Arctic Wolf connected infrastructure hosting the AI pentesting platform AntiFox to real web and cloud intrusions. One burst generated hundreds of AWS requests in about half an hour; the observed activity included successful secret access and cloud-storage operations.
Key-handling failures widened the incident.
SCKit targets connecting technicians, but researchers have not observed that spreading route succeed. Updating a cloud console does not update local clients.
Aikido links wfx-loot to 4,837 compromised accounts and malicious automation that can disappear from ordinary code history.
Fewer than 1% of workspaces were affected, Notion says. The company disabled Insights and revoked exposed Notion API keys found in messages.
A hacker on underground forums claims to have 46,000 records (6.9 GB) of TSMC employee data and is asking 3 bitcoin. On Nov. 12, TSMC confirmed some current and former employees' data was posted without authorization and said it matches data held by a cloud service provider, with no evidence its own systems were breached and no production or customer data involved.
Most cyberattacks steal data or demand ransom; this one physically wrecked equipment. On November 9, France's Foreign Ministry said hackers broke into refrigeration controls at more than 700 retail sites on the night of October 11-12, driving some freezers from about -27C to above 50C, causing at least 15 fires and tens of millions of euros in spoiled food. Paris blamed Shahid Kaveh, a cyber unit affiliated with Iran's Islamic Revolutionary Guard Corps, called it the first purely destructive offensive cyber campaign on French soil, and said it would summon Iran's ambassador and seek E.U. sanctions. This is an official French attribution, not an independent verdict.
NIST and CISA issue NIST IR 8587, providing implementation guidelines for token security, responding to Executive Order 14306 and enhancing token management.