TSMC Confirms Employee Data Leak Traced to Third-Party Cloud Vendor
November 13, 2026
TSMC confirmed some current and former employee data appeared online without authorization via a cloud provider, and found no breach
Data Security
TSMC Confirms Employee Data Leak Traced to Third-Party Cloud Vendor
TSMC confirmed some current and former employee data appeared online without authorization via a cloud provider, and found no breach of its own systems.
Apify Rotates API Tokens and Urges 2FA Resets After Breach
Apify rotated API tokens and proxy passwords and reset all sessions after an intruder reached internal systems on November 9 and 10, with 2FA exposure ...
PostgreSQL Fixes 52 Vulnerabilities and Ends Support for Version 14
PostgreSQL releases 18.7, 17.12, 16.16, 15.20 and 14.25 fix 52 security flaws, the largest batch on record, and 14.25 is the final version 14 release.
School Bomb-Threat Emails Trace to Addresses in Stolen Credential Data
Bomb-threat emails hit about 6,000 Italian schools and hundreds in Northern Ireland; Hudson Rock found two linked sender addresses in infostealer data.
Maersk Confirms Data Theft as WhiteArmor Demands $5 Million
Maersk confirmed unauthorized access to a legacy system from an acquisition, while the WhiteArmor ransomware group claims 100 GB of stolen logistics data.
wfx-loot Campaign Used 4,837 Hijacked GitHub Accounts for CI Stealer
Aikido Security says the wfx-loot campaign used 4,837 stolen GitHub accounts to plant a CI secret stealer that ran in at least 1,806 repositories so ...
Critical MongoDB Flaw CVE-2026-118383 Crashes Replica Set Members
Datadog Security Labs details CVE-2026-118383, a CVSS 4.0 9.5 MongoDB use-after-free that lets unauthenticated attackers crash replica set members remotely.
AntiFox AI Pentest Platform Abused to Steal AWS Production Secrets
Arctic Wolf Labs links the AntiFox agentic pentest platform to attacks on IIS web apps and AWS environments that exposed production secrets and deleted S3 ...
Over 35,000 Grok-Built Apps Found Open Online, Some Leaking Data
Claroc found 37,571 Grok-built apps online, 35,578 open without sign-in, some leaking staff and customer data from X, SpaceXSI and 30 other organizations.
SGLang RCE Flaw Exploited to Breach NEAR AI, 18 Agents Exposed
An attacker used a remote code execution flaw in the SGLang inference engine to breach NEAR AI, exposing 18 AI agents and about 100 Private ...
Apify Rotates API Tokens and Urges 2FA Resets After Breach
November 13, 2026
Apify rotated API tokens and proxy passwords and reset all sessions after an intruder reached internal systems on November 9
PostgreSQL Fixes 52 Vulnerabilities and Ends Support for Version 14
November 13, 2026
PostgreSQL releases 18.7, 17.12, 16.16, 15.20 and 14.25 fix 52 security flaws, the largest batch on record, and 14.25 is
School Bomb-Threat Emails Trace to Addresses in Stolen Credential Data
November 13, 2026
Bomb-threat emails hit about 6,000 Italian schools and hundreds in Northern Ireland; Hudson Rock found two linked sender addresses in
Maersk Confirms Data Theft as WhiteArmor Demands $5 Million
November 12, 2026
Maersk confirmed unauthorized access to a legacy system from an acquisition, while the WhiteArmor ransomware group claims 100 GB of
wfx-loot Campaign Used 4,837 Hijacked GitHub Accounts for CI Stealer
November 12, 2026
Aikido Security says the wfx-loot campaign used 4,837 stolen GitHub accounts to plant a CI secret stealer that ran in
Critical MongoDB Flaw CVE-2026-118383 Crashes Replica Set Members
November 12, 2026
Datadog Security Labs details CVE-2026-118383, a CVSS 4.0 9.5 MongoDB use-after-free that lets unauthenticated attackers crash replica set members remotely.
AntiFox AI Pentest Platform Abused to Steal AWS Production Secrets
November 12, 2026
Arctic Wolf Labs links the AntiFox agentic pentest platform to attacks on IIS web apps and AWS environments that exposed
Over 35,000 Grok-Built Apps Found Open Online, Some Leaking Data
November 12, 2026
Claroc found 37,571 Grok-built apps online, 35,578 open without sign-in, some leaking staff and customer data from X, SpaceXSI and
SGLang RCE Flaw Exploited to Breach NEAR AI, 18 Agents Exposed
November 11, 2026
An attacker used a remote code execution flaw in the SGLang inference engine to breach NEAR AI, exposing 18 AI
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.