20320) as actively exploited and added it to the KEV Catalog, setting a November 24 patch deadline for federal agencies.1 outletCyber5 linked
29. 4d agoComputerworldThe bad news for Microsoft in the Blue TsunamiComputerworld columnist argues that Democratic midterm wins will bring investigations, data center crackdowns, AI regulation and ICE budget cuts that threaten Microsoft's business.1 outletAI3 linked
30. 4d agoYahooExclusive-Microsoft presses Trump to scuttle ban on Chinese data center techMicrosoft and other firms and trade groups are lobbying the Trump administration to drop a planned FCC ban on Chinese optical transceivers used in AI data centers, warning it would slow the data center buildout.1 outletAI10 linked
31. 4d agoEuronewsAnthropic targets valuation of up to $1.4 trillion for blockbuster IPOAnthropic seeks to sell 825 million shares at $70–$78 each in an IPO trading as ANT, with seven tech companies committing $26 billion in a private placement.1 outlet61 linked
32. 5d agoWiz ResearchThe SolarWinds Attack | Wiz BlogWiz publishes a running cloud-focused guidance blog on the SolarWinds supply-chain attack, detailing hybrid on-prem-to-cloud attack vectors and detection steps for cloud security teams.1 outletCyber14 linked
33. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz BlogWiz Research reports that 82% of organizations grant third-party cloud vendors wide read access and 76% grant roles enabling full account takeover, based on an analysis of 1,300+ AWS accounts and 40+ vendors.

    10 articles

    1. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog
    2. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog
    3. 5d agoWiz ResearchThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog
    4. 5d agoWiz ResearchHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz Blog
    5. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog
    6. 5d agoWiz ResearchBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz Blog
    7. 5d agoWiz ResearchAttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes | Wiz Blog
    8. 5d agoWiz ResearchChaosDB: How we hacked thousands of Azure customers’ databases | Wiz Blog
    9. 5d agoWiz Research“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz Blog
    10. 4d agoWiz ResearchPickupBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | Wiz

    Cyber161 linked
34. 5d agoCybersecurity DiveTrump picks Palantir cybersecurity executive to lead CISATrump has nominated a Palantir cybersecurity executive to lead CISA, his second attempt to fill the agency's director post, which has been vacant throughout his second term.1 outletCyber12 linked
35. 5d agoWiz ResearchCompromised Microsoft Key: More Impactful Than We Thought | Wiz BlogWiz Research finds the compromised Microsoft MSA signing key could forge tokens for far more Azure AD applications than Microsoft disclosed, and that forged tokens are hard for customers to detect.1 outletCyber33 linked
36. 5d agoWiz ResearchStorm-0558 Update: Takeaways from Microsoft's recent report | Wiz BlogWiz Research analyzes Microsoft's September 2023 follow-up report on the Storm-0558 breach, drawing out takeaways on how the MSA signing key was likely stolen and what remains unanswered.1 outletCyber27 linked
37. 5d agoWiz ResearchMidnight Blizzard breach: analysis and best practices | Wiz BlogWiz Research breaks down how Midnight Blizzard used a compromised legacy test OAuth application to gain mailbox access in Microsoft's corporate tenant and lists detections and hardening steps against similar attacks.1 outletCyber6 linked
38. 5d agoFortuneAnthropic inks $3.4 billion deal for gas-powered data centers—the largest of its kind—to secure AI autonomy ahead of planned IPOAnthropic is committing $3.4 billion to acquire 1.7 GW of heavy-duty natural gas generators and engineering and construction capabilities from OnePWR Solutions for its data centers.1 outletEnergyAI14 linked
39. 5d agoWiz ResearchBridging the Security Gap: Mitigating Lateral Movement Risks from On-Premises to Cloud Environments | Wiz BlogWiz Research publishes a fourth blog post detailing on-prem-to-cloud lateral movement techniques (cached cleartext cloud keys, PRT pass-the-PRT and pass-the-cookie attacks) and recommended mitigations across AWS, Azure and GCP.1 outletCyber1 linked
40. 5d agoWiz ResearchHunting for signs of persistence in the cloud: an IR guide following the CircleCI incident | Wiz BlogWiz Research published a cloud incident response guide that lists AWS, Azure and GCP APIs attackers could use to maintain persistence after the CircleCI breach and supplies hunting queries for each provider.1 outletCyber4 linked
41. 4d agoWiz Research · research by WizOperation Stormbreaker case study | WizWiz published a vendor case study describing how the Marine Corps Community Services (MCCS) used Wiz in its Operation StormBreaker initiative to cut Authorization to Operate timelines from about 18 months to 30 days.1 outletCyber7 linked
42. 5d agoSecurityWeekIBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in AttacksCISA added IBM Aspera Faspex and SignalWire FreeSwitch vulnerabilities, both reported as exploited in attacks, to its KEV catalog and set a three-day federal patch deadline.1 outletCyber13 linked
43. 5d agoUSA Today · research by Cisco TalosFood delivery habits are giving cybercriminals personal infoCisco Talos reported that the VOLTA-AUTODOXER Windows infostealer uses a large language model to build detailed victim profiles from stolen credentials and email receipts.1 outletCyber2 linked
44. 5d agoBleepingComputer · research by OnapsisSAP patches ICM2SHELL and PROXYGATE maximum severity flawsSAP's November 2026 security updates fix 35 flaws, including four CVSS 10/10 bugs in NetWeaver, Web Dispatcher and Gateway that Onapsis dubbed ICM2SHELL and PROXYGATE.1 outletCyber1 linked
45. 12d agoSemafor · research by Tech Oversight ProjectOpenAI pushes policy rebrand to a skeptical audienceOpenAI's policy rebrand of data centers as "compute campuses" and push for a mandatory AI testing bill drew skeptical reactions from lawmakers and AI safety advocates.

