JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html Trump Subpoenas Teachers Union for Info on Pro-Palestine Students CERT-In’s AI Security Auditing Guidelines: Will Your AI System Need an Independent Audit? PHP2Shell Exploited in Destructive Check Point Gateway Attacks C++26 stumbles at finish line over Contracts dispute Hackers Exploit New N-central Zero-Day Hours After PoC Publication Stolen webcam clips of 900+ victims feed North Korea’s $400 million fake Zoom scheme Ransomware claim: cey-tech.com (krybit) How attackers turned a Teams meeting booking into a device code phishing trap Suspected North Korean IT workers reached onboarding at companies with open data Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2 CastleRAT data breach — 179,745 accounts Your pinned MCP server may not be as pinned as you think Digital sovereignty leaves enterprises chasing their own audit trails How can I use Osint other than finding people? Macfinger ClickFix campaign sends DownTheDRAIN infostealer for macOS, (Fri, Nov 13th) Ransomware claim: Company #216 (N0n) FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178, (Fri, Nov 13th) Home Assistant: the password is not the key — token secrets in cleartext, two token classes never expire, password change revokes none (2026.11.0, live-proven) InfiniteWP Client: the NOSSL signing key has 31 bits of secret — recovered live in 291.9 seconds Open WebUI: the Windows installer mints the master key from the install second — CVE-2025-15603 was rejected; here is the measurement APPLE-SA-11-12-2026-1 HomeView Software Version 27.2 APPLE-SA-11-09-2026-9 visionOS 27.2.1 APPLE-SA-11-09-2026-8 watchOS 26.6.1 APPLE-SA-11-09-2026-7 watchOS 27.2.1 APPLE-SA-11-09-2026-6 macOS Sequoia 15.8.3 APPLE-SA-11-09-2026-5 macOS Tahoe 26.7.3 APPLE-SA-11-09-2026-4 macOS Golden Gate 27.2.1 APPLE-SA-11-09-2026-3 iOS 18.7.12 and iPadOS 18.7.12 APPLE-SA-11-09-2026-2 iOS 26.7.3 and iPadOS 26.7.3 APPLE-SA-11-09-2026-1 iOS 27.2.1 and iPadOS 27.2.1 [REVIVE-SA-2026-004] Revive Adserver Vulnerabilities AI Source Code Analysis Detection Evasion Techniques The School Bomb Threats Came From Accounts Already in Stolen Data GHSA-x585-4vv8-2mh2: Rucio: Unauthenticated administrator impersonation through SSH challenge tokens GHSA-mmhr-3c5m-f64f: Soup Sieve: Polynomial-time denial of service in the descendant combinator GHSA-4j63-6c4x-wfg4: Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance Searching my account’s comments which i lost on Tiktok Oklahoma Drops Murder Charge Against Richard Glossip, Avoiding Third Trial GHSA-f3w6-w445-fwh9: Active Storage: Possible arbitrary file write and read in image analysis Google smart glasses privacy features cover wearers and the people around them GHSA-rwvh-fw6r-pwvp: Action Pack: Possible DoS vulnerability in Action Controller Live streaming GHSA-x6mj-8jx9-qhqv: Action Pack: Possible sensitive session information leak in Active Storage proxy mode GHSA-v6rj-xm57-3p59: Action View: Possible XSS vulnerability in highlight helper GHSA-rq8q-p985-fjq7: Action View: Possible XSS vulnerability in strip_tags GHSA-2p2f-4rq4-gjwc: Action View: Possible XSS vulnerability in text helpers GHSA-3w93-6hmw-whh4: Active Storage: Unsigned Content-Type in GCS direct uploads with cache_control Home Research & Field Notes