BleepingComputer.com
"New worm-like 'SCKit' malware targets MSPs in ScreenConnect."
Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents. Accessed on 13 November 2026, 0350 UTC.
Content and Source: "BleepingComputer.com."
URL--https://www.bleepingcomputer.com/
Please check URL or scroll down to read your selections. Thanks for joining us today.
Russ Roberts (https://www.hawaiicybersecurityjournal.net).
New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacks
A new worm-like malware toolkit named SCKit was deployed in the recent ScreenConnect attacks targeting managed service providers (MSPs), designed to spread from infected customer devices to MSP technicians' computers and compromise additional managed networks.
- November 12, 2026
- 05:53 PM
0
Hackers compromise 4,800 GitHub accounts to steal cloud credentials
A new campaign dubbed 'wfx-loot' has unfolded on GitHub where threat actors used 4,837 compromised accounts to probe 61,764 repositories, open pull requests, and push secrets-stealing malware.
- November 12, 2026
- 05:25 PM
- 0
[Guide] How to identify risky OAuth grants and MCP server connections
OAuth grants are the quiet back door of modern SaaS, and as the recent Klue breach showed, attackers are taking notice. This checklist gives you a repeatable way to uncover risky OAuth grants and MCP server connections before a permissive scope turns into an incident.
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwide
Microsoft is investigating a widespread outage affecting multiple Microsoft 365 services, including Outlook, Microsoft Teams, and Copilot, as users report connectivity problems worldwide.
- November 12, 2026
- 03:15 PM
- 11
New N-able "4EverAble2Shell" zero-day exploited hours after PoC released
Hackers are actively exploiting a newly disclosed N-able N-central zero-day vulnerability dubbed "4EverAble2Shell" to compromise servers and deploy cryptocurrency miners, with researchers reporting at least 21 affected systems, including 19 running the company's latest security update.
- November 12, 2026
- 02:51 PM
- 0
Apache HTTP Server patches critical HTTP/2 remote code execution flaw
A critical vulnerability in the HTTP/2 module of Apache HTTP Server could be exploited by an unauthenticated attacker to obtain remote code execution (RCE).
- November 12, 2026
- 02:12 PM
- 0
Koofr’s 1TB lifetime cloud storage plan drops to $160 with a code
Monthly cloud storage fees add up fast, especially once a photo library or project archive outgrows a free tier. Get a Koofr Cloud Storage 1TB lifetime subscription for $159.99 with code KOOFR and skip the recurring bill.
- November 12, 2026
- 02:06 PM
- 0
New Windows SignDrop zero-day gives hackers SYSTEM privileges
Security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) has released a new Windows zero-day exploit that can let attackers gain SYSTEM privileges.
- November 12, 2026
- 11:04 AM
- 2
Police dismantle Gootloader, CastleRAT, StealC malware infrastructure
Europol and law enforcement partners from nine countries have seized hundreds of servers and domains used by the Gootloader, CastleRAT, and StealC malware operations.
- November 12, 2026
- 10:07 AM
- 0
Your Endpoint Management Platform Could Be Your Biggest Security Risk
Endpoint management platforms can become powerful attack tools when compromised, allowing hackers to deploy malware, execute commands, and disrupt thousands of devices. Action1 explains how customer-controlled cryptographic authorization can prevent attackers from abusing sensitive endpoint operations.
- November 12, 2026
- 10:00 AM
- 0
Apify rotates API tokens, prompts 2FA resets after breach
Apify has rotated critical internal secrets and revoked some third-party OAuth connections after detecting unauthorized access to its internal systems.
- November 12, 2026
- 09:36 AM
- 0
Microsoft: Recent Windows updates cause SQL Server performance issues
Microsoft has confirmed that Windows updates released since the October 2026 Patch Tuesday are causing SQL Server performance and stability issues.
- November 12, 2026
- 07:11 AM
- 1
Browse anonymously on your devices with 3 years of Surfshark VPN for $67
Public Wi-Fi, ad trackers, and geo-restrictions all chip away at online privacy. Get a 3-year Surfshark VPN Starter Plan for $67.20 with code DEAL20 to cover every device in the house.
- November 12, 2026
- 07:05 AM
- 0
Microsoft confirms Windows security updates installation issues
Microsoft has confirmed reports that the November 2026 security updates are failing to install on Windows 11 systems with the October preview update.
- November 12, 2026
- 05:24 AM
- 2
Hackers plant GSocket on Linux servers for persistent access
Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux servers even after patching the vulnerabilities exploited to gain initial access.
- November 12, 2026
- 04:38 AM
- 1
Baker Tilly notifies clients of data breach at third-party provider
The Baker Tilly Advisory Group is notifying clients that a data breach has compromised certain personal information about them and their dependents.
- November 11, 2026
- 06:01 PM
- 0
Active ScreenConnect attacks breach MSPs, impact dozens of organizations
ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices.
- November 11, 2026
- 05:56 PM
- 1
eMudhra revokes 8 more CA certificates after private key mishap
Certificate authority eMudhra has revoked eight additional intermediate CA certificates after an investigation into its recent certificate security incident found improper handling of private keys during the certificate-generation process.
- November 11, 2026
- 04:27 PM
- 0
Notion says Fireworks breach exposed customer AI chat transcripts
Notion, the digital workspace platform, disclosed that a security breach at its AI infrastructure provider, Fireworks AI, exposed Notion AI chat transcripts in a small number of workspaces.
- November 11, 2026
- 03:54 PM
- 0
Maersk confirms data breach as WhiteArmor ransomware demands $5 million
Maersk announced that a threat actor gained unauthorized access to a local legacy system inherited through an earlier acquisition and extracted data from it.
- November 11, 2026
- 11:24 AM
- 1
Hackers use AntiFox AI agents in AWS credential-theft attacks
Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services and AWS environments.
- November 11, 2026
- 10:12 AM
- 0
Comments
Post a Comment
Please leave a comment about our recent post.