Cybersecurity
Invincible News
Fireworks AI Breach Spreads to Cursor, Uber and Notion
Cursor says a leaked Fireworks AI key led to its backdoored Claude Code extension, while Uber confirms stolen driver’s license data. What to do now.
Invincible News
Check Point Root Flaw Exploited in PHP2Shell Wiper Attacks
CISA lists Check Point flaw CVE-2026-123039 as exploited. Attackers chained it with PHP2Shell to root gateways and wipe ESXi hosts. Patch and check logs.
Invincible News
AI Agents Breached 10 Organizations in China-Linked Campaign
Unit 42 says attackers paired the open-source Cairn framework with DeepSeek and GLM to breach 10 organizations. Here is what defenders should fix now.
Invincible News
Nitori Says Up to 37.6M Customer Records May Have Leaked
Nitori says up to 37.62 million customer records may have leaked. Passwords and cards are excluded, but phishing risk is high. Here is what to do.
Invincible News
ScreenConnect Panels Abused to Infect 288 Endpoints in 48 Orgs
Attackers used cloud ScreenConnect panels to push rogue clients and the SCKit toolkit to 288 endpoints. Here is what MSPs should check and remove now.
Invincible News
N-central Hotfix Lands After 30+ Zero-Days Leak; Upgrade Now
N-able released N-central 2026.4 HF2 after 30+ zero-day exploits leaked. On-premises admins must upgrade now; N-able upgraded hosted servers itself.
Invincible News
Exploited Outlook Zero-Day Leaks NTLM Hashes; Patch via Office
Microsoft’s November Patch Tuesday fixes an exploited Outlook flaw, CVE-2026-124194, that leaks NTLMv2 hashes. The fix ships via Office updates.
Invincible News
Chrome 157 Update Fixes Exploited XML Zero-Day CVE-2026-125350
Google patched Chrome zero-day CVE-2026-125350, an XML use-after-free it says is exploited. Update to 157.0.8103.50 or later and relaunch the browser.
Invincible News
CISA Flags Exploited GPUStack, FreeSWITCH, Faspex Flaws
CISA added exploited flaws in GPUStack, FreeSWITCH and IBM Aspera Faspex to KEV on Nov. 9. Here are the fixed versions and the steps to take now.
Invincible News
Iris Ohyama Store Breach: 7.7M Records in Cloud Service
Iris Plaza says 7.7 million customer records sat in a cloud service hit by unauthorized access. Here is what was exposed and what shoppers should do.
Invincible News
SEGA Says 2.2M Email Addresses Leaked in Arara Vendor Breach
SEGA says 2,196,044 newsletter email addresses leaked after hackers breached email vendor Arara. No names or passwords exposed; watch for phishing.