JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand Hackers Advertise a $1,000 Gmail Tool That Allegedly Survives Password Resets Embed Security lets analysts teach its AI SOC Platform how to investigate Microsoft researchers demonstrate hidden backdoor technique for AI agents ICS Patch Tuesday: Siemens Flags High-Severity Flaws, Node2Shell Exposure Chat CISA flags Cisco BroadWorks flaw as actively exploited in attacks OT Incidents Hit a Third of Industrial Organizations, SANS Finds Ubuntu certificate revocation checks arrive in curl, OpenSSL is next Red Hat OpenShift 5 brings autonomous troubleshooting to hybrid clouds Druva helps restore AI agents without rolling back entire environments Notice of Receipt of Complaint; Solicitation of Comments Relating to the Public Interest Pipeline Safety: Information Collection Activities National Cybersecurity Center of Excellence (NCCoE) Projects and Activities Notice of Receipt of Complaint; Solicitation of Comments Relating to the Public Interest Microsoft Fixes 1235 Flaws in Another Record Patch Tuesday Fingerprint trains specialized models to detect distinct fraud types Microsoft fixes Exchange sign-ins broken by Windows Server updates Orca Security adds visibility into AI-generated code and agent risks Microsoft November Patch Tuesday: one exploited Outlook bug and 30 wormable flaws Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities Obsidian expands AI agent security with runtime policy enforcement Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes Recently Patched Barracuda Vulnerabilities Exploited in Attacks Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges YouHack data breach — 7,160,849 accounts Hackers Exploit Decade-Old OpenSSH Flaw to Bypass Linux Logins Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons The Cyber Resilience Act clock doesn’t stop for weekends Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms A CISO’s guide to trimming waste from a flat security budget Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches EU cyber scores look healthy, but 45% of surveyed IT providers take months to patch Nearly half of big firms shelve or close vulnerability findings they haven’t confirmed OpenAI builds a kill switch for its research models An Instagram ad was all it took: Leaked exploit kits are hitting employees’ iPhones Google Fi super network leans on encryption to keep hotspot traffic private Hegseth Survives Impeachment Attempt Ransomware claim: https://www.jnattorney.com/ (inc ransom) Ransomware claim: MTM&O Gold Refinery DMCC (dark project) Ransomware claim: Bear Valley Community Hospital (dark project) ISC Stormcast For Wednesday, November 11th, 2026 https://isc.sans.edu/podcastdetail/10174, (Wed, Nov 11th) СберСпасибо (SberSpasibo) data breach — 3,288,711 accounts Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities Ransomware claim: SUNNIER HOMES (Panzer) Russia-Linked APT Turla Turned Exchange Servers Into Their Own Control Room Ransomware claim: LiveRamp (N0n) Home Research & Field Notes