The Wave

1. 2h agoBleepingComputerFBI warns ARTEX AI hacking tool is powering global cyberattacksThe FBI issued a flash alert warning that the open-source Artex AI hacking framework is being used by cybercriminals and nation-state actors to automate intrusions at machine speed, with Amazon publishing a corroborating study the same day.

   2 articles

   1. YesterdayThe RecordEarliestFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’
   2. 2h agoBleepingComputerPickupFBI warns ARTEX AI hacking tool is powering global cyberattacks

   CyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks37 linked
2. 5h agoWiz Research · research by NordStellarLiteLLM Compromised, Steals Credentials | Wiz BlogWiz Research maps the cloud, code and AI secrets that infostealer malware harvests from developer endpoints and details how attackers turn them into cloud access, using NordStellar telemetry to rank stealer families and secret types.

   2 articles

   1. 5h agoWiz ResearchLiteLLM Compromised, Steals Credentials | Wiz Blog
   2. 5h agoWiz ResearchEarliestThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz Blog

   Cyber27 linked
3. 5h agoWiz ResearchThe Rise of Agentic Attacks: What They Look Like, and Where They're Headed | Wiz BlogWiz Research reviews public and private cases to outline recurring fingerprints of AI-agent-driven intrusions, including ARTEX, Hermes and custom agentic workflows.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks18 linked
4. 5h agoWiz ResearchARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors | Wiz BlogWiz Research reports an actor using ARTEX, an open-source agentic AI penetration-testing framework, to run automated reconnaissance and identity-provider attacks against IT and software vendors throughout October 2026, linked to Microsoft's Storm-0940 supply-chain activity.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks21 linked
5. 5h agoWiz ResearchIntroducing Atlas: Wiz's AI vulnerability researcher | Wiz BlogWiz outlines its AI agent intent-detection pipeline, which uses model I/O telemetry, layered LLM analysis, and runtime correlation, validated against a simulated benchmark and referencing the OpenAI–Hugging Face incident.

   2 articles

   1. 5h agoWiz ResearchIntroducing Atlas: Wiz's AI vulnerability researcher | Wiz Blog
   2. 5h agoWiz ResearchEarliestBuilding an AI Detection Engine for Agent Intent | Wiz Blog

   Cyber22 linked
6. 5h agoWiz ResearchPHP2Shell: Exploitation Attempts and Remediation Trends | Wiz BlogWiz Research finds that PHP2Shell exploitation attempts so far have failed to complete end-to-end, while exposed vulnerable hosts dropped sharply after the October 2026 disclosure.1 outletCyber7 linked
7. 5h agoWiz ResearchLoud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack | Wiz BlogWiz CIRT describes several recent cloud intrusions in which an AI agent system ran the entire attack autonomously, from initial access through credential harvesting, lateral movement, and exfiltration, and lays out defensive recommendations.1 outletCyberAI6 linked
8. 5h agoWiz ResearchFrom Phishing to LLMjacking: Threat Actors Targeting Cloud Billing Accounts for LLM Usage | Wiz BlogWiz CIRT documents an "LLMjacking" campaign in which attackers hijack GCP billing accounts via phishing and policy manipulation to run mass Gemini API workloads at victims' expense.1 outletCyber1 linked
9. 5h agoWiz ResearchWhat is APT29? | WizWiz publishes an explainer profiling APT29, the Russian SVR-attributed cyber espionage group, covering its aliases, notable campaigns, and tradecraft.1 outletCyber1 linked
10. 5h agoWiz ResearchWhat is a Zero-Day Vulnerability? Risk, Examples & Defense | WizWiz Research publishes an explainer defining zero-day vulnerabilities, outlining attack stages, exploit markets, notable incidents, and defensive playbooks.1 outletCyber5 linked
11. 4d agoWiz Research · research by WizSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz BlogWiz's free Scan for Good initiative, built with Google DeepMind and CISA, has surfaced more than 475 high and critical exposures across public sector, healthcare and open-source environments.

