+ Admin creds left in carmaker app opened doors to vehicles; French officials blame Iran for refrigerator hacks; and more
Can't view this message? Click here to view it online.
iTnews

WEEKLY SECURITY WRAP

Tuesday November 10, 2026

  Security  

"Don't ask again" in Anthropic's Claude Code leaks developer secrets

AI vendor looking into fixes after researchers count 2539 exposed credentials.

By Juha Saarinen

 

Latest Security News


Admin creds left in carmaker app opened doors to vehicles
  Security  

Admin creds left in carmaker app opened doors to vehicles

Researchers work their way in from a single number plate.

By Juha Saarinen

 
French officials blame Iran for refrigerator hacks
  Security  

French officials blame Iran for refrigerator hacks

Vow retaliation.

By Raphael Satter and Gabriel Stargardter

 
Researchers turn PwnEscape Linux flaw into Firecracker breakout
  Security  

Researchers turn PwnEscape Linux flaw into Firecracker breakout

Demonstrates host kernel bug that undercuts defence-in-depth sandboxing.

By Juha Saarinen

 
Lightweight Linux distros vulnerable to *sshole password bypass
  Security  

Lightweight Linux distros vulnerable to *sshole password bypass

Accounts that shouldn’t accept passwords do, thanks to a decade-old edge case.

By Juha Saarinen

 
Low-privileged accounts on unpatched systems as good as root: OpenAI
  Security  

Low-privileged accounts on unpatched systems as good as root: OpenAI

AI agents built 948 distinct Linux kernel privilege-escalation exploits in exercise.

By Juha Saarinen

 
 
 
 
Gov proposes AI safety regulator
  Security  

Gov proposes AI safety regulator

Following incident where an AI agent accessed a Medicare data portal.

By Ry Crozier

 
No OAIC probe of collapsed VIQ over court transcription work in India
  Security  

No OAIC probe of collapsed VIQ over court transcription work in India

Regulator sees possible security breach but won't pursue liquidated provider.

By Juha Saarinen

 
Binance hackers used fake job interview in US$6.3 billion attack
  Security  

Binance hackers used fake job interview in US$6.3 billion attack

To compromise the ⁠computers of two software engineers.

By Elizabeth Howcroft and AJ Vicens

 
Chinese Videostrong botnet hit Android TV boxes in Australia: researchers
  Security  

Chinese Videostrong botnet hit Android TV boxes in Australia: researchers

Google boots Shenzhen-based vendor behind XPCE botnet.

By Juha Saarinen

 
US warns of 'ongoing cyber threat' to industrial refrigeration systems
  Security  

US warns of 'ongoing cyber threat' to industrial refrigeration systems

After multiple incidents.

By Raphael Satter

 
Binance hack prompted US regulators to check in on bank systems
  Security  

Binance hack prompted US regulators to check in on bank systems

For anomalous behavioural detections.

By Stephen Gandel and Nupur Anand

 
Japan to seek early access to software vulnerability data from US AI firms
  Security  

Japan to seek early access to software vulnerability data from US AI firms

Amid cyberattack surge.

By Staff Writer

 
 
 
 

Featured whitepaper


 
 

MOST POPULAR


"Don't ask again" in Anthropic's Claude Code leaks developer secrets
  Security  

"Don't ask again" in Anthropic's Claude Code leaks developer secrets

By Juha Saarinen

Chinese Videostrong botnet hit Android TV boxes in Australia: researchers
  Security  

Chinese Videostrong botnet hit Android TV boxes in Australia: researchers

By Juha Saarinen

Tyro finds new CISO
  Training & Development  

Tyro finds new CISO

By Ry Crozier

Binance hackers used fake job interview in US$6.3 billion attack
  Security  

Binance hackers used fake job interview in US$6.3 billion attack

By Elizabeth Howcroft and AJ Vicens

Lightweight Linux distros vulnerable to *sshole password bypass
  Security  

Lightweight Linux distros vulnerable to *sshole password bypass

By Juha Saarinen

 
 
unsubscribe