JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html Chat Notice of Receipt of Complaint; Solicitation of Comments Relating to the Public Interest Pipeline Safety: Information Collection Activities National Cybersecurity Center of Excellence (NCCoE) Projects and Activities Notice of Receipt of Complaint; Solicitation of Comments Relating to the Public Interest Microsoft Fixes 1235 Flaws in Another Record Patch Tuesday Fingerprint trains specialized models to detect distinct fraud types Orca Security adds visibility into AI-generated code and agent risks Microsoft November Patch Tuesday: one exploited Outlook bug and 30 wormable flaws Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities Obsidian expands AI agent security with runtime policy enforcement Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD Recently Patched Barracuda Vulnerabilities Exploited in Attacks The Cyber Resilience Act clock doesn’t stop for weekends Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms A CISO’s guide to trimming waste from a flat security budget Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches EU cyber scores look healthy, but 45% of surveyed IT providers take months to patch Nearly half of big firms shelve or close vulnerability findings they haven’t confirmed OpenAI builds a kill switch for its research models An Instagram ad was all it took: Leaked exploit kits are hitting employees’ iPhones Google Fi super network leans on encryption to keep hotspot traffic private Hegseth Survives Impeachment Attempt Ransomware claim: https://www.jnattorney.com/ (inc ransom) Ransomware claim: MTM&O Gold Refinery DMCC (dark project) Ransomware claim: Bear Valley Community Hospital (dark project) ISC Stormcast For Wednesday, November 11th, 2026 https://isc.sans.edu/podcastdetail/10174, (Wed, Nov 11th) СберСпасибо (SberSpasibo) data breach — 3,288,711 accounts Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities Ransomware claim: SUNNIER HOMES (Panzer) Russia-Linked APT Turla Turned Exchange Servers Into Their Own Control Room Ransomware claim: LiveRamp (N0n) Ransomware claim: DraftKings (N0n) GHSA-x8x8-p968-x646: Microsoft Security Advisory CVE-2026-118745 – Visual Studio Remote Code Execution Vulnerability GHSA-xf35-v9jh-g65w: Microsoft Security Advisory CVE-2026-114152 – Visual Studio Remote Code Execution Vulnerability Ransomware claim: Garden Valley School Division (interlock) GHSA-6856-87hx-p5x7: Microsoft Security Advisory CVE-2026-105544 – .NET Elevation of Privilege Vulnerability GHSA-fpxj-5c99-g7vj: Microsoft Security Advisory CVE-2026-114151 – Visual Studio Remote Code Execution Vulnerability GHSA-r8h3-p8p6-ggp7: Microsoft Security Advisory CVE-2026-114158 – Visual Studio Remote Code Execution Vulnerability GHSA-3cgx-w6gm-fqrx: Microsoft Security Advisory CVE-2026-114159 – Visual Studio Remote Code Execution Vulnerability GHSA-q6jf-24jf-m3cg: Microsoft Security Advisory CVE-2026-120792 – Aspire Information Disclosure Vulnerability GHSA-m63f-xhvm-6mv5: Microsoft Security Advisory CVE-2026-120778 – Aspire Elevation of Privilege Vulnerability GHSA-3893-7fxc-qvff: Microsoft Security Advisory CVE-2026-114154 – ASP.NET Core Denial of Service Vulnerability GHSA-7phj-vgxq-r67h: Microsoft Security Advisory CVE-2026-114157 – ASP.NET Core Security Feature Bypass Vulnerability Microsoft Fixes Nearly 1,100 Security Vulnerabilities [remote] Ruflo MCP Bridge 3.16.2 – Remote Code Execution Finally, Payment by Bank Transfer Comes to Have I Been Pwned Ransomware claim: Capetown (medusalocker) Home Research & Field Notes