    15 articles · 2 outlets · TechTarget

    1. 5d agoWiz ResearchPickupTowards a better cloud vulnerability response model | Wiz Blog
    2. 4d agoTechTargetPickupScan for Good: Free AI security tool finds nearly 500 critical flaws
    3. 4d agoWiz ResearchSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz Blog
    4. 2d agoWiz ResearchPickupClaude Mythos and Cybersecurity: What Actually Changes? | Wiz
    5. 2d agoWiz ResearchPickupSoftware Supply Chain Security: Key Risks and Best Defenses | Wiz
    6. 5h agoWiz Research“Black October” for AI Developer Platforms | Wiz Blog
    7. 5h agoWiz ResearchPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog
    8. 5h agoWiz ResearchGitHub Actions Security Pt 1: Attacks & Defenses | Wiz Blog
    9. 5h agoWiz ResearchGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz Blog
    10. 5h agoWiz ResearchScan for Good: Finding Critical Exposures with AI | Wiz Blog
    11. 5h agoWiz ResearchHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz Blog
    12. 5h agoWiz ResearchScan for Good: AIを活用した重大な露出の特定 | Wiz ブログ
    13. 5h agoWiz ResearchArtifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 | Wiz Blog
    14. 5h agoWiz ResearchBreaking LiteLLM: From Auth Bypass to Cloud Compromise | Wiz Blog
    15. 5h agoWiz ResearchPickupA U.S. Navy Cloud Broker enhances cloud security with Wiz | Wiz

    Cyber169 linked
12. YesterdayCSO Online · research by AikidoThousands of GitHub repos hit with secret-stealing malwareThreat actor behind the 'wfx-loot' campaign used about 4,800 compromised GitHub accounts to inject credential-stealing workflows into tens of thousands of repositories and stole CI and cloud secrets from at least 1,835 targets.

    2 articles · BleepingComputer

    1. 2d agoBleepingComputerEarliestHackers compromise 4,800 GitHub accounts to steal cloud credentials
    2. YesterdayCSO OnlinePickupThousands of GitHub repos hit with secret-stealing malware

    Cyber12 linked
13. YesterdayAnthropicWhen AI builds itselfAnthropic's Institute publishes internal and public-benchmark evidence that AI is accelerating its own development, and argues that recursive self-improvement could arrive sooner than institutions expect and that a verifiable coordinated slowdown should be an option.

    12 articles

    1. YesterdayAnthropicPolicy on the AI Exponential
    2. YesterdayAnthropicNatural Language Autoencoders
    3. YesterdayAnthropicInvestigating unintended model actions in our evaluations and internal use
    4. YesterdayAnthropicResponsible Scaling Policy Version 3.0
    5. YesterdayAnthropicTrustworthy agents in practice
    6. YesterdayAnthropicPickupThoughts on America’s AI Action Plan
    7. YesterdayAnthropicUnderstanding and addressing AI harms
    8. YesterdayAnthropicTeaching Claude why
    9. YesterdayAnthropicPetri: An open-source AI auditing tool
    10. YesterdayAnthropicLLMs and biorisk
    11. YesterdayAnthropicAnthropic’s Transparency Hub
    12. YesterdayAnthropicEarliestWhen AI builds itself

    AI236 linked
14. 2d agoWIREDMicrosoft 365 Crawls Back to Life After a 24-Hour OutageMicrosoft 365 outage disrupted Outlook, Teams and Copilot worldwide for a second day, with Microsoft attributing it to cascading server health-check failures across data centers and no sign of a cyberattack.

    4 articles · 2 outlets

    1. 2d agoYahooPickupMicrosoft says it "restored service" after major worldwide outage
    2. 2d agoWIREDEarliestThe Microsoft Outage Is a Warning for the World
    3. 2d agoWIREDPickupMicrosoft 365 Crawls Back to Life After a 24-Hour Outage
    4. 2d agoYahooPickupMicrosoft says services fully restored after day-long global outage

    Microsoft 365 outage lasts about 24 hours, renewing dependence concerns89 linked
15. 3d agoBleepingComputer · research by PrevidianNew N-able "4EverAble2Shell" zero-day exploited hours after PoC releasedThreat actors began exploiting the public 4EverAble2Shell zero-day in N-able N-central within hours of its proof-of-concept release, deploying cryptominers on compromised servers.

