SECURITY AND IT NEWS

November 14, 2026
3 Questions with Mike Wyatt, Deloitte
MSSP Alert
Deloitte’s Mike Wyatt explains how AI agents will reshape SOCs, identity and security outcomes.
READ SOURCE
November 14, 2026
Cyber Experts Weigh In: How to Fight Artex & AntiFox
Dark Reading
Cybercriminals using agentic pen-testing tools is a proverbial genie out of the bottle at this point, so enterprises need to get a defense plan in place right away.
READ SOURCE
November 14, 2026
Getting Past the Post-Quantum Cryptography Discovery Phase
Dark Reading
Most organizations haven't sorted out their cryptographic estate enough to even know where they'd start with post-quantum cryptography (PQC).
READ SOURCE
November 14, 2026
Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2
The Hacker News
N-able on Thursday said it's taking additional precautions in the wake of public disclosure of a new set of flaws tracked as 4EverAble2Shell and Agent2Shell. "We are restricting certain N-central features and integrations," the company said in a Thursday update. "These measures may affect some functionality, but we believe taking additional precautions while remediation is...
READ SOURCE
November 14, 2026
Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files
The Hacker News
An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then a previously unreported local privilege escalation flaw in Gaia OS  to deploy a backdoor called TSGA. The activity, detailed by Check Point, began on October 30, 2026, and targeted Israeli organizations, with...
READ SOURCE
November 14, 2026
Trace3 completes acquisition of Calian Group U.S. IT business
MSSP Alert
READ SOURCE
November 14, 2026
Cisco reports strong fiscal 2027 start driven by AI systems demand
MSSP Alert
READ SOURCE
November 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE
The Hacker News
A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, along with 51 other security flaws. Full protection from this flaw also requires rebuilding any C-language extensions installed on the server. The flaw, tracked as CVE-2026-6460, has a CVSS score of...
READ SOURCE
November 14, 2026
Check Point’s Firewall Subscription, Maestro Expansion Tackle ‘Important’ AI-Era Demands: Partner Exec
CRN Security
Check Point’s recently unveiled firewall subscription and expanded Maestro offering address massive AI adoption challenges among customers—with a focus on strengthening protection and scaling infrastructure without need to commit to capacity upfront, the CTO at a top Check Point partner tells CRN.
READ SOURCE
November 14, 2026
ArcticRAT Cybercrime Gang Profiles Victim Finances With AI
Dark Reading
The Android malware has expanded from focusing on crypto theft to full device control, and the attackers have added advanced analysis of stolen information.
READ SOURCE
November 13, 2026
Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins
The Hacker News
An international police operation took down servers behind Gootloader, CastleRAT and StealC this week. Criminals used the three malware tools to gain access to computers, steal passwords, and launch ransomware attacks. Police also seized about 6.4 million stolen logins belonging to more than 40,000 victims, according to Germany's Federal Criminal Police Office (BKA). Gootloader is...
READ SOURCE
November 13, 2026
SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users
The Hacker News
A newly identified spying group used hacked equipment inside Asian mobile operators to intercept the calls and texts of selected people, mostly in Taiwan. Enea, a telecom and cybersecurity software company based in Stockholm, found the group's attack sources in at least six Asian countries and named it SilentAir this week. It assessed with high...
READ SOURCE
November 13, 2026
When an AI Agent Goes Wrong, Can You Stop It?
The Hacker News
Suppose an AI agent is asked to sort support tickets and look up account details. A ticket contains instructions that lead the agent to export records to an unfamiliar destination. The agent can make the request because its identity has access to the records and its connected tools allow the action. That kind of scenario...
READ SOURCE
November 13, 2026
Attackers in Binance Breach Targeted Known Weakness, Missing Controls
Dark Reading
Blockchain complexities, such as attacker-deployed sweepers, hobble security controls designed to limit the damage of an exchange compromise.
