Threat Intelligence
Patrick Steven Yaroch, a 37-year-old former FBI supervisor, has pleaded guilty to wire fraud and money laundering. He stole about $2.47 million in cryptocurrency from wallets linked to FBI investigations. He entered the guilty plea on November 5, 2026, according to the U.S. Department of Justice
Ransomware
A.P. Moller - Maersk has confirmed an IT security incident. The confirmation came shortly after we reported that the Whitearmor threat group claimed to have breached Maersk’s LF Logistics platform. What Maersk confirmed In a statement published on November 11, 2026, Maersk said it had found unauthorized access to,
Vulnerability
The Node.js project has released security updates that fix 16 vulnerabilities in the runtime, seven of them rated high. The most serious flaws are in Node.js’s built-in HTTP/2, HTTPS, and TLS server code. They let unauthenticated clients crash servers, corrupt memory, or read memory from
Vulnerability
A critical vulnerability in Apache HTTP Server’s HTTP/2 module, mod_http2, could let a remote attacker run code on vulnerable servers. The flaw is tracked as CVE-2026-119618 and rated 9.8 on the CVSS scale. It affects Apache HTTP Server versions 2.4.55 through 2.
Vulnerability
Zoom has released security updates for two vulnerabilities in Zoom Workplace for Windows. One of them is rated critical. Both let an unauthenticated attacker escalate privileges over the network, with no special permissions or prior access needed. The vulnerabilities * CVE-2026-108186 (CVSS 9.6, Critical): An improper input validation
Ransomware
Akira ransomware group has listed Pelham Plastics on its data leak site. Pelham Plastics is a custom plastic engineering company that makes injection molds and custom equipment, mainly for medical applications. The listing was posted on November 11, 2026. What the group claims The group says it stole about 30GB
Ransomware
The BYOD ransomware group has added Toyota to its data leak site. The post is marked “PSA” and was last updated on November 10, 2026. According to the listing, the stolen data includes: * Full names * Email addresses * Physical addresses * Phone numbers * Dates of birth * Kiosk device data In an unusual
Vulnerability
Fortinet has warned about a critical flaw in FortiClient that lets a remote attacker run code on a user’s computer. The attacker only needs the user to visit a malicious website. The bug is tracked as CVE-2026-121529 and carries a CVSS score of 9.1. Fortinet published
Vulnerability
Barracuda has identified two vulnerabilities affecting certain Barracuda products: a pre-authentication authorization bypass vulnerability and a command injection vulnerability. The vulnerabilities have been assigned CVE-2026-116606 and CVE-2026-111560, respectively. Successful exploitation requires an attacker to have access to the administrative interface of an affected product. If
Zero-Day
Microsoft patched a Microsoft Outlook Spoofing zero-day vulnerability that was actively exploited in attacks to steal NTLM account hashes. "An unauthenticated attacker could send a specially crafted message file and convince a user to open it in an affected version of Microsoft Outlook," warns Microsoft. "Opening
Zero-Day
Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, assigned the CVE identifier CVE-2026-125350 (CVSS score: N/A), has been described as a use-after-free bug in the XML component. Use-