In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach

Noteworthy stories that might have slipped under the radar: Siemens details security advisory policy, OpenAI Codex backdoor risk, Microsoft warns of model weight backdoors. The post In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach appeared first on SecurityWeek. more…

Microsoft Struggles to Restore Email and Other Services in a Global Outage

Microsoft is trying different ways to identify the cause of the problem and get its servers back online, using “a measured approach to identify and repair affected infrastructure.” The post Microsoft Struggles to Restore Email and Other Services in a Global Outage appeared first on SecurityWeek. more…

Apify Confirms Customer Data Accessed in Cyberattack

The web scraping company says an intruder accessed customer accounts and obtained personal information or stored data. The post Apify Confirms Customer Data Accessed in Cyberattack appeared first on SecurityWeek. more…

SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks

Enea says SilentAir hijacked mobile network nodes to intercept calls and messages, with Taiwanese subscribers the primary targets. The post SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks appeared first on SecurityWeek. more…

Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure

Investigators seized 235 servers and 257 domains, along with 6.4 million victim credentials as part of Operation Endgame. The post Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure appeared first on SecurityWeek. more…

Citrix Patches 10 Critical NetScaler Vulnerabilities

Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions. The post Citrix Patches 10 Critical NetScaler Vulnerabilities appeared first on SecurityWeek. more…

OpenAI Unveils Daybreak Red Team, Defense Factory Security Tools

Daybreak Red Team pentests web applications with AI agents, while Defense Factory investigates security findings and prepares patches. The post OpenAI Unveils Daybreak Red Team, Defense Factory Security Tools appeared first on SecurityWeek. more…

Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’

It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process. The post Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’ appeared first on SecurityWeek. more…

PHP2Shell Exploited in Destructive Check Point Gateway Attacks

PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root. The post PHP2Shell Exploited in Destructive Check Point Gateway Attacks appeared first on SecurityWeek. more…

Hackers Exploit New N-central Zero-Day Hours After PoC Publication

Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges. The post Hackers Exploit New N-central Zero-Day Hours After PoC Publication appeared first on SecurityWeek. more…

Microsoft struggles to get M365 services back online after widespread outage

If you’re struggling to send or receive emails, you’re not alone. Microsoft has been unable to fully restore Microsoft 365 more than 13 hours after an Exchange Online failure took down Outlook and spread to Teams, SharePoint, Copilot and parts of the company’s security tooling, and it said overnight that its latest fixes were “not […] more…

Microsoft 365 caught a bug and the whole world sneezed

While Microsoft seems at last to be on the edge of fixing the global outage that hammered its services overnight, causing chaos across Asia-Pacific and Europe, we should still ask: How many times must we endure outages of this kind? How long will it be until government, enterprise, and everyday users understand the need to […] more…

For November, Patch Tuesday means a to-do list that starts with Outlook

November is a (relatively) big month. Microsoft’s November 2026 Patch Tuesday fixes 1,240 CVEs, 64 of them rated critical. Start with Outlook: attackers are already using CVE-2026-124194, a spoofing flaw. A Chromium flaw, CVE-2026-125350, is also being exploited, and at the time of writing, Microsoft has fixed it only in Edge for Android. The Readiness […] more…

FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance

Also Thursday, the FBI blamed North Korea for a separate social engineering scheme that officials say resulted in the theft of $400 million worth of cryptocurrency. The post FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance appeared first on SecurityWeek. more…

United Airlines becomes the latest enterprise to shut its door to customer bots

United Airlines on Wednesday became the latest enterprise to block customer bots, following similar moves from Walmart, Target and Amazon.  The $59 billion airline, the second largest in the world, said the move was prompted by fears of data leakage, unintended purchases, and the risk of violating federal airline rules.  But industry observers say that […] more…

Microsoft 365 Outage Disrupts Outlook, Exchange Online and Teams

Microsoft says failed server health checks disrupted Outlook and other Microsoft 365 services. The company is still investigating the cause and has disclosed no evidence of a cyberattack. The post Microsoft 365 Outage Disrupts Outlook, Exchange Online and Teams appeared first on SecurityWeek. more…

2017 Antivirus News | Powered by WordPress | Fluxipress Theme | Show My IP Address, check blacklists | Free Favicon, Android and Apple Icon Generator | Bitcoin and Crypto Currency News