    2 articles

    1. 3d agoBleepingComputerPickupNew N-able "4EverAble2Shell" zero-day exploited hours after PoC released
    2. 2d agoSecurityWeekEarliestHackers Exploit New N-central Zero-Day Hours After PoC Publication

    CyberN-able N-central zero-days exploited after researcher publishes exploit code22 linked
16. CT2d agoCisco TalosARTEX and beyond: AI-enabled penetration testing platformsCisco Talos documents growing in-the-wild misuse of AI-enabled penetration testing frameworks, focusing on the ARTEX platform used by criminal and China-nexus actors to automate reconnaissance and intrusion, and lists associated tooling and detection coverage.1 outletCyberAI16 linked
17. 5d agoThe Record · research by MicrosoftMicrosoft’s Patch Tuesday surpasses 1,000 bugs for second month in a rowMicrosoft's November 2026 Patch Tuesday release fixes 1,094 flaws, including an exploited Outlook spoofing zero-day (CVE-2026-124194) that can leak NTLMv2 hashes.

    6 articles · Daily Mail

    1. 5d agoSecurityWeekEarliestExploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
    2. 5d agoThe RecordPickupMicrosoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row
    3. 4d agoCyberScoopPickupMicrosoft fixes over 1,000 vulnerabilities in November Patch Tuesday
    4. 4d agoDark ReadingPickupNovember Patch Tuesday: An Overflowing Cornucopia of CVEs
    5. 4d agoCSO OnlinePickupNovember 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentials
    6. 3d agoDaily MailPickupOutlook users warned about dangerous flaw that lets hackers hijack email accounts: Act now

    Cyber122 linked
18. YesterdayN-ableN-able Vulnerability Remediation UpdateN-able details how it patched N-central through hotfix HF2 after two rounds of undisclosed zero-day vulnerabilities, bringing its hosted servers back online while deferring remaining authenticated and agent impersonation fixes to a forthcoming HF3.1 outletCyberN-able N-central zero-days exploited after researcher publishes exploit code12 linked
19. YesterdayYahooGerman experts warn against digital dependence after Microsoft outageGerman experts respond to a global Microsoft 365 cloud outage by warning that dependence on a single provider threatens businesses, schools and government, and urging more European alternatives and fallback options.1 outletCyberMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns17 linked
20. YesterdayEuronewsCan Europe’s tech firms really replace Amazon, Google and Microsoft?A week-long Microsoft Outlook and Teams outage across 74 countries has revived European concern over reliance on a few US cloud providers, alongside a draft MEP report urging public buyers to favor European cloud services.1 outletAIMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns20 linked
21. 2d agoThe RegisterMicrosoft outage gives customers a crash course in dependence on RedmondA prolonged Microsoft 365 outage in November 2026 knocked out Exchange Online, Teams and Copilot, prompting critics to renew warnings about dependence on a single vendor.1 outletMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns15 linked
22. 5d agoThe RecordPalantir exec nominated to lead CISA; lame-duck Senate vote is uncertainTrump's nomination of Palantir CISO Michael LoSapio to lead CISA raises questions about his Palantir ties and the agency's long-vacant leadership.

    6 articles · 5 outlets

    1. 5d agoDefense OnePickupTrump nominates Palantir security chief Michael LoSapio to lead CISA
    2. 5d agoNextgov/FCWEarliestTrump nominates Palantir security chief Michael LoSapio to lead CISA
    3. 5d agoCyberScoopPickupTrump picks Palantir’s LoSapio to head CISA
    4. 5d agoThe RecordPalantir exec nominated to lead CISA; lame-duck Senate vote is uncertain
    5. 4d agoN2K CyberWirePickupThe next name on CISA's door.
    6. 4d agoCyberScoopCISA director pick already drawing concern from Hill Dems over Palantir connection

