🔥 Hottest Cybersecurity Stories
Daily top picks · Sunday, November 15, 2026
Hottest Cybersecurity Stories
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 123
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Exchange for breakfast: Turla’s Cereal tricks are not for kids Inside an AhsayCBS Intrusion: Hidden Webshells, a CryptoMiner, and a C2 Implant Not All That Glitters…
securityaffairs.com
Security Affairs newsletter Round 604 by Pierluigi Paganini – INTERNATIONAL EDITION
www.theregister.com
This year’s bug count just passed 100K
www.csoonline.com
How AI is changing the nature of cyberattacks
www.helpnetsecurity.com
Week in review: Secret stealer hits GitHub repos, Claude Code turned into remote-controlled implant
More from today
Last updated November 15th, 2026 based on hundreds of Chatter sources
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 8
Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can automate tasks,…
Apify Confirms Customer Data Accessed in Cyberattack
The web scraping company says an intruder accessed customer accounts and obtained personal information or stored data. The post Apify Confirms Customer Data Accessed in Cyberattack appeared first on SecurityWeek.
Microsoft 365 outage, Bomb hoaxers in hijacked inboxes, Operation Endgame pulls malware plugs
The program introduces the day’s cybersecurity headlines, led by a worldwide Microsoft 365 outage affecting Exchange, Teams, SharePoint, Copilot, and other services. Microsoft traced the disruption to servers in the Americas and Europe that failed health checks; configuration updates may have contributed, and the…
Making software safer: Introducing the Software Safety Institute. [Special Edition]
Dave Bittner introduces the Software Safety Institute, an independent nonprofit founded by Lauren Zabrick and Bob Lord, veterans of CISA’s Secure by Design initiative. The institute aims to address incentives and practices that let insecure software persist and shift more responsibility to the companies that build it.…
The Good, the Bad and the Ugly in Cybersecurity – Week 46 (2026)
Authorities dismantle crypto scams and seize malware ops, Turla deploys Cereal to spy on governments, and attackers breach Railway to steal AI secrets.
European cyber threats are growing much faster than other regions
Europeans are more likely to open a phishing email compared to everyone else, Proofpoint finds.
OpenAI’s Daybreak brings AI agents to security testing and vulnerability fixes
OpenAI is bringing AI agents into more of the software security process with Daybreak, pairing web application penetration testing with tools that investigate vulnerabilities and develop fixes. The two offerings, Red Team and Defense Factory, connect the work of finding security weaknesses with patching and retesting…
Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France
A cyberattack on La Poste subsidiary Maileva exposed the names and postal addresses of 22 million people, including patients and tenants. Maileva, a subsidiary of the La Poste group, was hit in mid-September in one of the biggest cyberattacks France has seen. La Poste confirmed it to AFP.. The stolen data includes…
GITEX GLOBAL 2026 Puts AI Security, Cyber Resilience and Post-Quantum Readiness in Focus
Explore GITEX GLOBAL 2026's cybersecurity highlights, including AI security, post-quantum readiness, cyber resilience, and leading global security exhibitors.
5 Key Takeaways from Cybersecurity Awareness Month 2026 (with a bonus Q&A)
Cybersecurity Awareness Month 2026 delivered a clear message: while cyber threats continue to evolve, most successful attacks still exploit human behavior rather than technical vulnerabilities. This year's campaigns from the National Cybersecurity Alliance and CISA focused on helping organizations build practical…
Is AI Making Us Worse at Cybersecurity?
Overreliance on AI could erode the creativity, clear communication, and critical thinking security teams need when there’s no playbook. The post Is AI Making Us Worse at Cybersecurity? appeared first on SecurityWeek.
