News archive · 16 stories
November 2026
- BreachDigiCert says self-registered accounts read archived customer data, including some ID documentsDigiCert is notifying customers that an unauthorized, self-registered account read archived customer records from an internal business system between June 27 and July 2, 2026. Most were contact details; a small minority included driver's licenses, passports or utility bills. Certificates were not affected.
- OpenSSH 10.6p2 fixes a password bypass on musl systems such as Alpine when PAM is offOpenSSH 10.6p2, released November 5, works around a password authentication bypass in sshd on Linux systems built with musl libc and PAM disabled. An oversized password can log in to accounts meant to be key-only, including root on Alpine.
- BreachTrigger.dev says an attacker read environment variables for a subset of customer organizationsAI workflow platform Trigger.dev disclosed on November 1 that an attacker gained unauthorized access to environment variables for a subset of organizations. It says the exploit is blocked and affected owners were emailed, but has not said how it happened or how many customers were hit.
- VulnerabilityApache OFBiz 24.09.08 fixes a hard-coded JWT key, a password reset takeover and default-open REST authApache OFBiz 24.09.08, announced November 4, fixes a batch of authentication flaws: a hard-coded JWT key giving unauthenticated admin access, a password reset flaw allowing account takeover, a reusable login key not bound to a session and REST operations open by default.
- BreachChainalysis now says password hashes and live tokens for all users were exposedChainalysis said on November 4 that names, usernames, password hashes and live tokens for all users were exposed, reversing its October 30 statement that no session tokens were accessed. It took KYT, address screening and its login page offline after abnormal activity.
- Digital IDDigiD DDoS shows how little availability headroom the Dutch national login has leftA DDoS attack on October 30 left DigiD only partly reachable for about 90 minutes, blocking logins to the Dutch tax office and MijnOverheid. Government figures show DigiD availability down to 99.57% this year against a 99.5% norm.
- BreachDreamHost says File Manager attacker took FTP passwords and webmail sessions for about ten weeksDreamHost's breach notice, filed with California's attorney general, says an attacker who exploited its web File Manager captured the FTP/SFTP credentials of everyone who logged in from about August to October 23, 2026, and may have exposed webmail session data, emails and files.
- AI agentsKantara risk group says AI agents need their own identity risk framework, not an extension of the human oneKantara Initiative's Digital Identity Risk group found that agentic AI needs a separate risk framework from its human-focused taxonomy, naming orphaned agent identities, dormant credentials, identity drift and agents posing as humans as the risks to plan for.
- Token theftVercel starts binding dashboard sessions to devices with DBSC in ChromeVercel is gradually rolling out Device Bound Session Credentials for vercel.com sign-ins, so a stolen session cookie stops working away from the device that holds the key. It works only in Chrome on Mac and Windows for now, and DPoP for the Vercel CLI is in progress.
- Machine identityOne actor signed in as Entra ID apps with stolen secrets and reached 27 organizations, Todyl saysTodyl is tracking an ongoing campaign in which one operator uses stolen client secrets to sign in to Microsoft Entra ID as app registrations, reaching 27 organizations including MSP clients, searching mail and downloading files. No Microsoft vulnerability is involved.
- BreachBinance says a fake job interview and an internal AI tool led attackers to its wallet signing serviceBinance's initial findings trace the $6.34 billion theft to a September fake recruiter whose coding assignment infected an engineer's Mac. An internal AI tool let the attacker reach two wallet engineers, and a container deployment token on one laptop opened the signing service.
- BreachChainstack says an attacker reached production through a third-party component and took password hashesBlockchain infrastructure provider Chainstack says an attacker entered a development environment through a third-party component on October 26, reached production on October 29 and accessed customer names, emails and password hashes before being cut off on October 31.
- VulnerabilityDocker Sandboxes copy flaw let an AI agent reach host files such as cloud keys and SSH keysA symlink flaw in the Docker Sandboxes copy command, CVE-2026-103916, let an AI coding agent inside the sandbox read or write host files outside its allowlist, such as cloud credentials and SSH keys, when the operator ran a copy. Docker fixed it in v0.51.0 on November 3.
- BreachPassword manager mSecure tells users to change passwords and remove passkeys, without saying what happenedmSecure's developer emailed current and former customers on November 3 about suspicious activity linked to the password manager, advising them to change passwords, reset two-factor authentication and possibly remove passkeys. It has not said what happened or whether vault data was exposed.
- Token theftGoogle: LLMjacking starts with stolen cloud identities and has cost some companies $1 millionGoogle Threat Intelligence Group and Mandiant say LLMjacking intrusions ran up more than $100,000 in fraudulent AI charges in a day and $1 million in total at some organizations. The usual way in was a stolen service account key, access key, GitHub token or session token.
- BreachWorkOS says an AI-assisted attack framework reached its internal sales tool and CRM dataWorkOS found unauthorized access on October 30 to an internal tool its sales and customer teams use, exposing CRM contacts, call and Slack excerpts, and directory health metadata. It saw an AI-assisted offensive framework and no access to production or application data.