    CyberTrump nominates Palantir's Michael LoSapio to lead CISA as Democrats plan oversight102 linked
23. 3d agoTechTargetMicrosoft CISO urges Artex regulation, but experts say it won’t workMicrosoft's global CISO Igor Tsyganskiy urged policymakers to regulate release and use of Artex, an open-source LLM-driven pen testing framework, while security experts argue regulation would hamper defenders without curbing criminal use.1 outletCyberAI21 linked
24. 4d agoNextgov/FCWCISA outlines internal plan to swiftly address cyber, infrastructure threatsCISA revised its cyber incident reporting questionnaire to capture more attack detail and adopt MITRE ATT&CK, even as the broader CIRCIA final rule sits under White House review.

    5 articles · 4 outlets

    1. 6d agoCISA NewsPickupCISA Announces Enhanced Reporting Form for Cyber Incidents
    2. 5d agoDark ReadingPickupCISA Announces Enhanced Reporting Form for Cyber Incidents
    3. 5d agoNextgov/FCWEarliestCISA updates cyber reporting form as broader incident mandate awaits approval
    4. 4d agoNextgov/FCWCISA outlines internal plan to swiftly address cyber, infrastructure threats
    5. 4d agoDefense OnePickupCISA outlines internal plan to swiftly address cyber, infrastructure threats

    Cyber57 linked
25. N2d agoN-ableNew Security Update on N-centralN-able urges on-premises N-central customers to install the 2026.4 HF2 security hotfix quickly and keep servers offline until done, while disputing a researcher's claim of ignored responsible disclosure.

    2 articles

    1. 3d agoN-ableEarliestUpdate on N-central 2026.4 HF2 and ongoing security response
    2. 2d agoN-ableNew Security Update on N-central

    CyberN-able N-central zero-days exploited after researcher publishes exploit code23 linked
26. 2d agoElasticWindows Endpoint Security Platform: Inside wesp.sysElastic's analysis of Microsoft's undocumented Windows Endpoint Security Platform finds that its kernel driver wesp.sys is a file system mini-filter that talks to user mode over a filter communication port, with no one-way reply path yet.1 outletCyber3 linked
27. 3d agoHuntback4EverAble2Shell is already mining Monero on live N-central serversHuntback reports that the 4EverAble2Shell N-central exploit was weaponised within hours and has been used to install a Monero miner on 21 live N-central servers, many already patched to Hotfix 2.1 outletCyberN-able N-central zero-days exploited after researcher publishes exploit code11 linked
28. 4d agoDark ReadingN-able Takes N-central Platform Offline After Discovery of 33 FlawsN-able shipped a hotfix for critical flaws in its RMM platform after an independent researcher released proof-of-concept exploits in a disclosure dispute, and it briefly took the platform offline.

    2 articles

    1. 4d agoCybersecurity DiveEarliestN-able issues hotfix after researcher dumps PoCs in disclosure spat
    2. 4d agoDark ReadingPickupN-able Takes N-central Platform Offline After Discovery of 33 Flaws

    CyberN-able N-central zero-days exploited after researcher publishes exploit code24 linked
29. 4d agoBleepingComputer · research by Sean BalesN-able releases security hotfixes for zero-day vulnerabilitiesAfter a researcher published over 30 alleged N-central zero-days with exploit code, N-able took its hosted N-central environments offline and told on-premises customers to shut their servers down while it develops a hotfix.

    4 articles · 3 outlets · TechCrunch

    1. 5d agoBleepingComputerEarliestN-able takes cloud platform offline after 30+ "zero-days" published
    2. 5d agoTechCrunchPickupN-able takes its remote access service offline after researcher publishes dozens of zero-day bugs
    3. 4d agoCSO OnlinePickupN-able N-central gets emergency fix two days after 33 exploits published
    4. 4d agoBleepingComputerN-able releases security hotfixes for zero-day vulnerabilities

    CyberN-able N-central zero-days exploited after researcher publishes exploit code50 linked
30. 4d agoSecurityWeek · research by Barracuda NetworksRecently Patched Barracuda Vulnerabilities Exploited in AttacksThreat actors are exploiting two chained Barracuda vulnerabilities (CVE-2026-116606 and CVE-2026-111560), and CISA has added both to its KEV catalog with a three-day federal patch deadline.