MyDoom: The 20-Year-Old Virus That Is Still Infecting Computers Today
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Nov. 13, 2026 – Watch the Short MyDoom is a notorious Windows email worm first discovered on Jan. 26, 2004, which remains the fastest-spreading email malware in history and continues to circulate The post MyDoom: The 20-Year-Old…
OpenAI’s GPT-6 Cyber Raises the Price of More Aggressive Security AI
Quick take OpenAI reports that GPT-6 Cyber scored 48.5% on ExploitGym, compared with 32.1% for GPT-5.6 Cyber. OpenAI says researchers reproduced 1,724 Linux kernel vulnerabilities and developed working exploits for 948, alongside 81 high-severity Firefox findings. OpenAI’s system card classifies GPT-6 Cyber as a…
41% of cybersecurity job postings are remote: by specialty, country and pay (Nov 2026)
Remote security work is not rare. Of the 3,033 open cybersecurity roles at 696 employers that we read on 15 November 2026, 1,240 (41%) are remote, posted by 532 different employers. That is a lot of choice, but it is not spread evenly: some specialties are close to half remote, others closer to a third, and most…
Poisoned QBase Update Grounds German Military Drones: The Update Server Is Now a Weapons System
TL;DR what: Quantum Systems confirmed a late October cyberattack by hostile actors, and Der Spiegel and the Financial Times report that a malicious QBase update was pushed to customers from the vendor's update distribution server. impact: The German armed forces reportedly grounded Quantum Systems drones, including…
Why the Old Approach to Cyberattacks No Longer Works | Opinion
"The very possibility of pre-positioning fundamentally changes how leaders should assess and respond to cyber threats."
Researchers continue to find serious vulnerabilities in internet connected refrigerators
VulnCheck disclosed 14 vulnerabilities in Dixell refrigeration units that give an attacker root access, while online honeypots are being flooded with hacks and malicious probes. The post Researchers continue to find serious vulnerabilities in internet connected refrigerators appeared first on CyberScoop.
Quantum Systems drones back in the air after malware scare
Germany's Bundeswehr lifted precautionary grounding after malicious update reportedly reached military servers
Breach Roundup: eMudhra Revokes Eight More Certs
Also: Microsoft 365 Outage, a Wiper Attack on Russian Cloud Provider BegetThis week: eMudhra revoked more certs, Microsoft 365 outage, default password exposed cars apps, Qubole AWS access exploited, Russian cloud service Beget wiper attack, SonicWall patches, a Taiwan hacker used an AI agent swarm, Fireworks AI…
SafePal Users Targeted by Phishing Letters Following Data…
Scammers exploit stolen customer information to send convincing physical letters containing malicious QR codes, while SafePal confirms its hardware wallets and private-key infrastructure remain secure. Cryptocurrency wallet provider SafePal has warned customers about a targeted phishing campaign involving fraudulent…
OpenAI launches security products, tells orgs they’re doomed if they don’t use them
Meanwhile, a group of nonprofits sue AI giants and cite AI-driven cyberattacks
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 8
Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can automate tasks,…
securityaffairs.com
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 123
securityaffairs.com
Security Affairs newsletter Round 604 by Pierluigi Paganini – INTERNATIONAL EDITION
More from today
Last updated November 15th, 2026 based on hundreds of Chatter sources
Week in review: Secret stealer hits GitHub repos, Claude Code turned into remote-controlled implant
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: What a security leader should tell the CEO about leaked credentials In this Help Net Security interview, Eric Fourrier, CEO of GitGuardian, talks about leaked credentials and personal liability for security leaders and…
Making software safer: Introducing the Software Safety Institute. [Special Edition]
Dave Bittner introduces the Software Safety Institute, an independent nonprofit founded by Lauren Zabrick and Bob Lord, veterans of CISA’s Secure by Design initiative. The institute aims to address incentives and practices that let insecure software persist and shift more responsibility to the companies that build it.…
Poisoned QBase Update Grounds German Military Drones: The Update Server Is Now a Weapons System
TL;DR what: Quantum Systems confirmed a late October cyberattack by hostile actors, and Der Spiegel and the Financial Times report that a malicious QBase update was pushed to customers from the vendor's update distribution server. impact: The German armed forces reportedly grounded Quantum Systems drones, including…
Is AI Making Us Worse at Cybersecurity?
Overreliance on AI could erode the creativity, clear communication, and critical thinking security teams need when there’s no playbook. The post Is AI Making Us Worse at Cybersecurity? appeared first on SecurityWeek.
Why the Old Approach to Cyberattacks No Longer Works | Opinion
"The very possibility of pre-positioning fundamentally changes how leaders should assess and respond to cyber threats."
Researchers continue to find serious vulnerabilities in internet connected refrigerators
VulnCheck disclosed 14 vulnerabilities in Dixell refrigeration units that give an attacker root access, while online honeypots are being flooded with hacks and malicious probes. The post Researchers continue to find serious vulnerabilities in internet connected refrigerators appeared first on CyberScoop.
