Ivanti patches two more chained Connect Secure zero-days
On the radar
05 TOP STORIESBleepingComputer · 3 min read
Ivanti patches two more chained Connect Secure zero-days
Ivanti released fixes for two further Connect Secure zero-days that attackers chained in intrusions active since at least October 1. The summary lists no CVE ids or fixed version numbers, so it is unclear whether these match the Connect Secure CVEs already on CISA's KEV list. Edge VPN appliances are a repeat entry point, so patch and review logs back to early October.
The Hacker News · 6 min read
VOLTA infostealer uses Claude, Gemini and Kimi to rank victims
Researchers found VOLTA-AUTODOXER, a Windows infostealer that sends stolen data to Claude, Gemini and Kimi to rank victims by monetization value. Attackers are using commercial LLM APIs to triage loot at scale. Expect API-provider abuse controls and egress monitoring for LLM endpoints to become relevant detection points.
LWN.net · 1 min read
Linux 7.4-rc1 closes largest merge window in kernel history
Linus Torvalds announced 7.4-rc1 after a merge window cited as the largest ever, with AI-assisted changes a stated factor. Phoronix lists performance gains, Zen 6 groundwork and AMDGPU HDMI 2.1 enabled by default. Torvalds says the kernel has left its stabilization phase and now uses a healthier model for AI-generated patches.
Hacker News (front page) · 13 min read
China announces first frontier AI export controls
China's Mofcom Announcement No. 48 introduces its first export controls on frontier AI technology, according to a Cloud Security Alliance research note. The summary gives no scope or effective date. It signals that AI model and technology transfer is now being regulated from China's side as well, which matters for multinational AI supply chains.
Hacker News (front page)
Trigger.dev discloses incident exposing customer environment variables
Trigger.dev reported a November 2026 security incident that exposed customer environment variables. The summary gives no cause or scale. Environment variables usually hold API keys and database credentials, so affected customers should rotate every secret stored in the platform.
Go a little deeper
EXPLORE BY TOPIC- 37 articles
Cyber security
Real incidents today were developer-infrastructure compromises and a possible airline breach. Most of the volume was arXiv work on LLM agent attacks and defenses, much of it showing that current detectors and evaluations are weaker than reported.
Read 8 updates - 14 articles
Tech industry
Component costs, surveillance contracts and infrastructure deadlines led the day. Several items touch the cost and public acceptance of AI-era infrastructure.
Read 8 updates - 26 articles
AI
Policy and economics dominated: India floated a data-local AI plan, an Apollo economist questioned corporate AI returns, and OpenAI changed its plan structure. The research items center on agent privilege and safety.
Read 7 updates - 13 articles
IT & infrastructure
The Linux 7.4 cycle dominated, with AI-assisted contributions as the recurring theme. Operations news included Let's Encrypt's shorter certificates and the end of the 7.2 stable series.
Read 8 updates - 18 articles
CS & research
A thin day for non-AI research. The notable items are cryptographic primitives and policy synthesis, plus a few systems write-ups from Lobsters.
Read 6 updates