Microsoft did another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in its Windows operating systems and supported software. This month's Patch Tuesday addresses 63 critical flaws - including a zero-day in Microsoft Outlook - and comes amid important security updates from other software makers, including Adobe, Apple, Google and Mozilla. November's patch release from Redmond tackles 1,093 vulnerabilities. READ MORE...
Cloud hosting provider Railway says hackers exploited vulnerabilities in its infrastructure to steal customer authentication secrets and generate approximately $740,000 in fraudulent AI usage, potentially exposing credentials for up to 100,000 workspaces. The company disclosed the incident on October 22, warning customers to rotate their secrets after detecting unauthorized access to systems storing environment variables. READ MORE...
Shipping behemoth A.P. Moller-Maersk says it is investigating "an IT security incident" involving the potential theft of data from a legacy system. In a statement issued on Wednesday, the Denmark-based shipping, cargo, and logistics giant confirmed it immediately launched an investigation into the attack and the affected system was secured. "Our findings so far strongly suggest no sensitive data has been disclosed," the company said. READ MORE...
Aransomware attack discovered Monday at Vanderbilt University in Nashville, Tennessee appears to have compromised vast amounts of student and employee personal data, prompting the university to take several digital services intermittently offline as it continues responding to the incident. As of Tuesday morning, the university shared an update that select campus-wide systems and applications were safe to use again READ MORE...
Security researchers exploited flaws in Android apps to gain remote access to connected cars from two major automakers, allowing them to start engines, flash headlights, and sound horns. Shubham Shah, co-founder at Assetnote, and researcher Sam Curry worked together on the exploits earlier this year. By tinkering with the cars' Android apps, they devised exploit paths to issue remote commands to vehicles in Australia and the US. READ MORE...
The Git project has released security updates addressing six vulnerabilities that could allow attackers to execute code, write to unintended files or cause memory corruption when Git processes malicious repositories or other specially prepared input. A vulnerability tracked as CVE-2026-111760 stems from an integer truncation in Git's handling of its index. An extremely long file path can pass Git's safety checks under one name and then be written under a shorter one. READ MORE...
Citrix and Ivanti on Tuesday announced patches for 19 vulnerabilities in their products, including multiple critical- and high-severity flaws. Ivanti fixed 13 vulnerabilities across five products, including two critical-severity defects in Cloud Services Application (CSA) and Endpoint Manager (EPM). The CSA flaw is described as a missing authentication issue that could allow remote, unauthenticated attackers to "add and delete arbitrary trusted EPM Core certificate entries". READ MORE...
Intel and AMD have published more than 50 new security advisories that describe over 200 vulnerabilities affecting their products. Fixes are available for most of the flaws, but not all. Some AMD mitigations were released months or even years ago, others are still in the works, and Intel has discontinued one of the impacted products. Intel's 24 new advisories describe just over 100 vulnerabilities. Three of them are rated 'critical' and 20 are rated 'high severity'. READ MORE...
Changing your password should be part of recovering a compromised account. The developers of Remus Stealer are advertising a Gmail-reading feature they claim can survive that step and even session revocation. That is a serious claim. It is not, however, a demonstrated capability in the published investigation. Threat intelligence company Hudson Rock examined Remus's promotional material and questioned both its developer and a self-described customer. READ MORE...
On a compromised Exchange server, the most interesting activity is not always the message that arrives in a user's inbox. Somewhere in a national government office, an official sends an email to a colleague at a transnational military alliance. The message goes out through a Microsoft Exchange server, exactly as it should, and nothing looks suspicious. But before the email leaves the building, a piece of code quietly examines it and sets aside a copy to be forwarded to prying eyes. READ MORE...
Microsoft researchers have demonstrated how small changes to an AI model can implant a hidden backdoor, causing an agent to execute an attacker's command when a specific trigger appears. The technique, called Lazarus, requires no model retraining and allows the agent to behave normally during standard safety evaluations. The company has not observed threat actors weaponizing the technique, but says the research highlights a security concern for organizations. READ MORE...
Claude Code is leaking sensitive information on public GitHub instances thanks to a partial oversight in the way its settings files are handled. That's the finding of AI security researchers at Apiiro, who discovered thousands of secrets, including database passwords, API tokens, and root logins, amid Claude Code settings files embedded in GitHub repositories. The leak stems from the way Claude Code handles user approval for automated shell commands. READ MORE...