    3 articles · 2 outlets · BleepingComputer

    1. 5d agoBleepingComputerPickupHackers now exploit critical Barracuda ESG flaws to gain root access
    2. 4d agoSecurityWeekEarliestRecently Patched Barracuda Vulnerabilities Exploited in Attacks
    3. 4d agoSecurityWeekPickupThreat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities

    Cyber11 linked
31. 3d agoPalo Alto Unit 42 · research by Unit 42ARTEX and AI-Powered Red Teaming Tools: What Defenders Need to KnowUnit 42 reports that attackers are using the AI-powered red-teaming framework ARTEX, alongside CyberStrikeAI, to run autonomous intrusions that reach cloud environments through exposed APIs and password reset flows without exploiting software vulnerabilities.1 outletCyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks11 linked
32. 13d agoSemafor · research by FBINorth Korea blamed for crypto heistDOJ obtained court authorization to seize or restrain over $1.2 billion in crypto stolen from Binance by North Korean hackers.

    19 articles · 16 outlets · Chicago Tribune, The Hill, Chron, The Register, New York Post, The Sun, Los Angeles Times, BleepingComputer

    1. 13d agoSemaforPickupNorth Korea blamed for crypto heist
    2. 2d agoYahooPickupNorth Korean hackers steal more than $400 million using video images, FBI says
    3. 2d agoThe RecordEarliestFeds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools
    4. 2d agoChicago TribunePickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
    5. 2d agoDecryptPickupNorth Korea Stole $400 Million in Crypto Using Deepfake Video Calls, DOJ Says
    6. 2d agoNextgov/FCWPickupFBI disrupts intricate North Korean fake-call scheme tied to $400M in crypto theft
    7. 2d agoThe HillPickupFBI: North Korean hackers have stolen $400 million in crypto over last 18 months
    8. 2d agoYahooPickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
    9. 2d agoChronPickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
    10. 2d agoThe RegisterPickupDOJ takes aim at $1.2B in Binance loot as FBI disrupts North Korean scam
    11. 2d agoCyberScoopPickupUS seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance
    12. 2d agoNew York PostPickupFBI reveals cunning ruse North Korean hackers used in massive crypto heist as feds claw back $1.2B
    13. 2d agoSecurityWeekPickupFBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance
    14. 2d agoYahooPickupNorth Korean hackers used fake video calls in $400m crypto hack, says FBI
    15. 2d agoYahooPickupU.S. disrupts North Korean fake video scheme tied to $400 million theft
    16. 2d agoThe SunPickupNorth Korea’s hacker army steal another $400MILLION in crypto using fake video calls weeks after ‘biggest ever heist’
    17. 2d agoCybersecurity DivePickupUS cracks down on North Korean cryptocurrency-theft scheme, recovers more Binance funds
    18. YesterdayLos Angeles TimesPickupFBI disrupts crypto theft scheme by North Korean hacking group; billions stolen so far
    19. YesterdayBleepingComputerPickupUS disrupts North Korean campaign behind $400 million crypto theft

    Cyber448 linked
33. 5d agoWiz ResearchThe SolarWinds Attack | Wiz BlogWiz publishes a running cloud-focused guidance blog on the SolarWinds supply-chain attack, detailing hybrid on-prem-to-cloud attack vectors and detection steps for cloud security teams.1 outletCyber14 linked
34. 4d agoWiz ResearchBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | WizWiz Research reports that 82% of organizations grant third-party cloud vendors wide read access and 76% grant roles enabling full account takeover, based on an analysis of 1,300+ AWS accounts and 40+ vendors.

