Thursday 12 November 2026 | Daily Security Briefing from apjone.uk
🎙️ Listen
Security News
Microsoft Patch Tuesday — 1,094 bugs patched, Outlook zero-day exploited in the wild (The Register)
Microsoft fixed over 1,094 vulnerabilities this month including a zero-day in Outlook that was under active exploitation before the patch dropped.
eMudhra revokes 8 more CA certificates after private key mishandling (BleepingComputer)
The disgraced former CA revoked 8 additional intermediate certificates after an investigation found improper private key handling throughout its certificate generation process.
Maersk confirms data breach as WhiteArmor ransomware demands $5 million (BleepingComputer)
Shipping giant Maersk confirmed unauthorised access to a legacy system inherited from a prior acquisition, with WhiteArmor threatening to publish stolen data.
Active ScreenConnect attacks breach MSPs, impact dozens of organisations (BleepingComputer)
Attackers are abusing compromised ScreenConnect environments to push rogue remote-access clients to MSP customer devices — a supply chain pivot affecting dozens of downstream organisations.
N-able takes N-central platform offline after discovery of 33 flaws (Dark Reading)
N-able suspended its hosted RMM platform after the public disclosure of 33 vulnerabilities including zero-days with available exploits; hotfixes have since been released.
CISA flags Cisco BroadWorks flaw as actively exploited (BleepingComputer)
CVE-2026-20320 added to the Known Exploited Vulnerabilities catalogue; administrators should apply Cisco patches without delay.
Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand (Securelist)
Kaspersky documents a new ransomware operator that integrates large language models for automation — one of the first confirmed operational uses of AI in a live ransomware chain.
Who runs the ransomware group Qilin? (Krebs on Security)
Krebs on Security identifies the Qilin administrator through operational security mistakes; the group claimed 365 victims in the past three months, making it the world's most active affiliate programme.
Poland shuts down government services platform ePUAP following cyberattack (The Record)
Poland took its national e-government portal offline after an attack targeting the platform used by millions of citizens to submit official documents and communicate with agencies.
Google DeepMind formally verifies Signal's encryption in four weeks using agentic AI (Ars Technica)
Researchers used agentic AI to mathematically prove key cryptographic guarantees of the Signal protocol — a landmark development for both applied cryptography and AI research.
NCSC launches Cyber Adversary Simulation scheme for critical organisations (NCSC)
The new NCSC scheme will help UK critical national infrastructure operators test their cyber defences through real-world adversary simulation exercises by trusted providers.
Notion says Fireworks AI breach exposed customer AI chat transcripts (BleepingComputer)
A breach at Notion's AI infrastructure provider Fireworks AI exposed AI chat transcripts from a small number of Notion workspaces.
CISA Known Exploited Vulnerabilities
CVE-2026-20320 — Cisco BroadWorks
Added to the KEV catalogue following confirmed active exploitation. Cisco BroadWorks administrators should apply available patches immediately to prevent unauthorised access and sensitive data disclosure.
Ransomware Activity — 51 victims, 18 groups
interlock
🇨🇦 Garden Valley School Division — Education ⚠️
🇺🇸 Meadows Valley School District — Education ⚠️
🇺🇸 Ridgway High School — Education ⚠️
🇺🇸 Indiana Area School District — Education ⚠️
🇺🇸 Jerome School District — Education ⚠️
🇺🇸 Richmond Public Schools — Education ⚠️
🇺🇸 Southwest Orthopedic & Reconstructive Specialists — Healthcare ⚠️
🇨🇦 Assiniboine Dental Group — Healthcare ⚠️
🇺🇸 Elmcrest Children's Center — Healthcare ⚠️
🇺🇸 Madison Honda — Retail
🇺🇸 Custom Floors Unlimited — Retail
🇺🇸 Conecuh Sausage Company — Agriculture/Food
Curious Worm
🇺🇸 SBH Health System (sbhny.org) — Healthcare ⚠️
🇮🇪 Shannon Health (shannonhealth.com) — Healthcare ⚠️
🇺🇸 Raleigh Orthopaedic — Healthcare ⚠️
🇺🇸 Life Line Screening — Healthcare ⚠️
🇸🇦 Safco Dental Supply — Healthcare ⚠️
Atlas Healthcare Partners — Healthcare ⚠️
🇺🇸 Marquis Companies — Senior Care ⚠️
🇬🇧 Baron & Budd (baronandbudd.com) — Legal/Professional
🇨🇦 SACHEM Inc (sacheminc.com) — Manufacturing
Booba Project
🇨🇦 Acclaim Health — Healthcare ⚠️
🇺🇸 Georgetown Sleep Center — Healthcare ⚠️
🇺🇸 Collier Sports Medicine & Orthopedic Center — Healthcare ⚠️
🇲🇽 El Portal Imaging Center — Healthcare ⚠️
🇺🇸 COMPUTER TASK GROUP, Inc. — Technology
🇺🇸 Day One RI — Non-profit
Play
🇺🇸 Minor League Baseball — Sports/Hospitality
🇺🇸 NY Snacks — Retail
🇺🇸 Brothers Express LLC — Transportation
🇬🇧 Signworx — Other
akira
🇺🇸 Leware Construction Company of Florida — Manufacturing
R3 Composites — Manufacturing
Quality Air — HVAC/Transportation
Dark Project
🇺🇸 Bear Valley Community Hospital — Healthcare ⚠️
🇦🇪 MTM&O Gold Refinery DMCC — Manufacturing
SilentRansomGroup
🇬🇧 A&O Shearman — Legal/Professional
J... (identity withheld) — Unknown
medusalocker
Capetown — Transport/Unknown
Dep — Unknown
N0n
🇶🇦 Company #213 (electrical contracting) — Pending exposure
🇪🇹 Company #212 (education) — Pending exposure
qilin
🇺🇸 Oral Roberts University — Education
Aoqin
🇺🇸 Tyfone — Technology — data publication 2026-11-19
bravox
🇩🇪 AWO Bundesverband — Non-profit/Workforce
Panzer
🇪🇸 SUNNIER HOMES — Real Estate
HYFLOCK
🇦🇺 TCA Darwin — Accounting/Professional
krybit
🇺🇸 Actualize Consulting — Engineering/IT
Doommageddon
K**** T**** H**** B**** (identity withheld) — Unknown
everstake
ki*****o.com (identity withheld) — Industrial Machinery
osiris
🇺🇸 The Queenan Law Firm — Legal