> TODAY'S SUMMARY (21 articles)
Today's cyber news highlights several significant threats and trends. Microsoft 365 is experiencing a widespread outage affecting services like Outlook and Teams, causing operational disruptions. In vulnerability news, the PHP2Shell exploit was leveraged in attacks against Check Point Gateways, while a new zero-day vulnerability in N-central named 4EverAble2Shell was exploited shortly after its proof of concept was published. Additionally, North Korean hackers have reportedly stole over $400 million in cryptocurrency through sophisticated social engineering tactics involving fake video calls. The FBI has seized $1.2 billion in cryptocurrency linked to these North Korean operations. On the patching front, Ubuntu has released updates to address various vulnerabilities, including server impersonation and server-side request forgery.
|
// AI-powered summary generated at 08:00
La société de gestion des avantages sociaux Paylogix a été victime d'une cyberattaque. Des pirates informatiques ont volé des informations sensibles, y compris des numéros de sécurité sociale, des données financières, des informations de santé et des numéros de passeport, appartenant à des dizaines...
It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.
The post Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’ appeared first on SecurityWeek.
A worldwide Microsoft 365 outage is having a severe impact on companies that rely on services like Outlook, Sharepoint, and Teams.
Authorities arrested 354 suspects in a joint international operation targeting vendors and buyers on the Archetyp, Nemesis, Tor2Door, Bohemia, and Kingdom dark web marketplaces. [...]
Consolidating detection data is only the first step. In Part 3 of our Detection-as-Code series, we explain how we validate schemas and shared fields, resolve inconsistencies, and integrate checks into GitHub CI pipelines. Tiered validation blocks invalid changes while allowing teams to fix non-urgen...
An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then a previously reported local privilege escalation flaw in Gaia OSÂ to deploy a backdoor called TSGA.
The activity, detailed by Check Point,...
Here's what we know about the Microsoft 365 outage that took down Outlook and other services, and what to watch for as it comes back online.
PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.
The post PHP2Shell Exploited in Destructive Check Point Gateway Attacks appeared first on SecurityWeek.
ISO working group faces a fight over runtime checks, complexity, and the language's release timetable
Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.
The post Hackers Exploit New N-central Zero-Day Hours After PoC Publication appeared first on SecurityWeek.
North Korean state hackers have stolen more than $400 million in cryptocurrency over the past 18 months by pulling targets into fake Zoom and Teams calls filled with webcam footage of earlier victims. The FBI calls the scheme FaceStealer. It has seized more than 900 of those recordings, and on Novem...
Depuis jeudi soir, une panne mondiale de Microsoft 365 perturbe Outlook, Teams et Copilot. Le service n'est pas rétabli en ce vendredi 13 novembre 2026.
Le post Panne mondiale de Microsoft 365 : Outlook, Teams et Copilot perturbés depuis plus de 11 heures a été publié sur IT-Connect.
Attackers used a fake Microsoft Teams meeting scheduler to trick an employee at a construction company into approving a device code sign-in. They got a valid session token before Huntress’s security operations center identified the incident. Device code phishing abuses a real Microsoft sign-in flow....
Material Security followed suspected North Korean fake IT workers through the hiring pipelines of organizations it monitors and counted 27 personas that reached onboarding over one year. At one company where a persona got that far in the past month, about 277,000 files containing Social Security num...
SignDrop, nouvelle zero-day publiée par Nightmare Eclipse, détourne l'authentification CLFS de Windows pour obtenir les droits SYSTEM. Voici ce que l'on sait.
Le post SignDrop : cette faille zero-day détourne la protection CLFS de Windows pour obtenir les droits SYSTEM a été publié sur IT-Connect.
N-able on Thursday said it's taking additional precautions in the wake of public disclosure of a new set of flaws tracked as 4EverAble2Shell and Agent2Shell.
"We are restricting certain N-central features and integrations," the company said in a Thursday update. "These measures may affect some func...
In November 2026, Europol and international law enforcement partners dismantled infrastructure supporting several malware operations. Among them was CastleRAT, a remote access trojan (RAT) that enabled criminals to remotely control infected computers. Europol provided HIBP with 180k email addresses...
An MCP server configured to run one fixed release on an administrator’s workstation ran with 15 different sets of dependencies over five weeks, with its configuration untouched. James Lagermann, Director of Technical Alliances at Corelight, found the drift in his company’s lab. Twenty-three of the s...
94% of surveyed enterprises experienced at least one digital sovereignty challenge in the past three years, according to IBM’s Digital Sovereignty Index. Of those affected, 91% were required to demonstrate that they retained control during their most challenging event, and 81% had to provide formal...