JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html Notice of Receipt of Complaint; Solicitation of Comments Relating to the Public Interest Next Time, Impeach Pete Hegseth for Press Censorship Hegseth Dodges Impeachment, for Now. And Tom Morello on Fighting for the World You Want How Trump’s War on Offshore Wind Upended a “Limitless” Future for Thousands of New England Workers His Church or His Child? A Sixth-Generation Member of a Faith-Healing Sect Had to Choose. Members of Georgia’s Election Board Have Been Coordinating With Cleta Mitchell’s Network Ransomware at the hypervisor layer: how attackers use ESXi and vCenter features for malicious purposes Agentic Finance Has an Accountability Gap, and KYA Aims to Close It Worldwide Microsoft 365 outage disrupts Outlook, SharePoint, Teams, and more New SignDrop Exploit Can Abuse Windows Defender to Bypass Security Protections Brit police watchdog says cops’ use of facial recog risks wrongful arrests US Prosecutors Ask Judge to Allow Bribery Evidence in South American Drug Trafficking Case Hackers Use 4,837 Stolen GitHub Accounts to Target 61,764 Repositories Citrix Patches 10 Critical NetScaler Vulnerabilities Microsoft confirms Windows activation failures after November updates OpenAI’s Daybreak brings AI agents to security testing and vulnerability fixes OpenAI Unveils Daybreak Red Team, Defense Factory Security Tools Trump Subpoenas Teachers Union for Info on Pro-Palestine Students AI Set to Revolutionize Ransomware Following “Stagnant” Few Years Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’ CERT-In’s AI Security Auditing Guidelines: Will Your AI System Need an Independent Audit? Police arrest 354 suspects in dark web cybercrime crackdown Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files PHP2Shell Exploited in Destructive Check Point Gateway Attacks C++26 stumbles at finish line over Contracts dispute Hackers Exploit New N-central Zero-Day Hours After PoC Publication Stolen webcam clips of 900+ victims feed North Korea’s $400 million fake Zoom scheme Ransomware claim: cey-tech.com (krybit) How attackers turned a Teams meeting booking into a device code phishing trap Suspected North Korean IT workers reached onboarding at companies with open data Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2 CastleRAT data breach — 179,745 accounts Your pinned MCP server may not be as pinned as you think Digital sovereignty leaves enterprises chasing their own audit trails How can I use Osint other than finding people? Macfinger ClickFix campaign sends DownTheDRAIN infostealer for macOS, (Fri, Nov 13th) Ransomware claim: Company #216 (N0n) FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178, (Fri, Nov 13th) Home Assistant: the password is not the key — token secrets in cleartext, two token classes never expire, password change revokes none (2026.11.0, live-proven) InfiniteWP Client: the NOSSL signing key has 31 bits of secret — recovered live in 291.9 seconds Open WebUI: the Windows installer mints the master key from the install second — CVE-2025-15603 was rejected; here is the measurement APPLE-SA-11-12-2026-1 HomeView Software Version 27.2 APPLE-SA-11-09-2026-9 visionOS 27.2.1 APPLE-SA-11-09-2026-8 watchOS 26.6.1 APPLE-SA-11-09-2026-7 watchOS 27.2.1 APPLE-SA-11-09-2026-6 macOS Sequoia 15.8.3 APPLE-SA-11-09-2026-5 macOS Tahoe 26.7.3 Home Research & Field Notes