Cyber Threat Intel Daily Briefing — 2026-11-09

CYBER THREAT INTEL

DAILY BRIEFING · 2026-11-09 12:15 UTC · REPORT BRIEF-20261109-121531

OPEN // LE

01

AI doesn’t have to go rogue to break the world

AI systems are learning to exploit loopholes in everything from software to tax law. The biggest threat may not be malicious intent, but machines doing exactly what we ask. The post AI doesn’t have to go rogue to break the world appeared first on CyberScoop.

SRC: CyberScoop Mon, 09 Nov 2026 11:00:00 +0000 https://cyberscoop.com/ai-hacking-risks-loopholes-bruce-schneier-defcon-keynote-op-ed/

02

Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety

Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used a security flaw at that company to reach the wallets, both companies said late last week

SRC: The Hacker News Mon, 09 Nov 2026 16:26:25 +0530 https://thehackernews.com/2026/11/web3auth-flaw-exploited-to-steal-keplr.html

03

LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks

Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said yesterday. It has several security fixes to release and asked operators to be careful until they are out. One operator said new accounts us

SRC: The Hacker News Mon, 09 Nov 2026 15:31:21 +0530 https://thehackernews.com/2026/11/lnbits-urges-all-operators-to-shut-down.html

04

Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records

A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis's Threat Research Unit said last week. The agents also found a Taipei fire department platform exposing patient data from 2018, including ECG readings and ambulance video foot

SRC: The Hacker News Mon, 09 Nov 2026 14:31:50 +0530 https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html

05

Fake GitHub Security Tools Infect Over 2,000 PCs With Malware

Fake GitHub security tools are spreading malware that disables defenses, steals sensitive data and infects over 2,000 PCs. Cybersecurity firm Doctor Web has found malware hidden in GitHub projects that look like security tools. The campaign targets blockchain game fans and, more recently, informatio

SRC: Security Affairs Mon, 09 Nov 2026 08:07:39 +0000 https://securityaffairs.com/202717/malware/fake-github-security-tools-infect-over-2000-pcs-with-malware.html

06

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 122

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia   Shutting the Door on the XCPE Botnet   DarkBlinders: Inside

SRC: Security Affairs Sun, 08 Nov 2026 14:24:29 +0000 https://securityaffairs.com/202657/malware/security-affairs-malware-newsletter-round-122.html

07

Amplifon Americas Data Breach Impacts 1.3 Million

Hackers stole personal, health, and insurance information, including Social Security numbers, from the company’s internal systems. The post Amplifon Americas Data Breach Impacts 1.3 Million appeared first on SecurityWeek.

SRC: SecurityWeek Mon, 09 Nov 2026 11:20:09 +0000 https://www.securityweek.com/amplifon-americas-data-breach-impacts-1-3-million/

08

Over 3 Million People Hit by Frontline Education Data Breach

Frontline Education told Indiana regulators that its August data breach affected over 3 million school district staff and students. The post Over 3 Million People Hit by Frontline Education Data Breach appeared first on SecurityWeek.

SRC: SecurityWeek Mon, 09 Nov 2026 10:09:02 +0000 https://www.securityweek.com/3-million-people-hit-by-frontline-education-data-breach/

09

Don’t Hand Propaganda a Gift: Reading the Brenner Base Tunnel SE Breach Calmly

Brenner Base Tunnel SE confirms a breach and Everest claims 812 GB. What we know, what we don’t, and why overblown alarm helps propaganda more than the attackers. Brenner Base Tunnel (BBT) SE, the company building the Brenner Base Tunnel between Italy and Austria, has confirmed that unauthorized peo

SRC: Security Affairs Sun, 08 Nov 2026 17:46:16 +0000 https://securityaffairs.com/202691/cyber-crime/dont-hand-propaganda-a-gift-reading-the-brenner-base-tunnel-se-breach-calmly.html

10

Iris Ohyama data cloud breach exposes info of 7.7 million customers

Japanese manufacturer Iris Ohyama, the operator of the Iris Plaza shopping platform, disclosed that personal information belonging to about 7.7 million people may have been exposed after unauthorized access to a third-party cloud service the company used. […]

SRC: BleepingComputer Sun, 08 Nov 2026 10:43:08 -0500 https://www.bleepingcomputer.com/news/security/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers/

11

Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars

The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock the doors and start the engine. Both apps signed customers in through ForgeRock, an iden

SRC: The Hacker News Mon, 09 Nov 2026 16:57:53 +0530 https://thehackernews.com/2026/11/default-adminadmin-server-password.html

12

Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack

Working with cryptographers, DeepMind’s AI agents cut the cost of forging RSA-1024 signatures and found a cheaper way to factor keys. The post Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack appeared first on SecurityWeek.

SRC: SecurityWeek Mon, 09 Nov 2026 08:35:50 +0000 https://www.securityweek.com/google-deepminds-ai-agents-make-1024-bit-rsa-keys-cheaper-to-attack/

13

Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting Room

The OpenAI engineer who was arrested and charged last month for planting a covert audio recording device in the company's office has pleaded not guilty. According to reports from Bloomberg and CNBC, Saudi national Abdulrahman Alfozan made an appearance in San Francisco federal court on Friday, wher

SRC: The Hacker News Mon, 09 Nov 2026 12:35:48 +0530 https://thehackernews.com/2026/11/former-openai-engineer-pleads-not.html

14

The BBC has a plan for a Black Sky event, and it runs on FM radio

The BBC plans to use emergency FM radio to keep the UK informed during prolonged blackouts, with a self-sufficient studio ready for 72 hours. If electricity fails across the UK for days, the BBC says it has a plan to keep people informed. David Sillito, the BBC’s media and arts correspondent, explai

SRC: Security Affairs Mon, 09 Nov 2026 07:04:52 +0000 https://securityaffairs.com/202667/cyber-warfare-2/the-bbc-has-a-plan-for-a-black-sky-event-and-it-runs-on-fm-radio.html

[ SOURCE ] OpenPhish (18 indicator(s))