Researchers Say They’ve Traced Qilin Ransomware’s Administrator Through a Decade of Reused Online Aliases
An investigation published by KrebsOnSecurity on November 11, 2026 links the administrator of the Qilin ransomware-as-a-service operation, known online as 'Haise,' to Aleksey Mikhailovich Yakovtsev, a 36-year-old St....
AWS Closes an SSRF Hole in Its MCP Gateway That Could Turn a Trusted User Into an Internal Network Scanner
AWS has patched a server-side request forgery flaw in its open-source mcp-gateway-registry project, tracked as CVE-2026-125926, that let an authenticated user with server-registration rights redirect the gateway to...
A Missing Check in Red Hat Quay’s Key Server Lets Anyone Forge Trusted Signing Keys
A critical flaw in Red Hat Quay's service key server, tracked as CVE-2026-123710 with a CVSS score of 9.8, lets an anonymous caller plant a self-approved signing key...
Europol’s Operation Endgame Rips Out the Plumbing Behind Gootloader, CastleRAT and StealC
A fresh round of Europol's Operation Endgame has knocked out 235 servers and 257 domains tied to the Gootloader, CastleRAT and StealC malware families, recovering 6.4 million victim...
Node.js Patches 16 Bugs, Including One That Can Leak TLS Private Keys From Memory
Node.js has shipped fixes for 16 security vulnerabilities across its 22.x, 24.x, and 26.x release lines, seven of them rated high severity. The most serious, a use-after-free triggered...
Attackers Weaponized Hijacked ScreenConnect Panels to Hit 288 Endpoints in Under 90 Minutes
Security firm Huntress says attackers seized control of cloud-hosted ConnectWise ScreenConnect panels and used the built-in Run Command feature to push a custom malware toolkit called SCKit to...
Unpatched SignDrop Exploit Claims to Bypass Windows’ Newest Anti-Ransomware Shield
A researcher has published a proof-of-concept called SignDrop that claims to defeat the HMAC authentication Microsoft added to the Common Log File System last year, potentially letting a...
‘BluePhishing’ Shows How a Single Click Could Hand Attackers a Foothold Through Microsoft’s AI Agent Identities
Researchers at Proofpoint have detailed a proof-of-concept technique called BluePhishing that abuses Microsoft Entra Agent ID, the system that gives AI agents their own identities inside a company's...