https://www.bleepingcomputer.com/news/security/critical-xen-orchestra-auth-bypass-flaw-exploited-to-hijack-vm-servers/#new_tab 2026-11-12T20:56:05Z Security Risk Advisors en Actively Exploited Xen Orchestra Flaws Enable Authentication Bypass and XCP-ng Host Takeover 2026-11-12T20:56:05Z Blog https://www.welivesecurity.com/en/eset-research/exchange-for-breakfast-turlas-cereal-tricks-are-not-for-kids/#iocs#new_tab 2026-11-12T20:55:11Z Security Risk Advisors en 🚩 Turla Deploys Cereal Malware to Steal Emails From Microsoft Exchange Servers 2026-11-12T20:55:11Z Blog https://research.checkpoint.com/2026/not-all-that-glitters-is-gold-tracking-copperdragons-sparrow-framework-around-the-globe/#new_tab 2026-11-12T20:54:04Z Security Risk Advisors en 🚩 CopperDragon-Linked Espionage Campaigns Target Global Telecom and Government Organizations 2026-11-12T20:54:04Z Blog https://sra.io/blog/integrating-ai-into-hipaa-risk-analysis-a-practical-approach-amidst-emerging-technologies/ 2026-11-12T14:43:26Z Security Risk Advisors en Integrating AI into HIPAA Risk Analysis: A Practical Approach Amidst Emerging Technologies 2026-11-12T14:43:18Z Blog https://blog.claroc.io/ghostshares-grok-build-apps/#new_tab 2026-11-11T22:06:45Z Security Risk Advisors en More Than 35,000 Grok-Built Apps Found Publicly Accessible, Exposing Corporate and Medical Data 2026-11-11T22:06:45Z Blog https://www.recordedfuture.com/blog/ghostframe-esxi-implant-settra-ransomware#new_tab 2026-11-11T22:05:27Z Security Risk Advisors en 🚩 GhostFrame ESXi Implant Linked to Settra Ransomware Gives Attackers Control Over Hosted VMs 2026-11-11T22:05:27Z Blog https://www.wiz.io/blog/qubole-cross-account-access-abused-in-the-wild#new_tab 2026-11-11T22:04:29Z Security Risk Advisors en 🚩 Threat actor abused cross-account IAM roles trusted by Qubole’s AWS account to access customer environments, exfiltrating S3 data and harvesting credentials. 2026-11-11T22:04:29Z Blog