Cyber
Cybersecurity news from CISA, NIST, the FBI, national CERTs and vendor security teams: exploited vulnerabilities, advisories, breaches, ransomware and enforcement.
Cairn Autonomous AI Framework Used in 25 Operations Against 19 Organizations
Unit 42 reported that attackers used the autonomous AI penetration testing framework Cairn, powered by Chinese models, to target semiconductor, defense, and civil society sectors.
Unit 42
Citrus Ransomware Leans on LLMs to Write Its Attack Scripts
Kaspersky says the group tunnels traffic through VLESS disguised as HTTPS and encrypts victims with a Sn00py ransomware Trojan.
Kaspersky
EFF and ACLU File Brief Seeking Warrant Requirement for ALPR Searches
EFF and the ACLU filed an amicus brief arguing that police tracking suspects via automated license plate readers requires a warrant.
EFF
6.4 Million Victim Datasets Secured in Malware Takedown
Europol said a global operation disrupted Gootloader, CastleRAT and StealC malware and secured 6.4 million victim datasets.
Europol
Vulnerability Watch, November 12, 2026: 8 critical CVEs and 51 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.
NIST
How to Configure Private DNS on Your Android Device
Learn how to turn Private DNS on or off or change its settings on Android using official instructions from Google.
Google
Outlook Flaw Exploited in the Wild Could Expose Credentials, Microsoft Says
JPCERT/CC says Microsoft has patched an Outlook spoofing flaw that Microsoft confirmed is exploited in the wild and could expose authentication credentials.
JPCERT/CC
TIER IV Develops Five Open-Source End-to-End Autonomous Driving AI Models
TIER IV released five end-to-end autonomous driving AI models to give developers flexible options for vehicle sensor configurations.
Company press releases (PR Newswire)
UK Critical Organisations Can Test Defences with New NCSC Simulation Scheme
The NCSC's Cyber Adversary Simulation scheme lets critical UK organisations assess and improve their ability to prevent, detect and respond to realistic cyber attacks.
NCSC (UK)
Microsoft November 2026 Patch Tuesday Fixes 1,252 Flaws
According to CrowdStrike, Microsoft's November 2026 Patch Tuesday addresses 1,252 vulnerabilities, featuring an active zero-day and 68 critical flaws.
CrowdStrike