JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html Hegseth Survives Impeachment Attempt ISC Stormcast For Wednesday, November 11th, 2026 https://isc.sans.edu/podcastdetail/10174, (Wed, Nov 11th) СберСпасибо (SberSpasibo) data breach — 3,288,711 accounts Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities Russia-Linked APT Turla Turned Exchange Servers Into Their Own Control Room GHSA-x8x8-p968-x646: Microsoft Security Advisory CVE-2026-118745 – Visual Studio Remote Code Execution Vulnerability GHSA-xf35-v9jh-g65w: Microsoft Security Advisory CVE-2026-114152 – Visual Studio Remote Code Execution Vulnerability GHSA-6856-87hx-p5x7: Microsoft Security Advisory CVE-2026-105544 – .NET Elevation of Privilege Vulnerability GHSA-fpxj-5c99-g7vj: Microsoft Security Advisory CVE-2026-114151 – Visual Studio Remote Code Execution Vulnerability GHSA-r8h3-p8p6-ggp7: Microsoft Security Advisory CVE-2026-114158 – Visual Studio Remote Code Execution Vulnerability GHSA-3cgx-w6gm-fqrx: Microsoft Security Advisory CVE-2026-114159 – Visual Studio Remote Code Execution Vulnerability GHSA-q6jf-24jf-m3cg: Microsoft Security Advisory CVE-2026-120792 – Aspire Information Disclosure Vulnerability GHSA-m63f-xhvm-6mv5: Microsoft Security Advisory CVE-2026-120778 – Aspire Elevation of Privilege Vulnerability GHSA-3893-7fxc-qvff: Microsoft Security Advisory CVE-2026-114154 – ASP.NET Core Denial of Service Vulnerability GHSA-7phj-vgxq-r67h: Microsoft Security Advisory CVE-2026-114157 – ASP.NET Core Security Feature Bypass Vulnerability Microsoft Fixes Nearly 1,100 Security Vulnerabilities [remote] Ruflo MCP Bridge 3.16.2 – Remote Code Execution Finally, Payment by Bank Transfer Comes to Have I Been Pwned CISA director pick already drawing concern from Hill Dems over Palantir connection November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far Ransomware claim: Roane Transportation Services (inc ransom) Ransomware claim: Kolin (inc ransom) Ransomware claim: Nota Groep (inc ransom) Ransomware claim: Millimed Thailand (i-HERB) (inc ransom) Ransomware claim: HONG BAO GROUP (lovelywines.co.th) (inc ransom) Ransomware claim: Onmion LLC (Lake Connor Park, Port Susan Camping Club, Cured by Visconti) (inc ransom) Ransomware claim: Nandan Terry Pvt (inc ransom) Ransomware claim: La Filipina Uy Gongco (inc ransom) Ransomware claim: ZIRNET LLC (mmplumbingny.com alpha1usa.com askconstruction.com mmplumbingny.com tristate-s (inc ransom) Ransomware claim: ELITDATA SE (Advokatfirman Kurt Lundberg HB,Artwood AB,Mantum Group) (inc ransom) Lake County School Board seeks injunction requiring a parent who received unredacted data because of the district’s error to destroy the data November Patch Tuesday: An Overflowing Cornucopia of CVEs Railway breach leads to $740,000 in fraudulent AI charges The US wants its quantum lead to turn into factories and supply chains Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday Ring robots ready to patrol paranoids’ pads U.S. CISA adds IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack flaws to its Known Exploited Vulnerabilities catalog US Army member arrested in UK over allegations of spying for Russia Kalshi Is Cozy With Trump — But It’s Ramping Up Dem Hires and Campaign Spending Arizona Town’s Probe on Sex Abuse Claims Could Block Prison Firm Building New ICE Camp Debunking Pete Hegseth’s Bullshit Impeachment Defense A Natural Gas Project Off Alaska’s Coast May Be a Russian Ploy for Intel on the Arctic Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon New Windows 11 update fixes File Explorer menu mess – and patches an exploited flaw Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row Japanese furniture giant Nitori says hackers stole 37.6M customer records F-Secure Identifies 26 Ways AI Can Harm Consumers, and Where to Stop Them Near AI Breach Exposes User Details and Data From 18 AI Agents Home Research & Field Notes