infosecintel – Curated Information Security Articles and Threat Intelligence News

Claude Code’s “Don’t Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

November 7, 2026

Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. When a user selects “Yes, and don’t ask again,” Anthropic’s AI coding assistant can save the command, word-for-word, including the secret, in a project settingsRead More »Claude Code’s “Don’t Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

Friday Squid Blogging: New Jurassic Squid Predecessors

November 6, 2026

News story: “Scientists discover a bizarre Jurassic ‘squid’ unlike anything ever seen.” Scientists have identified the “fattest” belemnite ever discovered, a bizarre, barrel-shaped squid relative that lived in Wyoming’s ancient seas 160 million years ago. The exceptionally rare fossils reveal a creature unlike anything previously known, potentially a predator ofRead More »Friday Squid Blogging: New Jurassic Squid Predecessors

Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks

November 6, 2026

The emergency package comes after dozens of companies and government agencies were hit by unauthorized access to their systems and leaks of client data, prompting uneasiness across Japan. The post Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks appeared first on SecurityWeek.

Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time

November 6, 2026

Some WordPress sites can still be attacked while they install the fix for an actively exploited flaw, according to Umut Bayram, the Picus Security researcher who found it. The update that installs the fix still unpacks its files using the site’s old, unpatched code, so an attacker who strikes atRead More »Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time

Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot

November 6, 2026

Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian. The vulnerability, tracked as CVE-2026-123158 (CVSS score: 8.1) and codenamed SSHole (or *sshole), impacts Linux systems that run OpenSSH on the musl CRead More »Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot

OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits

November 6, 2026

OpenAI on Thursday unveiled GPT‑6 Cyber, which it described as a major step forward in security research that brings together stronger cybersecurity capabilities with a step-change improvement in model alignment. The new model is “more capable at finding and fixing vulnerabilities, and far more reliable staying within the boundaries researchersRead More »OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits

Pinpointing Location of Videos from Background Airplane Sounds

November 6, 2026

This is fascinating: The video describes a technique that can reveal where an otherwise unidentifiable recording was made by analyzing its audio for the faint sounds of passing aircraft. The technique is both fascinating and frightening. It works by looking at Doppler curves, which plot the way a plane’s soundRead More »Pinpointing Location of Videos from Background Airplane Sounds

In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days

November 6, 2026

Noteworthy stories that might have slipped under the radar: Synology warns about NAS ransomware attacks, Flowise ‘hello’ attacks, Chainalysis breach impact expands. The post In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days appeared first on SecurityWeek.

DigiCert Data Breach Impacts Business Customer Information

November 6, 2026

Hackers created an account on an internal system and accessed names, email addresses, phone numbers, and business addresses. The post DigiCert Data Breach Impacts Business Customer Information appeared first on SecurityWeek.

OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line

November 6, 2026

Rated Critical for cybersecurity, OpenAI’s new model beats GPT-5.6 Cyber at exploitation while staying in scope more reliably. The post OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line appeared first on SecurityWeek.