This year’s bug count just passed 100K
‘We don’t have a security problem anymore. We have a data problem now’
How AI is changing the nature of cyberattacks
AI may be helping cyberattackers increase the speed and scale of their operations, but it is not yet changing their core objectives or the techniques they employ as part of their attack chains. Phishing, malware, and vulnerability exploitation remain the main techniques in play even as abuse of AI tools has made…
The Good, the Bad and the Ugly in Cybersecurity – Week 46 (2026)
Authorities dismantle crypto scams and seize malware ops, Turla deploys Cereal to spy on governments, and attackers breach Railway to steal AI secrets.
MyDoom: The 20-Year-Old Virus That Is Still Infecting Computers Today
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Nov. 13, 2026 – Watch the Short MyDoom is a notorious Windows email worm first discovered on Jan. 26, 2004, which remains the fastest-spreading email malware in history and continues to circulate The post MyDoom: The 20-Year-Old…
Quantum Systems drones back in the air after malware scare
Germany's Bundeswehr lifted precautionary grounding after malicious update reportedly reached military servers
Apify Confirms Customer Data Accessed in Cyberattack
The web scraping company says an intruder accessed customer accounts and obtained personal information or stored data. The post Apify Confirms Customer Data Accessed in Cyberattack appeared first on SecurityWeek.
Breach Roundup: eMudhra Revokes Eight More Certs
Also: Microsoft 365 Outage, a Wiper Attack on Russian Cloud Provider BegetThis week: eMudhra revoked more certs, Microsoft 365 outage, default password exposed cars apps, Qubole AWS access exploited, Russian cloud service Beget wiper attack, SonicWall patches, a Taiwan hacker used an AI agent swarm, Fireworks AI…
European cyber threats are growing much faster than other regions
Europeans are more likely to open a phishing email compared to everyone else, Proofpoint finds.
OpenAI’s Daybreak brings AI agents to security testing and vulnerability fixes
OpenAI is bringing AI agents into more of the software security process with Daybreak, pairing web application penetration testing with tools that investigate vulnerabilities and develop fixes. The two offerings, Red Team and Defense Factory, connect the work of finding security weaknesses with patching and retesting…
SafePal Users Targeted by Phishing Letters Following Data…
Scammers exploit stolen customer information to send convincing physical letters containing malicious QR codes, while SafePal confirms its hardware wallets and private-key infrastructure remain secure. Cryptocurrency wallet provider SafePal has warned customers about a targeted phishing campaign involving fraudulent…
GITEX GLOBAL 2026 Puts AI Security, Cyber Resilience and Post-Quantum Readiness in Focus
Explore GITEX GLOBAL 2026's cybersecurity highlights, including AI security, post-quantum readiness, cyber resilience, and leading global security exhibitors.
Microsoft 365 outage, Bomb hoaxers in hijacked inboxes, Operation Endgame pulls malware plugs
The program introduces the day’s cybersecurity headlines, led by a worldwide Microsoft 365 outage affecting Exchange, Teams, SharePoint, Copilot, and other services. Microsoft traced the disruption to servers in the Americas and Europe that failed health checks; configuration updates may have contributed, and the…
OpenAI launches security products, tells orgs they’re doomed if they don’t use them
Meanwhile, a group of nonprofits sue AI giants and cite AI-driven cyberattacks
OpenAI’s GPT-6 Cyber Raises the Price of More Aggressive Security AI
Quick take OpenAI reports that GPT-6 Cyber scored 48.5% on ExploitGym, compared with 32.1% for GPT-5.6 Cyber. OpenAI says researchers reproduced 1,724 Linux kernel vulnerabilities and developed working exploits for 948, alongside 81 high-severity Firefox findings. OpenAI’s system card classifies GPT-6 Cyber as a…
5 Key Takeaways from Cybersecurity Awareness Month 2026 (with a bonus Q&A)
Cybersecurity Awareness Month 2026 delivered a clear message: while cyber threats continue to evolve, most successful attacks still exploit human behavior rather than technical vulnerabilities. This year's campaigns from the National Cybersecurity Alliance and CISA focused on helping organizations build practical…
