Cyber Threat Intel Daily Briefing — 2026-11-10

CYBER THREAT INTEL

DAILY BRIEFING · 2026-11-10 12:15 UTC · REPORT BRIEF-20261110-121557

OPEN // LE

01

Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities

An iMessage flaw could let a remote attacker join a group chat and receive its messages, Apple said yesterday, and it released updates to fix it. The updates also fix a separate iMessage flaw that could let someone added to a group access messages sent before they joined. As of today, other updates

SRC: The Hacker News Tue, 10 Nov 2026 15:46:51 +0530 https://thehackernews.com/2026/11/apple-patches-imessage-group-chat.html

02

Hackers now exploit critical Barracuda ESG flaws to gain root access

Cybersecurity company Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway (ESG) vulnerabilities that let them run commands with root privileges. […]

SRC: BleepingComputer Tue, 10 Nov 2026 05:10:20 -0500 https://www.bleepingcomputer.com/news/security/hackers-exploit-barracuda-email-security-gateway-flaws-to-get-root-access/

03

Google fixes the eighth actively exploited Chrome zero-day of 2026

Google patched nine Chrome flaws, including a V8 vulnerability tracked as CVE-2026-125350, that attackers have been actively exploiting in the wild. Google has addressed multiple security vulnerabilities, one of which, tracked as CVE-2026-125350, has been actively exploited in the wild. The vulnerab

SRC: Security Affairs Tue, 10 Nov 2026 10:05:00 +0000 https://securityaffairs.com/202772/breaking-news/google-fixes-the-eighth-actively-exploited-chrome-zero-day-of-2026.html

04

SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution

Four flaws that attackers could exploit without logging in were fixed today as part of SAP's monthly Security Patch Day—the vendor rates all four 10.0, the maximum CVSS score. Three are in the SAP NetWeaver application server, the software SAP systems run on, and one is in the Web Dispatcher, which

SRC: The Hacker News Tue, 10 Nov 2026 15:32:40 +0530 https://thehackernews.com/2026/11/sap-patches-four-cvss-100-flaws.html

05

Vanderbilt University hit in BYOD ransomware attack, data theft claimed

Vanderbilt University warns it is responding to a cyberattack claimed by the BYOD ransomware gang, which claims to have encrypted the university's databases and stolen sensitive student, employee, and research data. […]

SRC: BleepingComputer Mon, 09 Nov 2026 18:52:12 -0500 https://www.bleepingcomputer.com/news/security/vanderbilt-university-hit-in-byod-ransomware-attack-data-theft-claimed/

06

Spyware attacks trend toward hitting just about anyone

iVerify’s report Tuesday adds to evidence of spyware’s increasingly indiscriminate targeting. The post Spyware attacks trend toward hitting just about anyone appeared first on CyberScoop.

SRC: CyberScoop Tue, 10 Nov 2026 11:00:00 +0000 https://cyberscoop.com/spyware-attacks-trend-everyday-people-iverify-report/

07

Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers

The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that's used to break into victims' Microsoft Exchange servers with an aim to surreptitiously collect emails. According to an ESET report shared with

SRC: The Hacker News Tue, 10 Nov 2026 15:37:29 +0530 https://thehackernews.com/2026/11/russian-turla-hackers-use-new-cereal.html

08

Turla hackers use new Cereal malware to spy on govt Exchange servers

The Russian state-backed threat group Turla has been using a new malicious toolset called 'Cereal' to intercept emails on Microsoft Exchange servers at government organizations. […]

SRC: BleepingComputer Tue, 10 Nov 2026 05:04:32 -0500 https://www.bleepingcomputer.com/news/security/turla-hackers-use-new-ceral-malware-to-spy-on-govt-exchange-servers/

09

Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments

Nicknamed “Turla’s Cereal,” the tools target Microsoft Exchange servers and lack many obvious indicators of compromise or malicious telemetry, per a new ESET report. The post Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments appeared first on CyberS

