Cyber Threat Intel Daily Briefing — 2026-11-14

CYBER THREAT INTEL

DAILY BRIEFING · 2026-11-14 12:15 UTC · REPORT BRIEF-20261114-121547

OPEN // LE

01

U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Check Point and UnrealIRCd vulnerabilities to its Known Exploited Vulnerabilities

SRC: Security Affairs Sat, 14 Nov 2026 09:08:00 +0000 https://securityaffairs.com/203040/hacking/u-s-cisa-adds-check-point-and-unrealircd-flaws-to-its-known-exploited-vulnerabilities-catalog.html

02

North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure

The DOJ seized over $1.2 billion from North Korea ‘s Binance theft, and says the same hackers are targeting open-source developers The U.S. Department of Justice announced two separate but connected actions against North Korea ‘s cryptocurrency theft operations. The press release covers the seizure

SRC: Security Affairs Fri, 13 Nov 2026 21:19:30 +0000 https://securityaffairs.com/203012/cyber-crime/north-korea-crypto-theft-operations-doj-seizes-1-2-billion-and-disrupts-hacker-infrastructure.html

03

Trezor confirms crypto-stealing implants in three wallets, releases fix

Cryptocurrency hardware wallet maker Trezor has confirmed that three Safe 5 devices sold by Southeast Asian reseller CryptoBilis contained malicious hardware implants designed to steal wallet recovery phrases and send them to attackers over cellular networks. […]

SRC: BleepingComputer Fri, 13 Nov 2026 14:38:36 -0500 https://www.bleepingcomputer.com/news/cryptocurrency/trezor-confirms-crypto-stealing-implants-in-three-wallets-releases-fix/

04

PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE

A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, along with 51 other security flaws. Full protection from this flaw also requires rebuilding any C-language extensions installed on the server. The flaw, tracked

SRC: The Hacker News Fri, 13 Nov 2026 22:23:08 +0530 https://thehackernews.com/2026/11/postgresql-patches-52-flaws-including.html

05

Researchers continue to find serious vulnerabilities in internet connected refrigerators

VulnCheck disclosed 14 vulnerabilities in Dixell refrigeration units that give an attacker root access, while online honeypots are being flooded with hacks and malicious probes. The post Researchers continue to find serious vulnerabilities in internet connected refrigerators appeared first on CyberS

SRC: CyberScoop Fri, 13 Nov 2026 21:20:51 +0000 https://cyberscoop.com/copeland-dixell-refrigeration-vulnerabilities/

06

ArcticRAT Cybercrime Gang Profiles Victim Finances With AI

The Android malware has expanded from focusing on crypto theft to full device control, and the attackers have added advanced analysis of stolen information.

SRC: DarkReading Fri, 13 Nov 2026 20:20:27 GMT https://www.darkreading.com/mobile-security/arcticrat-cybercrime-gang-profiles-victim-finances-ai

07

Industry guidelines for offensive cyber tools unveiled through international Pall Mall Process

The United States this week signed on to an international set of industry standards for commercial offensive cyber tools that human rights groups and other advocates wish had been stronger. The Pall Mall Process voluntary industry guidelines for commercial cyber intrusion capabilities (CCICs), such

SRC: CyberScoop Fri, 13 Nov 2026 20:56:20 +0000 https://cyberscoop.com/pall-mall-process-commercial-spyware-guidelines/

08

German military drone operations disrupted by cyberattack

German defense technology company Quantum Systems confirmed that it detected an incident in late October that was part of an active cyberattack by "hostile actors." […]

SRC: BleepingComputer Fri, 13 Nov 2026 12:31:56 -0500 https://www.bleepingcomputer.com/news/security/german-military-drone-operations-disrupted-by-cyberattack/

09

FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls

The U.S. Federal Bureau of Investigation (FBI) has established that threat actors tied to the Democratic People's Republic of Korea (DPRK aka North Korea) have stolen more than $400 million worth of cryptocurrency as part of a social engineering scheme codenamed FaceStealer in the last 18 months. A

SRC: The Hacker News Fri, 13 Nov 2026 19:58:58 +0530 https://thehackernews.com/2026/11/fbi-says-north-korean-hackers-stole.html

10

Attackers in Binance Breach Targeted Known Weakness, Missing Controls

Blockchain complexities, such as attacker-deployed sweepers, hobble security controls designed to limit the damage of an exchange compromise.

SRC: DarkReading Fri, 13 Nov 2026 13:00:00 GMT https://www.darkreading.com/cybersecurity-operations/attackers-binance-breach-targeted-weakness-missing-controls

11

In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach

Noteworthy stories that might have slipped under the radar: Siemens details security advisory policy, OpenAI Codex backdoor risk, Microsoft warns of model weight backdoors. The post In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach appeared first on SecurityWee

SRC: SecurityWeek Fri, 13 Nov 2026 15:20:00 +0000 https://www.securityweek.com/in-other-news-new-cisa-director-nominee-connected-car-hacking-baker-tilly-data-breach/

12

Uber confirms hackers stole thousands of drivers’ license information in data breach

The ridesharing giant said drivers' license information stored by AI cloud company Fireworks AI was stolen during a security incident.

SRC: TechCrunch Security Fri, 13 Nov 2026 14:57:55 +0000 https://techcrunch.com/2026/11/13/uber-confirms-hackers-stole-thousands-of-drivers-license-information-in-data-breach/

13

No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software Update

Officials say there is no evidence of a cyberattack behind the nationwide FAA outage, which may have been caused by a software update. The post No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software Update appeared first on SecurityWeek.

SRC: SecurityWeek Sat, 14 Nov 2026 08:40:22 +0000 https://www.securityweek.com/no-signs-of-hacking-in-faa-ground-stop-as-fbi-reportedly-probes-software-update/

14

Apple Reveals How Secure Exclaves Shield Camera and Microphone Data

The tech giant has detailed the architecture designed to isolate ambient sensor data from the main OS on HomeView and new iPhones. The post Apple Reveals How Secure Exclaves Shield Camera and Microphone Data appeared first on SecurityWeek.

SRC: SecurityWeek Sat, 14 Nov 2026 11:00:00 +0000 https://www.securityweek.com/apple-reveals-how-secure-exclaves-shield-camera-and-microphone-data/

15

US government grounds all flights across the United States ‘due to extraordinary circumstances’

A spokesperson for the FAA told TechCrunch that it issued the ground stop "following communication issues impacting multiple Air Route Traffic Control Centers," which manage the airspace across the United States.

SRC: TechCrunch Security Fri, 13 Nov 2026 21:44:38 +0000 https://techcrunch.com/2026/11/13/u-s-government-grounds-all-flights-across-the-united-states-due-to-extraordinary-cirumstances/

16

FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’

Federal officials have yet to say what caused the communications disruption or whether they are investigating a possible cyberattack. The post FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’ appeared first on SecurityWeek.

SRC: SecurityWeek Fri, 13 Nov 2026 21:33:27 +0000 https://www.securityweek.com/faa-ground-stop-issued-due-to-extraordinary-circumstances/

17

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper

Vulnerable Check Point Security Gateway instances have been targeted in PHP2Shell attacks that deployed data-wiping malware on VMware ESXi hosts. […]

SRC: BleepingComputer Fri, 13 Nov 2026 11:21:43 -0500 https://www.bleepingcomputer.com/news/security/check-point-gateways-hacked-via-php2shell-to-deploy-vmware-esxi-wiper/

[ SOURCE ] OpenPhish (18 indicator(s))