    10 articles

    1. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog
    2. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog
    3. 5d agoWiz ResearchThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog
    4. 5d agoWiz ResearchHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz Blog
    5. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog
    6. 5d agoWiz ResearchBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz Blog
    7. 5d agoWiz ResearchAttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes | Wiz Blog
    8. 5d agoWiz ResearchChaosDB: How we hacked thousands of Azure customers’ databases | Wiz Blog
    9. 5d agoWiz Research“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz Blog
    10. 4d agoWiz ResearchPickupBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | Wiz

    Cyber161 linked
35. 5d agoWiz ResearchCompromised Microsoft Key: More Impactful Than We Thought | Wiz BlogWiz Research finds the compromised Microsoft MSA signing key could forge tokens for far more Azure AD applications than Microsoft disclosed, and that forged tokens are hard for customers to detect.1 outletCyber33 linked
36. 5d agoWiz ResearchStorm-0558 Update: Takeaways from Microsoft's recent report | Wiz BlogWiz Research analyzes Microsoft's September 2023 follow-up report on the Storm-0558 breach, drawing out takeaways on how the MSA signing key was likely stolen and what remains unanswered.1 outletCyber27 linked
37. 4d agoWiz Research · research by WizHacking GitHub with a Semicolon & Claude with Sagi Tzadik | WizWiz podcast episode in which researcher Sagi Tzadik explains how a semicolon in GitHub's git push option handling enabled a critical RCE, found using Claude paired with reverse engineering tooling.1 outletCyber13 linked
38. 5d agoWiz ResearchNSA top 10 cloud security strategies: key takeaways | Wiz BlogWiz Research summarizes the NSA and CISA joint "top ten" cloud security mitigation strategies, which cover shared responsibility, identity, key management, data, CI/CD and logging, and places them alongside a CSRB cloud security review and a CISA report on Russian intelligence cloud adaptation.1 outletCyber4 linked
39. 5d agoWiz ResearchMidnight Blizzard breach: analysis and best practices | Wiz BlogWiz Research breaks down how Midnight Blizzard used a compromised legacy test OAuth application to gain mailbox access in Microsoft's corporate tenant and lists detections and hardening steps against similar attacks.1 outletCyber6 linked
40. 5d agoWiz ResearchBridging the Security Gap: Mitigating Lateral Movement Risks from On-Premises to Cloud Environments | Wiz BlogWiz Research publishes a fourth blog post detailing on-prem-to-cloud lateral movement techniques (cached cleartext cloud keys, PRT pass-the-PRT and pass-the-cookie attacks) and recommended mitigations across AWS, Azure and GCP.1 outletCyber1 linked
41. 5d agoWiz ResearchHunting for signs of persistence in the cloud: an IR guide following the CircleCI incident | Wiz BlogWiz Research published a cloud incident response guide that lists AWS, Azure and GCP APIs attackers could use to maintain persistence after the CircleCI breach and supplies hunting queries for each provider.1 outletCyber4 linked
42. 5d agoWiz Research · research by WizAI監査とは？セキュリティの観点から | WizWiz's explainer defines AI audits as structured reviews of AI models, data, pipelines and infrastructure for security, compliance and intended operation, and maps the frameworks and cloud-security tooling used to run them.1 outlet20 linked
43. 4d agoWiz Research · research by WizOperation Stormbreaker case study | WizWiz published a vendor case study describing how the Marine Corps Community Services (MCCS) used Wiz in its Operation StormBreaker initiative to cut Authorization to Operate timelines from about 18 months to 30 days.1 outletCyber7 linked
44. 5d agoSecurityWeekIBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in AttacksCISA added IBM Aspera Faspex and SignalWire FreeSwitch vulnerabilities, both reported as exploited in attacks, to its KEV catalog and set a three-day federal patch deadline.1 outletCyber13 linked
45. 5d agoBleepingComputer · research by OnapsisSAP patches ICM2SHELL and PROXYGATE maximum severity flawsSAP's November 2026 security updates fix 35 flaws, including four CVSS 10/10 bugs in NetWeaver, Web Dispatcher and Gateway that Onapsis dubbed ICM2SHELL and PROXYGATE.1 outletCyber1 linked