SRC: CyberScoop Tue, 10 Nov 2026 10:00:00 +0000 https://cyberscoop.com/russian-turla-group-used-new-toolset-to-silently-pilfer-emails-from-kazakhstan-romanian-governments/

10

Fireworks AI discloses new breach after cloud provider hack

AI infrastructure startup Fireworks has disclosed a new security breach in which attackers accessed its development machines after breaching a third-party cloud provider. […]

SRC: BleepingComputer Tue, 10 Nov 2026 02:49:58 -0500 https://www.bleepingcomputer.com/news/security/fireworks-ai-discloses-new-breach-after-cloud-provider-hack/

11

Iris Ohyama data breach may expose personal information of 7.7 million people

Iris Ohyama warns that a cloud data breach may have exposed personal information of 7.7 million customers, including names and passwords. Japanese household goods manufacturer Iris Ohyama has disclosed that attackers may have accessed personal information belonging to approximately 7.7 million peopl

SRC: Security Affairs Tue, 10 Nov 2026 06:28:06 +0000 https://securityaffairs.com/202740/data-breach/iris-ohyama-data-breach-may-expose-personal-information-of-7-7-million-people.html

12

Hotel giant Wyndham exposed customer data after app security lapse

Exclusive: Wyndham left a hardcoded credential in its customer app, allowing anyone to access customer data. The hotel giant wouldn't say if it has the ability to check for any past unauthorized access.

SRC: TechCrunch Security Mon, 09 Nov 2026 23:03:46 +0000 https://techcrunch.com/2026/11/09/hotel-giant-wyndham-exposed-customer-data-after-app-security-lapse/

13

SEGA newsletter data breach exposes 2.2 million email addresses

Japanese gaming giant SEGA has disclosed that a data breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2.2 million newsletter subscribers. […]

SRC: BleepingComputer Mon, 09 Nov 2026 17:09:33 -0500 https://www.bleepingcomputer.com/news/security/sega-newsletter-data-breach-exposes-22-million-email-addresses/

14

Beyond the Alert: The Case for Rich Network Data

At some point your security will fail. This isn’t pessimism. It’s not because your team and tools aren’t sophisticated enough. It’s the reason we have detections in the first place. And, it’s why once we accept that prevention has its limits, we arrive at an interdiction strategy: finding and disrup

SRC: The Hacker News Tue, 10 Nov 2026 17:08:13 +0530 https://thehackernews.com/2026/11/beyond-alert-case-for-rich-network-data.html

15

Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark

Anthropic on Monday released Claude Fable 5.2 and Claude Mythos 5.2 models, which it said exhibit improvements in coding, reasoning, and vision. During pre-release training, the large language models (LLMs) helped its engineers "complete otherwise-infeasible software migrations, designed three work

SRC: The Hacker News Tue, 10 Nov 2026 13:46:14 +0530 https://thehackernews.com/2026/11/anthropics-claude-fable-52-beats-gpt-6.html

16

Trump picks Palantir’s LoSapio to head CISA

The Cybersecurity and Infrastructure Security Agency has gone without a Senate-confirmed director for all of Trump’s second term, and Michael LoSapio could face resistance, too. The post Trump picks Palantir’s LoSapio to head CISA appeared first on CyberScoop.

SRC: CyberScoop Tue, 10 Nov 2026 03:38:11 +0000 https://cyberscoop.com/trump-picks-palantirs-losapio-to-head-cisa/

17

Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India

Inaugural edition by Informa Markets in India brings together leading researchers, security practitioners and industry decision makers for four days of cutting-edge research, technical exchange and strategic dialogue.

SRC: DarkReading Mon, 09 Nov 2026 20:19:56 GMT https://www.darkreading.com/cybersecurity-operations/black-hat-india-2026-landmark-debut

[ SOURCE ] OpenPhish (18 indicator(s))