A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Extortion Group Claims Theft of Nearly One Billion Expedia Traveler Records U.S. CISA adds Check Point and […

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.

Extortion Group Claims Theft of Nearly One Billion Expedia Traveler Records

U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog

North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure

Gootloader Malware Disrupted After Infecting 25,000 Computers

Unpatched Check Point Gateways Are Being Wiped exploiting PHP2Shell

New SignDrop Exploit Can Abuse Windows Defender to Bypass Security Protections

The School Bomb Threats Came From Accounts Already in Stolen Data

Microsoft Cloud Outage Hits Outlook, Teams, Copilot and AI Services

Predator, Pegasus and Graphite: Governments Accused of Spyware Abuse Face Little Accountability

Zoom Fixes Critical Windows Vulnerability Allowing Privilege Escalation

Poland takes its national e-government platform offline after a cyberattack

AI Pentest Tool AntiFox Abused To Steal AWS Credentials

WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data

Hackers Advertise a $1,000 Gmail Tool That Allegedly Survives Password Resets

Microsoft November Patch Tuesday: one exploited Outlook bug and 30 wormable flaws

U.S. CISA adds IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack flaws to its Known Exploited Vulnerabilities catalog

Russia-Linked APT Turla Turned Exchange Servers Into Their Own Control Room

iOS Sandbox Escape Is Public, and Apple Hasn’t Confirmed a Fix

Google fixes the eighth actively exploited Chrome zero-day of 2026

Iris Ohyama data breach may expose personal information of 7.7 million people

France Blames Iran for the Supermarket Fridge Attacks

QNAP Warns Users as Plex2Shell Flaws Are Used to Hack NAS Devices

CISA and the FBI Warn Of Attacks against Industrial Refrigeration Controllers

Fake GitHub Security Tools Infect Over 2,000 PCs With Malware

The BBC has a plan for a Black Sky event, and it runs on FM radio

Don’t Hand Propaganda a Gift: Reading the Brenner Base Tunnel SE Breach Calmly

Attackers Exploit Third-Party Provider to Raid French Bank Crédit Mutuel Arkéa

International Press – Newsletter

Cybercrime

Maersk Probes Ransomware Claim Tied to Legacy System  

Idaho Man Sentenced to 18 Years in Prison for Attempting to Provide Material Support to ISIS in Plot to Attack Churches

2026-11-10: Antifox Agentic Pentesting Platform Used to Steal AWS Credentials and Move Laterally in Compromised Environments  

School Bomb Threats: Hudson Rock Finds Reported Sender Accounts in Infostealer Data

Gootloader Malware Disrupted in International Cyber Operation

Justice Department Announces Actions to Disrupt North Korea’s Massive Theft of Cryptocurrency

North Korean Hackers Use Secretly Recorded Webcam Library of 900+ Tech Workers in $400M “FaceStealer” Crypto Theft Scheme 

Russian Cyberattackers Hit Expedia—Claiming Nearly A Billion Traveler Records Exposed     

2013 breach at Russian cybercrime forum resurfaces with millions of victims’ credentials

Cyberattack: Maileva, a subsidiary of the La Poste group, announces a data breach affecting 22 million people  

*** Ledger’s Response to the Hardware Implant Attack 

Malware

Inside an AhsayCBS Intrusion: Hidden Webshells, a CryptoMiner, and a C2 Implant

Remus Stealer Markets Persistent Gmail Access: Hudson Rock Investigates  

ScreenConnect Attack: SCKit Turns Remote Support Into an Attack Platform  

wfx: GitHub Actions Credential Stealer Hits 8,000 Repos

When Everything Becomes Open-Source   

Hacking

QNAP says hackers breaching NAS devices in Plex2Shell attacks    

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

SignDrop Windows Common Log FileSystem Authentication 0day Local Privilege Escalation Vulnerability

Digging into HTML to find more elements and event handlers for XSS attacks 

Mior: Breaking AMD SEV-SNP with Device-as-Memory  

PHP2Shell Exploitation on Check Point Gateway

Trusted by Default: Qubole Cross-Account Access Abused in the Wild  

Cursor An update on our recent security incident

Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2

Intelligence and Information Warfare  

What happens if all the lights go out? This is the plan for a ‘Black Sky’ event 

Operation Snowball: Inside an Autonomous AI Intrusion Campaign  

Nvidia’s Jensen Huang admits to affair after allegations of relationship with Chinese spy  

BOSSAI: Inside the AI attack mesh that targeted Taiwan’s emergency services   

Destabilization and sabotage campaigns carried out against French interests by the Islamic Republic of Iran  

G7 attention turns to Ukraine while US-mediated talks get underway in Abu Dhabi  

Exchange for breakfast: Turla’s Cereal tricks are not for kids

Not All That Glitters Is Gold: Tracking CopperDragon’s Sparrow Framework Around the Globe

Spied on by governments with Israeli spyware: in Europe, no one pays the price  

German parliament passes law giving spy agencies hacking, sabotage powers 

North Korea is minting meme coins to launder the Binance hack 

School bomb threats: What stolen credentials and Telegram reveal  

The Enemy Within. Tracking LIMINAL PANDA and SilentAir through Mobile Networks  

Cybersecurity

US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems  

Cyber incidents in Japan  

France accuses Iran’s Guards of cyberattacks on supermarket fridges 

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

Palantir exec nominated to lead CISA; lame-duck Senate vote is uncertain

The November 2026 Security Update Review  

Microsoft 365, Outlook down for thousands of US users, Downdetector shows 

Docaposte confirms the theft of addresses belonging to 22 million French people following a cyberattack at this subsidiary of La Poste  

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

Source: SecurityAffairs
Source Link: https://securityaffairs.com/203140/breaking-news/security-affairs-newsletter-round-604-by-pierluigi-paganini-international-edition.html