Mittwald MCP Server Breach: An Attacker Used a Web Host's AI Assistant Connector to Compromise 56 Customer Projects, What Is Confirmed and What to Check
AI Security Nov 9, 2026

Mittwald MCP Server Breach: An Attacker Used a Web Host's AI Assistant Connector to Compromise 56 Customer Projects, What Is Confirmed and What to Check

German web host Mittwald says an attacker got in through the MCP server customers use to connect AI assistants, compromising 56 projects. Here is what is confirmed, what is only claimed, and what to check this week.

8 min read
DeepSeek AI Agent Breach: Operation Snowball Report Claims a Jailbroken Agent Reached Millions of Patient Records Through a European Telecom, What Is Confirmed and What to Check
AI Security Nov 9, 2026

DeepSeek AI Agent Breach: Operation Snowball Report Claims a Jailbroken Agent Reached Millions of Patient Records Through a European Telecom, What Is Confirmed and What to Check

Malbear Labs says a jailbroken DeepSeek agent attacked a European telecom for over two weeks and reached millions of patient records. Here is what is claimed, what is confirmed and what to check this week.

7 min read
AI Regulation Compliance: California's New AI Laws, the EU's New Deadlines, and How to Prove a Human Checked the Decision
AI Security Nov 9, 2026

AI Regulation Compliance: California's New AI Laws, the EU's New Deadlines, and How to Prove a Human Checked the Decision

California has limited AI-only firing and created a registry for AI auditors, and the EU has moved its high-risk AI deadlines. Here is what is confirmed, what is not, and what businesses should check this week.

7 min read
Who Gives A Crap Data Breach: Customer Details Accessed at a Marketing Software Vendor, What Is Confirmed and What Businesses Should Check
Data Breaches Nov 9, 2026

Who Gives A Crap Data Breach: Customer Details Accessed at a Marketing Software Vendor, What Is Confirmed and What Businesses Should Check

Who Gives A Crap says names, contact details and spending totals were accessed at a US-based marketing software provider. Here is what is confirmed, what is not known, and what to check with your own vendors this week.

7 min read
Cold Chain Cyberattack Warning: CISA and FBI Say Refrigeration Controllers Are Being Targeted, What Is Confirmed and What to Check
Cameras, IoT & Industrial Nov 9, 2026

Cold Chain Cyberattack Warning: CISA and FBI Say Refrigeration Controllers Are Being Targeted, What Is Confirmed and What to Check

Five US agencies warn that attackers are targeting industrial refrigeration and cold chain controllers. Here is what is confirmed, what is not, and what food, pharmaceutical and logistics businesses should check this week.

7 min read
Crédit Mutuel Arkéa Hack: About €100 Million Stolen Through a Supplier Platform, What Is Confirmed and What to Check
Data Breaches Nov 9, 2026

Crédit Mutuel Arkéa Hack: About €100 Million Stolen Through a Supplier Platform, What Is Confirmed and What to Check

Crédit Mutuel Arkéa says attackers reached it through a supplier's platform and moved money out of the bank's own account. What is confirmed, what is only claimed, and how to check your own supplier access.

7 min read
Crédit Mutuel Arkéa Cyberattack: Attackers Came In Through a Vendor and Took Over 100 Million Euros, What Is Confirmed and What to Check
Data Breaches Nov 9, 2026

Crédit Mutuel Arkéa Cyberattack: Attackers Came In Through a Vendor and Took Over 100 Million Euros, What Is Confirmed and What to Check

Crédit Mutuel Arkéa says attackers came through a service provider's platform and used the bank's own account to move money. Over 100 million euros is reported stolen. Here is what is confirmed and what is not.

7 min read
Operation Snowball: Researchers Say an Autonomous AI Attacked a European Telecom for Two Weeks, What Is Confirmed and What to Check
AI Security Nov 9, 2026

Operation Snowball: Researchers Say an Autonomous AI Attacked a European Telecom for Two Weeks, What Is Confirmed and What to Check

Malbear Labs says an exposed workspace shows an AI agent attacking a European telecom for more than two weeks with little human direction. Here is what is claimed, what is confirmed and what to check.

7 min read
Moldova Cyberattack: State Actor Suspected After Citizen Data Was Taken From Government Systems, What Is Confirmed and What to Check
Data Breaches Nov 8, 2026

Moldova Cyberattack: State Actor Suspected After Citizen Data Was Taken From Government Systems, What Is Confirmed and What to Check

Moldova says hackers accessed the personal data of about 450,000 citizens through government digital services. The prime minister suspects a state actor but has named none. Here is what is confirmed and what businesses should check.

7 min read

Security alerts by email

The next security hole is already out there. Hear about it from us first.

When attackers start using a flaw in software businesses run on, we email what it is, whether it touches you and what to do that week, with a round-up of our latest security writing. Free, one-click unsubscribe. You get the checklist straight away: 12 things to secure this week.

Protected by reCAPTCHA - Privacy and Terms.