READ SOURCE
November 13, 2026
Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases
The Hacker News
Three Trezor Safe 5 wallets bought from the reseller CryptoBilis contain an implant, an extra circuit board that can copy their recovery phrases, hardware wallet maker Trezor said yesterday. The implant reads the phrase from the wallet's screen and sends it over the mobile network to a server controlled by the attackers. The company examined...
READ SOURCE
November 13, 2026
Microsoft 365 recovery advances as security and compliance disruptions persist
MSSP Alert
Microsoft 365 outage disrupts security tools, testing MSSP visibility and response workflows.
READ SOURCE
November 13, 2026
FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls
The Hacker News
The U.S. Federal Bureau of Investigation (FBI) has established that threat actors tied to the Democratic People's Republic of Korea (DPRK aka North Korea) have stolen more than $400 million worth of cryptocurrency as part of a social engineering scheme codenamed FaceStealer in the last 18 months. As part of a coordinated set of actions...
READ SOURCE
November 13, 2026
Microsoft works to resolve widespread service outages
MSSP Alert
READ SOURCE
November 13, 2026
New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs
The Hacker News
Two attacks made public this week allow a malicious host to read data inside AMD SEV-SNP-protected virtual machines (VMs), which are built to keep the server's operator out. One of them, Mior, can also modify a VM's memory and fake the signed report confirming which software it runs. Both need control of the server's hypervisor,...
READ SOURCE
November 13, 2026
ConnectWise probes malicious manipulation of ScreenConnect extensions
MSSP Alert
READ SOURCE
November 12, 2026
186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers
The Hacker News
Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence (AI) tools are being used to serve ClickFix-style lures, browser-hijacking malware, and a set of extensions that hijack user searches. This delivery pattern has been codenamed TypoPrompting by Island. "AI-app lookalikes that turn an attempt to reach a familiar tool into a prompt to...
READ SOURCE
November 12, 2026
Microsoft releases November Windows 11 updates and sets support deadlines
MSSP Alert
READ SOURCE
November 12, 2026
Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass
The Hacker News
Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denial-of-service (DoS) or an authentication bypass. The critical vulnerabilities that impact NetScaler ADC and NetScaler Gateway are listed below - CVE-2026-120868 (CVSS score: 9.3) - A memory overflow vulnerability in Packet
READ SOURCE
November 12, 2026
Netskope appoints new global channel chief to accelerate AI growth
MSSP Alert
READ SOURCE
November 12, 2026
Huntress launches global incident response partner program
MSSP Alert
READ SOURCE
November 12, 2026
Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry
The Hacker News
A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and while it is enabled, the attacker needs no account. When it is off, anyone with a valid account can still exploit the...
READ SOURCE
November 12, 2026
Chillisoft adds Veracode to distribution portfolio in Australia, NZ
MSSP Alert
READ SOURCE
November 12, 2026
New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access
The Hacker News
Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of concept, called SignDrop, targets a log-authentication feature added to the driver last year. It abuses how clfs.sys creates companion files when a privileged process opens a prepared log,...
READ SOURCE
November 12, 2026
ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories
The Hacker News
A search result isn't always safe. An access request isn't always harmless. And a familiar account doesn't always mean a familiar person is using it. Simple things to remember. Yet a surprising amount of this week's trouble starts right there. Attackers are using fake websites, stolen access, and trusted tools to get into places they...
READ SOURCE
November 12, 2026
Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them
The Hacker News
Security teams have more alerts, logs, and monitoring tools than ever. Yet when an attack happens, one simple question can still take too long to answer: Who or what is behind this activity, and what can they access? A suspicious login might belong to an employee. An unusual API call could come from a machine...
READ SOURCE
SHOW MORE
Zetro IT Solutions has been supporting the IT systems of businesses and homes in the Tampa Bay area for more than a decade. We use a pro-active approach that help you address and solve your business' issue even before you encounter them.
© Copyright 2026 by Zetro IT Solutions. Website designed and developed by Phoenix3 Marketing