Cybersecurity Headlines

Australia to create AI safety regulator
https://apnews.com/article/australia-artificial-intelligence-regulator-openai-agent-breach-a5dfe5379c0f7458e44b72a9073833c6 
Zero-day drop forces N-able offline
https://www.securityweek.com/n-able-takes-n-central-offline-as-researcher-drops-over-30-zero-days/

White House nominates new CISA head
https://www.reuters.com/world/white-house-nominates-palantirs-losapio-lead-homeland-securitys-cyber-agency-2026-11-09/ 
https://www.infosecurity-magazine.com/news/cisa-incident-reporting-form-circia/ 
DeepMind formally proves Signal's cryptography
https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol/ 
Vanderbilt recovering from ransomware attack
https://cyberscoop.com/vanderbilt-university-ransomware-attack-byod/
AWS environments impacted by third-party breach
https://www.bleepingcomputer.com/news/security/hackers-exploit-trusted-aws-access-to-breach-multiple-cloud-environments/ 
Cereal steals NATO messages
https://therecord.media/russia-hackers-espionage-romania-kazakhstan
Patch news
https://www.bleepingcomputer.com/news/security/sap-patches-four-maximum-severity-security-vulnerabilities/ 
https://www.bleepingcomputer.com/news/security/hackers-exploit-barracuda-email-security-gateway-flaws-to-get-root-access/ 
https://www.securityweek.com/exploited-outlook-zero-day-among-1094-flaws-patched-by-microsoft/ '

Fireworks AI discloses second breach
https://www.bleepingcomputer.com/news/security/fireworks-ai-discloses-new-breach-after-cloud-provider-hack/ 
Get the show notes here:  https://cisoseries.com/cybersecurity-news-new-cisa-head-ai-safety-regulator-n-ables-zero-day-deluge/ 
Huge thanks to our episode sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

France turns up the heat on Iran over fridge hacks
https://www.reuters.com/world/french-officials-suspect-iran-is-behind-refrigerator-hacks-sources-say-2026-11-09/
Binance says breach claims don't add up
https://www.bleepingcomputer.com/news/security/binance-denies-data-breach-after-alleged-shinyhunters-claims/
Operation Snowball: AI keeps a telecom attack rolling
https://www.infosecurity-magazine.com/news/operation-snowball-ai-telecom/
Ukraine hangs up on crypto scammers
https://therecord.media/ukraine-arrests-scam-call-centers-germany
SSHole gives hackers a foot in Linux's door
https://www.bleepingcomputer.com/news/security/hackers-exploit-sshole-openssh-flaw-to-breach-linux-systems/
Researchers find the keys in carmakers' apps
https://www.theregister.com/security/2026/11/09/researchers-pwn-automakers-android-apps-to-remotely-unlock-cars-honk-horns/5308483
Bitter sets a new RAT loose in South Asia
https://thehackernews.com/2026/11/bitter-hackers-deploy-new-paprat.html
SEGA's mailing list spills 2.2 million addresses
https://www.bleepingcomputer.com/news/security/sega-newsletter-data-breach-exposes-22-million-email-addresses/
Get the show notes here: https://cisoseries.com/cybersecurity-news-november-10-2026/
Huge thanks to our episode sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

SonicWall warns of new exploited SSL-VPN MFA bypass flaw
https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/
Escaped AI testing agent behind WorkOS breach
https://www.bleepingcomputer.com/news/security/runaway-ai-hacking-agent-behind-workos-breach-after-escaping-sandbox/
Bogotá investigates potential health agency hack following airport bomb hoax email
https://therecord.media/bogota-potential-city-health-agency-hack-european-hoax-emails
Medical services company issues settlement over 2023 hack of patient records
https://therecord.media/medical-services-company-settles-with-4-state-ags
Executive deepfake trio charged
https://cyberscoop.com/ai-deepfakes-impersonate-ceo-lawyer-defraud-companies/
Japan announces emergency cybersecurity package following attacks
https://www.securityweek.com/japan-announces-emergency-cybersecurity-package-following-a-wave-of-attacks/
NHS reveals emotional burdens of post-breach helplines
https://www.theregister.com/security/2026/11/07/nhs-breach-helpline-left-staff-carrying-a-significant-emotional-burden/5308201
Claude Code's "Don't Ask Again" file exposes passwords and keys on GitHub
https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html
Get the show notes here: https://cisoseries.com/cybersecurity-news-new-sonicwall-flaw-workos-accidental-ai-breach-bogota-bomb-hoax-email/
Huge thanks to our episode sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Read the full stories at CISOseries.com.
This week's Department of Know is hosted by Sarah Lane, with guests Jason Thomas, senior director, technology security, governance, and risk, Cystic Fibrosis Foundation, and David Nolan, CSO, Trimont.
Missed the live show? Check it out on YouTube.
The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.
Big thanks to our sponsor, ESET
Your teams are adopting AI faster than security keeps up. ESET helps you embrace it safely. Confident AI adoption starts with proactive protection and effortless security management: AI-powered prevention stopping threats early, expert MDR watching 24/7, and one platform that's simple to run. Get to know the new ESET PROTECT Platform - designed for the AI era.

Norway's aid agency suffers data breach
https://www.theregister.com/cyber-crime/2026/11/05/norways-aid-agency-pwned-and-all-users-data-is-stolen/5307765
GhostMap Android flaw lets app run persistent boot loop
https://www.bleepingcomputer.com/news/security/ghostmap-android-flaw-lets-malicious-app-trigger-persistent-boot-loop/
Zyxel fixes zero-day on network switches
https://www.bleepingcomputer.com/news/security/zyxel-fixes-zero-day-exploited-to-hack-nearly-1-000-network-switches/
More Asian airlines rocked by Amadeus
https://therecord.media/asian-airlines-announce-data-breach-it-provider-incident
Cyberattack wipes cloud data at Russian hosting provider Beget
https://therecord.media/russia-cyberattack-beget-cloud
Hackers exploit patched Apple flaw to deliver info-stealing malware
https://thehackernews.com/2026/11/hackers-exploit-patched-apple-flaw-to.html
Bank phishing sites evade takedowns by playing dead
https://www.securityweek.com/bank-phishing-sites-show-fake-suspended-pages-to-evade-takedowns/
New York's Queens Public Library battles ransomware attack
https://www.theregister.com/cyber-crime/2026/11/05/new-yorks-queens-public-library-battles-ransomware-crims-wi-fi-checkouts-and-website-go-dark/5307796
Get the show notes here: https://cisoseries.com/cybersecurity-news-november-6-2026/
Huge thanks to our episode sponsor, ESET

ESET MDR is a 24/7 threat management service combining AI and human expertise to achieve an industry-leading 6-minute threat response and containment, removing the need to maintain in-house security specialists. You don't need a security team the size of a Fortune 500. You need ESET. Supervised Cybersecurity for the AI Era. Built to be effortless.