JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html November 2026 Patch Tuesday: 1,094 Flaws, One Exploited October 2026: Binance Heist, ConnectWise Breach, and More CVE-2026-125350: Google Fixes Exploited Chrome XML Zero-Day CERT-In’s CRAFTY FALCON Advisory: AI Is the Accelerant, Your Payment APIs Are the Target TinstaPorn Android Malware Poses as Casino App to Collect User Data “We Have No One”: How Trump’s Dismantling of the VA Left a Veterans Hospital in Crisis Phala Breach: OpenRouter Users Told to Treat DeepSeek Prompts as Exposed NCSC scheme will help critical organisations test their cyber defences Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand Hackers Advertise a $1,000 Gmail Tool That Allegedly Survives Password Resets Embed Security lets analysts teach its AI SOC Platform how to investigate Kyrgyz Government Sold Mountain Resort to NGO Tied to Sanctioned Russian Influence Effort Microsoft researchers demonstrate hidden backdoor technique for AI agents ICS Patch Tuesday: Siemens Flags High-Severity Flaws, Node2Shell Exposure Chat CISA flags Cisco BroadWorks flaw as actively exploited in attacks OT Incidents Hit a Third of Industrial Organizations, SANS Finds Ubuntu certificate revocation checks arrive in curl, OpenSSL is next Red Hat OpenShift 5 brings autonomous troubleshooting to hybrid clouds Druva helps restore AI agents without rolling back entire environments Notice of Receipt of Complaint; Solicitation of Comments Relating to the Public Interest Pipeline Safety: Information Collection Activities National Cybersecurity Center of Excellence (NCCoE) Projects and Activities Notice of Receipt of Complaint; Solicitation of Comments Relating to the Public Interest Microsoft Fixes 1235 Flaws in Another Record Patch Tuesday Fingerprint trains specialized models to detect distinct fraud types Microsoft fixes Exchange sign-ins broken by Windows Server updates Orca Security adds visibility into AI-generated code and agent risks Microsoft November Patch Tuesday: one exploited Outlook bug and 30 wormable flaws Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities Obsidian expands AI agent security with runtime policy enforcement Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes Ransomware claim: Herald Christian Health Center (osiris) Recently Patched Barracuda Vulnerabilities Exploited in Attacks Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges YouHack data breach — 7,160,849 accounts Hackers Exploit Decade-Old OpenSSH Flaw to Bypass Linux Logins Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons The Cyber Resilience Act clock doesn’t stop for weekends Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms A CISO’s guide to trimming waste from a flat security budget Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches EU cyber scores look healthy, but 45% of surveyed IT providers take months to patch Nearly half of big firms shelve or close vulnerability findings they haven’t confirmed OpenAI builds a kill switch for its research models An Instagram ad was all it took: Leaked exploit kits are hitting employees’ iPhones Google Fi super network leans on encryption to keep hotspot traffic private Home Research & Field Notes