Security Spotlight

Cybersecurity
DOJ Seizes $1.2B of North Korea’s Binance Haul, Disrupts FaceStealer
The DOJ obtained authority to seize over $1.2 billion of the roughly $6.3 billion stolen from Binance, while the FBI disrupted North Korea's FaceStealer scheme.
Cybersecurity
Researchers Unmask Qilin Ransomware Administrator ‘Haise’
KrebsOnSecurity, using Intel 471, Flashpoint and IntelHawk data, identifies Qilin administrator Haise as a 36-year-old St. Petersburg man; no charges announced.
CVE Vulnerability Alerts
Barracuda Flaws CVE-2026-116606 and CVE-2026-111560 Exploited
Barracuda confirms attackers are chaining CVE-2026-116606 and CVE-2026-111560 to gain root on its security appliances, and CISA added both to its KEV catalog.
CVE Vulnerability Alerts
Intel and AMD Patch Over 200 Vulnerabilities in November Updates
Intel fixed more than 100 flaws across 24 advisories, including a TDX Migration Trust Domain RCE, while AMD patched about 100 CVEs, none rated critical ...
CVE Vulnerability Alerts
Working Exploit Out for Windows Error Reporting Flaw CVE-2026-97798
A researcher released a working exploit for CVE-2026-97798, a Windows Error Reporting flaw that gives SYSTEM from a standard account, patched in October.
Cybersecurity
US and EU Agencies Warn Refrigeration Hacks Have Reached Blood Banks
FBI, CISA and EU agencies warn that attacks on refrigeration controllers have spread from European supermarkets to French blood service sites, advisories say.
CVE Vulnerability Alerts
Citrix Fixes CVSS 9.8 XenServer Flaw and Brotli Bug in Scout
Citrix patched a CVSS 9.8 XenServer race condition, CVE-2026-98432, plus pre-boot and Brotli decoder flaws. The company reports no attacks against customers.
CVE Vulnerability Alerts
ASUS Patches AiCloud Root Flaw CVE-2026-84730 in Four Alerts
ASUS issued four security advisories, including AiCloud router flaw CVE-2026-84730 that gives an adjacent attacker root shell access, plus two driver bugs.
CVE Vulnerability Alerts
Barracuda Flaws Chain Into Root Access on Email Security Gateway
Barracuda disclosed CVE-2026-116606 and CVE-2026-111560, two flaws that chain into root access on Email Security Gateway and other Barracuda appliances.
Cybersecurity
Refrigeration Attacks Hit Supermarkets in Six European Countries
A second wave of attacks on Danfoss refrigeration controls hit supermarkets in six European countries overnight, spoiling stock and raising set points to 55 C.