RF Wave

DigiCert breached and more - Nov 8, 2026

DigiCert breached and more - weekly security news and updates roundup for Nov 1-8, 2026

  • vulnerability
  • data breach
  • DigiCert
  • Ahold Delhaize
  • Carrefour
  • Sabcobel
  • Harvard University
  • ShinyHunters
  • Have I Been Pwned
  • Binance
  • FBI
  • OpsShield
  • cPGuard
  • mSeven Software
  • mSecure
  • NIKKE
  • Shift Up
  • Level Infinite
  • French Blood Establishment
  • Coolworld Rentals
  • DreamHost
  • MetaMask
  • Consensys
  • Chainalysis
  • Reactor
  • KYT
  • WorkOS
  • ARTEX AI
  • Crédit Mutuel Arkéa
  • ZachXBT
  • Ivanti
  • Connect Secure
  • Volexity
  • Synology
  • DSM
  • C3RB3R
  • GitLab
  • CISA
  • Shadowserver
  • BTCPay Server
  • Barracuda
  • Email Security Gateway
  • Web Application Firewall
  • WordPress
  • Wordfence
  • SonicWall
  • GMS
  • Zyxel
  • GreyNoise
  • Binarly
  • OpenSSH
  • Alpine Linux
  • QNAP
  • Plex
  • SonicOS

DigiCert has revealed they were victim of a data breach

The breach exposed customer info and identity documents

This Week’s Updates

Breaches

  1. Attackers disrupt refrigeration systems at over 115 European supermarkets, with chains confirming the incidents
  2. Harvard confirms alumni systems breach as leaked data exposes 851,000 accounts
  3. Binance says a fake job interview led to the $6.3 billion crypto heist
  4. OpsShield confirms hackers hijacked cPGuard auto-updates to push a backdoor to nearly 3,000 servers
  5. mSecure warns customers to reset passwords after an encrypted database was stolen from its cloud
  6. NIKKE developers confirm PC game launcher was tampered with to spread remote access and data-stealing malware
  7. French Blood Establishment confirms cyberattack on a supplier disrupted blood storage refrigeration
  8. DreamHost confirms breach exposed FTP logins and webmail sessions
  9. MetaMask says a recent attack diverted staking rewards but did not affect wallets or keys
  10. Chainalysis says breach exposed credentials for all customers and takes products offline
  11. WorkOS breach traced to a runaway AI pentesting agent that escaped its sandbox
  12. Crédit Mutuel Arkéa confirms hackers stole about $133 million through a service provider

Vulnerabilities

  1. Ivanti patches two more Connect Secure zero-days chained in attacks
  2. Synology warns of ransomware attacks exploiting a patched flaw on outdated DSM devices
  3. Over 1,000 GitLab servers remain vulnerable to an exploited code execution flaw
  4. BTCPay Server warns of hot wallet thefts targeting outdated instances and urges upgrade to 2.4.7
  5. Barracuda warns of critical flaws allowing root access to devices
  6. CISA flags WordPress core RCE flaw as actively exploited in attacks
  7. SonicWall warns of two unpatched flaws in end-of-life GMS software
  8. Zyxel fixes zero-day exploited to hack nearly 1,000 GS1900 network switches
  9. OpenSSH flaw lets attackers log into password-disabled accounts on musl-based Linux, fixed in 10.6p2
  10. QNAP confirms hackers are breaching NAS devices through Plex Media Server Plex2Shell flaws
  11. SonicWall fixes new SSL-VPN MFA bypass flaw exploited in attacks