News
Short, sourced readings of developments in cybercrime, the Dark Web, OSINT and cyber-geopolitical risk, and news from Intellidark and its founder.
Cybercrime
Attackers Abuse AntiFox AI Pentest Platform to Steal AWS Credentials
Arctic Wolf Labs reports that attackers used the open-source, Chinese-language AntiFox agentic penetration testing platform to hit IIS servers and AWS accounts, as reported by Security Affairs.
Source: Security Affairs
Cybercrime
Critical Xen Orchestra Authentication Bypass Exploited in Attacks
According to software maker Vates, a threat actor is exploiting a critical authentication bypass and a zero-day flaw in Xen Orchestra, as reported by SecurityWeek.
Source: SecurityWeek
Cybercrime
N-able releases hotfixes for N-central zero-day vulnerabilities
N-able released N-central 2026.4 HF2 with patches for zero-day flaws that a researcher disclosed without notice, according to BleepingComputer, which reported that the company had taken hosted environments offline.
Source: BleepingComputer
Cybercrime
WhiteArmor Claims 100 GB Theft from Maersk Unit and Demands $5 Million
Maersk confirmed an IT security incident involving unauthorized access to a local legacy system, as reported by Security Affairs, while the cybercrime group WhiteArmor claims to have stolen 100 GB of data and demands a $5 million ransom.
Source: Security Affairs
Cybercrime
Microsoft November Patch Tuesday fixes about 1,090 flaws, one exploited Outlook bug
Security Affairs reports that Microsoft's November Patch Tuesday addresses about 1,090 new vulnerabilities, including one exploited Outlook spoofing flaw, CVE-2026-124194, and 30 bugs that ZDI considers potentially wormable.
Source: Security Affairs
Cyber-geopolitics
France Blames Iran's IRGC for Sabotage of Refrigeration Controllers at About 700 Retail Sites
The French government said a cyber unit of Iran's Islamic Revolutionary Guard Corps carried out an October attack on refrigeration controllers at about 700 French retail sites, according to The Hacker News.
Source: The Hacker News
Cybercrime
Nitori says hackers may have stolen 37.62 million customer records
Japanese furniture retailer Nitori said in a notice that an attacker accessed a system on its network and may have stolen up to 37.62 million customer records.
Source: BleepingComputer
Cybercrime
Attackers Abuse Qubole's AWS Role Trust to Access Customer Accounts and Steal Data
According to Wiz, an attacker entered AWS accounts of multiple Qubole customers between 14 and 26 October, stealing stored secrets and data by using credentials for the AWS account that Qubole's platform uses.
Source: The Hacker News
Cybercrime
N-able takes N-central offline after researcher discloses more than 30 zero-days
According to BleepingComputer, N-able took its hosted N-central environments offline and urged on-premises customers to shut down their servers after security researcher Sean Bales published more than 30 alleged zero-day vulnerabilities.
Source: BleepingComputer
Cybercrime
Ukraine arrests four suspects in €4.3 million crypto investment scam
According to BleepingComputer, Ukrainian law enforcement arrested four suspects in a case involving more than €4.3 million stolen through a network of cryptocurrency investment scam call centers, with 135 German victims.
Source: BleepingComputer
Cybercrime
Fake GitHub Security Tools Infect Over 2,000 PCs With Malware
Doctor Web, as reported by Security Affairs, found malware hidden in GitHub projects posing as security tools, with more than 2,000 PCs infected and attackers now targeting information security professionals.
Source: Security Affairs
Cybercrime
DigiCert Data Breach Exposes Customer Identity Documents
BankInfoSecurity reports that a botched system migration at DigiCert allowed unauthorized access to an internal archive containing customer identity documents.
Source: BankInfoSecurity
Contact