46. 5d agoAtlantic CouncilWhat students got right about the $6 billion Binance hack, and how they would prevent the next oneAtlantic Council analysis compares student responses in its Monterey Cyber 9/12 cryptocurrency-heist exercise with the real October 2026 Binance hack by North Korea's TraderTraitor, drawing four policy lessons and two gaps.1 outletCyber25 linked
47. 5d agoCSO Online · research by WizQubole supply chain attack exposed AWS, Entra ID, and Okta credentialsAn attacker used Qubole's compromised AWS IAM credentials to assume customer cross-account roles, exfiltrating data and harvesting AWS, Entra ID and Okta secrets across dozens of organizations in October 2026.1 outletCyberFireworks AI breach exposes customer data at Uber, Notion and Cursor8 linked
48. 6d agoCybersecurity DiveFinancially motivated threat cluster uses AI-enabled tools against banking sectorMicrosoft Threat Intelligence reports a Cambodia-based financially motivated group, Storm 3358, is using the AI-enabled Artex pen-testing framework against banking and financial firms worldwide, part of a broader wave of Artex-driven attacks.1 outletCyber11 linked
49. 6d agoNextgov/FCWDeloitte wins $488M FAA modernization challenge contractFAA awards Deloitte a potential 10-year, $488.2M contract to modernize at least 200 applications and 3,000 databases under the ATLAS challenge.1 outlet2 linked
50. 7d agoThe GuardianHot fridges, a fake nuclear alert and a $6bn heist: are we in the foothills of a hacking epidemic?A Guardian feature links a October–November 2026 wave of cyber incidents, led by hacked supermarket fridges across Europe, to AI-accelerated vulnerability discovery and state-linked threat actors.1 outletCyberAIFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks27 linked
51. 9d agoThe Record · research by DigiCertCertificate authority DigiCert reports data breach involving business customer infoDigiCert disclosed a data breach in which an exposed internal business system, moved outside its VPN-restricted network, was accessed by an outside party and leaked customer names, contact details and identity documents.1 outletCyber1 linked
52. 9d agoCybersecurity DiveHackers enlist Artex to scan GitHub repositories for exposed secretsMicrosoft Threat Intelligence reports that hackers are using agentic AI tools such as Artex to hunt exposed GitHub secrets and abuse stolen credentials against downstream Azure and Microsoft 365 tenants.1 outletCyber12 linked
53. 9d agoCensysARTEX: Agentic AsbestosCensys finds ARTEX, a GitHub-published agentic AI attack tool, running on roughly 1,465 hosts, with exposed operator directories revealing malicious tooling tied to recent intrusions.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks13 linked
54. 9d agoAxiosHow AI is enabling faster, more dangerous cyber warfareAxios reports that AI and automation are accelerating state-backed cyberattacks, citing CrowdStrike's findings on the China-linked Vapor Panda campaign using the Artex tool and the suspected Russia-linked refrigeration sabotage across European grocery stores.1 outletCyberAI31 linked
55. 11d agoCybersecurity DiveAttacker abuses Microsoft Entra ID to target downstream MSP clientsA lone hacker is abusing stolen Microsoft Entra ID application secrets to breach Microsoft 365 and Azure tenants at MSPs and their downstream clients, according to Todyl's report.1 outletCyber6 linked
56. 11d agoAtlantic CouncilA $6 billion hack in a season of AI anxietyAn Atlantic Council op-ed argues the $6.3 billion Binance hack and AI-assisted PHP vulnerability discoveries are partly familiar problems and urges regulators to separate new risks from old ones.1 outletCyberAI25 linked
57. 13d agoCensysThoughts on Vulnerability Response in the Era of the Vulnpocalypse and PHP2ShellCensys argues that AI-driven vulnerability hype overstates risk, uses the PHP2Shell crisis and its own long-term patch-behavior research to show that patch deployability and legacy maintenance matter more than raw vulnerability counts.1 outletCyber3 linked
58. CTOct 20Cisco TalosThere's only so much code: the rise in vulnerability numbersCisco Talos argues that AI-driven surges in vulnerability counts, including 1,415 Microsoft Patch Tuesday advisories, do not translate proportionally into exploitation, and urges defense-in-depth.1 outletCyberAI6 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.