HTTP2Shell sparks emergency patches
https://www.bleepingcomputer.com/news/security/critical-http2shell-brotli-vulnerability-triggers-emergency-patches/
PHP2Shell: patch, then investigate
https://www.securitymagazine.com/articles/102693-php2shell-exploited-in-the-wild
GitHub worm hides in oversized files
https://www.theregister.com/security/2026/10/26/worm-armed-42-github-repos-by-hiding-a-payload-too-big-to-fail/5305570
Cathedral gets inside Anthropic
https://www.washingtonpost.com/technology/2026/10/26/researchers-cybersecurity-start-up-cathedral-got-inside-anthropic/?pwapi_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJyZWFzb24iOiJnaWZ0IiwibmJmIjoxNzkyOTg3MjAwLCJpc3MiOiJzdWJzY3JpcHRpb25zIiwiZXhwIjoxNzk0MzczMTk5LCJpYXQiOjE3OTI5ODcyMDAsImp0aSI6ImI1M2RjZmEzLThkNTItNGE3NC05ZjI4LWU1ZGJkZTIyZDFmOSIsInVybCI6Imh0dHBzOi8vd3d3Lndhc2hpbmd0b25wb3N0LmNvbS90ZWNobm9sb2d5LzIwMjYvMTAvMjYvcmVzZWFyY2hlcnMtY3liZXJzZWN1cml0eS1zdGFydC11cC1jYXRoZWRyYWwtZ290LWluc2lkZS1hbnRocm9waWMvIn0.k3b70wv6ePisrPvCYfDOPAjt5vHweVxm4rBnhcnDU-M
Ukraine's satellite service returns
https://therecord.media/ukraine-disputes-musk-claims-of-starlink-misuse
Gheist raids GitHub secrets
https://www.darkreading.com/cyberattacks-data-breaches/gheist-stolen-github-tokens-cloud-secrets
Fake Teams support delivers ransomware
https://thehackernews.com/2026/10/attackers-use-microsoft-teams-it.html
Scam laundering suspect extradited
https://therecord.media/dutch-police-extradite-chinese-national-money-laundering-scams
Get the show notes here:
https://cisoseries.com/cybersecurity-news-october-27-2026/
Huge thanks to our sponsor, Guardsquare
Your backend is only as secure as your frontend. Research shows that client-side compromise is now a primary driver of API risk. With sixty-three percent of leaders detecting mobile app tampering or cloning last year, don't leave your mobile app security to chance. Get multilayered protection for your entire mobile app ecosystem from the outside in. Learn more at Gu...
Global Microsoft outage affects users worldwide
https://www.bleepingcomputer.com/news/microsoft/massive-microsoft-365-outage-disrupts-outlook-teams-copilot-worldwide/
Old Exchange runs out of reprieves
https://www.theregister.com/saas/2026/11/12/microsoft-exchange-server-2016-and-2019-enter-their-permanently-vulnerable-era/5309401
Bomb hoaxers hide behind hijacked inboxes
https://therecord.media/europe-hoax-email-threats
Operation Endgame pulls more malware plugs
https://www.bleepingcomputer.com/news/security/police-dismantles-gootloader-castlerat-stealc-malware-infrastructure/
SilentAir taps Taiwan's calls and texts
https://www.infosecurity-magazine.com/news/silentair-liminal-panda-telco/
Section 702 shortcut resistance
https://cyberscoop.com/section-702-reauthorization-ndaa-debate/
App data puts police on your trail
https://www.schneier.com/blog/archives/2026/11/another-way-police-are-locating-people-from-their-smartphones.html
BrickLink's outage still won't click
https://www.theregister.com/security/2026/11/12/lego-marketplace-bricklink-in-pieces-after-unusual-activity-takes-it-offline-for-almost-a-week/5309425
Get the show notes here: https://cisoseries.com/cybersecurity-news-november-13-2026/
Huge thanks to our episode sponsor, Vanta
Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.
Maersk gets a $5M ransom note
https://www.bleepingcomputer.com/news/security/maersk-confirms-data-breach-as-whitearmor-ransomware-demands-5-million/
CopperDragon's malware connections
https://www.infosecurity-magazine.com/news/chinese-malware-tied-three-hacking/
United grounds AI booking bots
https://www.wsj.com/tech/ai/united-airlines-is-banning-ai-bots-from-booking-flights-5b514b38
Qilin's alleged boss gets a name
https://krebsonsecurity.com/2026/11/who-runs-the-ransomware-group-qilin/
Zoom plugs two Windows holes
https://thehackernews.com/2026/11/critical-zoom-workplace-flaw-could.html
Iran-backed arson on FaceTime?
https://therecord.media/iran-backed-network-directed-london-attacks-over-facetime
N-able patches its way back
https://www.infosecurity-magazine.com/news/n-able-n-central-able2shell-0day/
AntiFox linked to AWS raids
https://thehackernews.com/2026/11/antifox-ai-pentesting-platform-linked.html
Get the show notes here: https://cisoseries.com/cybersecurity-news-november-12-2026/
Huge thanks to our episode sponsor, Vanta
Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.
