Cyber
Cybersecurity news from CISA, NIST, the FBI, national CERTs and vendor security teams: exploited vulnerabilities, advisories, breaches, ransomware and enforcement.
Europol Takedown Exposes 179,745 Accounts Linked to CastleRAT
Europol and international law enforcement dismantled CastleRAT malware infrastructure, adding 179,745 compromised accounts to Have I Been Pwned.
Have I Been Pwned
BlackNevas Ransomware Destroyed Virtualization Estate Without ESXi Flaws
Kaspersky researchers found that BlackNevas ransomware destroyed an organization's virtualization estate over ten days using legitimate vCenter features.
Kaspersky
The Privacy Week, November 13, 2026: How to Use Signal for Secure and Private Messaging
This week in privacy: 6 stories, led by How to Use Signal for Secure and Private Messaging.
TechUpscale
Check Point Multiple Products flaw CVE-2026-123039 is being actively exploited, CISA warns
CISA added the Check Point Multiple Products vulnerability to its Known Exploited Vulnerabilities catalog on November 13, 2026, with a federal remediation deadline of November 16, 2026.
CISA
Five States Join FTC Lawsuit Against Hims and Hers Over Privacy
Arizona, Florida, Nebraska, Ohio, and Wisconsin joined an FTC lawsuit alleging telehealth provider Hims shared sensitive health data and deceived users.
FTC
Vulnerability Watch, November 13, 2026: 17 critical CVEs and 75 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.
NIST
How to Build End-to-End Evaluations for AI Agents
Vercel explains how developers can build end-to-end evaluations to test whether AI agents complete software tasks correctly.
Vercel
Cairn Autonomous AI Framework Used in 25 Operations Against 19 Organizations
Unit 42 reported that attackers used the autonomous AI penetration testing framework Cairn, powered by Chinese models, to target semiconductor, defense, and civil society sectors.
Unit 42
Citrus Ransomware Leans on LLMs to Write Its Attack Scripts
Kaspersky says the group tunnels traffic through VLESS disguised as HTTPS and encrypts victims with a Sn00py ransomware Trojan.
Kaspersky
EFF and ACLU File Brief Seeking Warrant Requirement for ALPR Searches
EFF and the ACLU filed an amicus brief arguing that police tracking suspects via automated license plate readers requires a warrant.
EFF