    13 articles · 3 outlets · The Hill

    1. 13d agoSemaforElection ‘war rooms’ enter the AI age
    2. 12d agoSemaforPickupPolitical opposition to data centers mounts in US and abroad
    3. 12d agoSemaforEarliestOpenAI pushes policy rebrand to a skeptical audience
    4. 12d agoSemaforPickupDemocrats run more anti-tech ads amid AI boom
    5. 11d agoSemaforBig Tech braces for a bluer Washington
    6. 11d agoSemaforConservative group issues warning on AI
    7. 10d agoSemaforDemocrats are fired up on AI. Consensus is harder.
    8. 10d agoSemaforWhere AI money worked in the midterms
    9. 6d agoSemaforAI safety groups outline their plans for a new Washington
    10. 6d agoYahooPickupAI safety groups outline their plans for a new Washington
    11. 4d agoSemaforPickupUS data center construction to remain strong in 2027
    12. 4d agoThe HillTech watchdog lays out Democratic agenda for first 100 days
    13. 2d agoSemaforTrump’s AI task force discusses cyber risks

    AIIncoming Democrats eye AI safety push in new Congress36 linked
46. 6d agoFederal News NetworkI audit tech companies for a living. The White House Accord needs rules for people like me.Patrick Sullivan, an A-LIGN executive, argues in Federal News Network that the White House Accord on Super Intelligence needs rules for who qualifies as an independent AI auditor before companies start naming their own.1 outletAI17 linked
47. 5d agoWiz ResearchCVE-2023-34362 RCE vulnerability in MOVEit Transfer exploited in the wild: everything you need to know | Wiz BlogWiz Research outlines the CVE-2023-34362 MOVEit Transfer SQL injection zero-day being exploited in the wild, attributed to Cl0p, and recommends patching and reducing internet exposure.1 outletCyber2 linked
48. 6d agoNextgov/FCWCongress returns to slew of cyber deadlines and unfinished AI safety billsCongress returns for a lame-duck session with CISA 2015 set to expire Dec. 11, the NDAA stalled in the Senate, and AI safety bills such as the FRONTIER Act and AI Kill Switch Act unresolved.1 outletCyberAI15 linked
49. 5d agoCSO Online · research by WizQubole supply chain attack exposed AWS, Entra ID, and Okta credentialsAn attacker used Qubole's compromised AWS IAM credentials to assume customer cross-account roles, exfiltrating data and harvesting AWS, Entra ID and Okta secrets across dozens of organizations in October 2026.1 outletCyberFireworks AI breach exposes customer data at Uber, Notion and Cursor8 linked
50. WHBR5d agoWhite House Briefing RoomNominations and Withdrawals Sent to the SenateThe White House transmitted a large slate of judicial, ambassadorial, and agency nominations to the Senate on November 9, 2026, including Michael LoSapio for CISA Director, and withdrew David MacNeil's FTC nomination.1 outletCyber13 linked
51. 6d agoSemaforNvidia’s investigation of its CEO adds to major challengesSemafor reports that Nvidia faces mounting challenges, including an investigation involving its CEO, possible slowdown in US AI infrastructure buildout after Democratic midterm wins, and intensifying competition from Amazon, Google, Anthropic, OpenAI and chip startups.1 outletAI17 linked
52. 8d agoTechCrunchAfter the midterms, things are looking rocky for Elon Musk and data centersTechCrunch's Equity panel argues that midterm results and anti-data-center sentiment will make data center buildouts harder, citing OpenAI's new compute campus policy blueprint as a response.1 outletAIVoters back data center limits in 2026 elections; Hawley seeks national moratorium5 linked
53. 10d agoCensysARTEX: Agentic AsbestosCensys finds ARTEX, a GitHub-published agentic AI attack tool, running on roughly 1,465 hosts, with exposed operator directories revealing malicious tooling tied to recent intrusions.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks13 linked
54. 10d agoAxiosTech giants turn to cash, concessions for AI rebrand after voters pummeled data centers 43-1Tech companies including OpenAI, Amazon, Google and Microsoft are offering community payments and concessions to win back public support for data centers after voters backed restrictions in 43 of 44 ballot measures.1 outletAIVoters back data center limits in 2026 elections; Hawley seeks national moratorium21 linked
55. 10d agoN2K CyberWire · research by VulnCheckPHP2Shell: What’s Real, What’s Noise, and What Actions to TakeA Microsoft Threat Intelligence podcast episode distributed by N2K CyberWire examines the critical PHP2Shell vulnerabilities, separating real attack activity from hype and urging patching plus additional protective controls.1 outletCyber3 linked
56. CTOct 20Cisco TalosThere's only so much code: the rise in vulnerability numbersCisco Talos argues that AI-driven surges in vulnerability counts, including 1,415 Microsoft Patch Tuesday advisories, do not translate proportionally into exploitation, and urges defense-in-depth.1 outletCyberAI6 linked

Ahead

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.