Australia to create AI safety regulator
https://apnews.com/article/australia-artificial-intelligence-regulator-openai-agent-breach-a5dfe5379c0f7458e44b72a9073833c6
Zero-day drop forces N-able offline
https://www.securityweek.com/n-able-takes-n-central-offline-as-researcher-drops-over-30-zero-days/
White House nominates new CISA head
https://www.reuters.com/world/white-house-nominates-palantirs-losapio-lead-homeland-securitys-cyber-agency-2026-11-09/
https://www.infosecurity-magazine.com/news/cisa-incident-reporting-form-circia/
DeepMind formally proves Signal's cryptography
https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol/
Vanderbilt recovering from ransomware attack
https://cyberscoop.com/vanderbilt-university-ransomware-attack-byod/
AWS environments impacted by third-party breach
https://www.bleepingcomputer.com/news/security/hackers-exploit-trusted-aws-access-to-breach-multiple-cloud-environments/
Cereal steals NATO messages
https://therecord.media/russia-hackers-espionage-romania-kazakhstan
Patch news
https://www.bleepingcomputer.com/news/security/sap-patches-four-maximum-severity-security-vulnerabilities/
https://www.bleepingcomputer.com/news/security/hackers-exploit-barracuda-email-security-gateway-flaws-to-get-root-access/
https://www.securityweek.com/exploited-outlook-zero-day-among-1094-flaws-patched-by-microsoft/ '
Fireworks AI discloses second breach
https://www.bleepingcomputer.com/news/security/fireworks-ai-discloses-new-breach-after-cloud-provider-hack/
Get the show notes here: https://cisoseries.com/cybersecurity-news-new-cisa-head-ai-safety-regulator-n-ables-zero-day-deluge/
Huge thanks to our episode sponsor, Vanta
Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enter...
France turns up the heat on Iran over fridge hacks
https://www.reuters.com/world/french-officials-suspect-iran-is-behind-refrigerator-hacks-sources-say-2026-11-09/
Binance says breach claims don't add up
https://www.bleepingcomputer.com/news/security/binance-denies-data-breach-after-alleged-shinyhunters-claims/
Operation Snowball: AI keeps a telecom attack rolling
https://www.infosecurity-magazine.com/news/operation-snowball-ai-telecom/
Ukraine hangs up on crypto scammers
https://therecord.media/ukraine-arrests-scam-call-centers-germany
SSHole gives hackers a foot in Linux's door
https://www.bleepingcomputer.com/news/security/hackers-exploit-sshole-openssh-flaw-to-breach-linux-systems/
Researchers find the keys in carmakers' apps
https://www.theregister.com/security/2026/11/09/researchers-pwn-automakers-android-apps-to-remotely-unlock-cars-honk-horns/5308483
Bitter sets a new RAT loose in South Asia
https://thehackernews.com/2026/11/bitter-hackers-deploy-new-paprat.html
SEGA's mailing list spills 2.2 million addresses
https://www.bleepingcomputer.com/news/security/sega-newsletter-data-breach-exposes-22-million-email-addresses/
Get the show notes here: https://cisoseries.com/cybersecurity-news-november-10-2026/
Huge thanks to our episode sponsor, Vanta
Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.
SonicWall warns of new exploited SSL-VPN MFA bypass flaw
https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/
Escaped AI testing agent behind WorkOS breach
https://www.bleepingcomputer.com/news/security/runaway-ai-hacking-agent-behind-workos-breach-after-escaping-sandbox/
Bogotá investigates potential health agency hack following airport bomb hoax email
https://therecord.media/bogota-potential-city-health-agency-hack-european-hoax-emails
Medical services company issues settlement over 2023 hack of patient records
https://therecord.media/medical-services-company-settles-with-4-state-ags
Executive deepfake trio charged
https://cyberscoop.com/ai-deepfakes-impersonate-ceo-lawyer-defraud-companies/
Japan announces emergency cybersecurity package following attacks
https://www.securityweek.com/japan-announces-emergency-cybersecurity-package-following-a-wave-of-attacks/
NHS reveals emotional burdens of post-breach helplines
https://www.theregister.com/security/2026/11/07/nhs-breach-helpline-left-staff-carrying-a-significant-emotional-burden/5308201
Claude Code's "Don't Ask Again" file exposes passwords and keys on GitHub
https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html
Get the show notes here: https://cisoseries.com/cybersecurity-news-new-sonicwall-flaw-workos-accidental-ai-breach-bogota-bomb-hoax-email/
Huge thanks to our episode sponsor, Vanta
Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.
This podcast, its content and its artwork are not owned by, affiliated with, or endorsed by Castquire.
