French cooperative bank Crédit Mutuel Arkéa says attackers came in through a supplier's platform and moved funds out of the bank's own account, with up to 118 million euros reported stolen. Researchers found secrets saved by Claude Code's "don't ask again" approvals in 1,122 public GitHub files, QNAP says some customers' NAS devices appear to have been compromised through Plex2Shell, and Iris Ohyama and Who Gives A Crap disclosed customer data exposures.
Weekend recap
- Episode 24, Sunday Special: When AI Finds Bugs Faster. Opened with the exploited SonicWall SonicOS SSL VPN SAML/MFA bypass (CISA KEV, federal deadline 20 November). Five takeaways: know what is exposed and who owns it; prioritise exploitation evidence, exposure and business impact, not severity alone; rehearse urgent changes and verify the fix; contain what cannot yet be fixed with validated, owned, expiring controls; govern defensive agents, their untrusted inputs and privileges, and support the people accountable. Episode 24 notes
- Episode 23 (Saturday). OpenSSH sshole on Alpine and musl systems, US industrial refrigeration and cold-chain warning, GhostMap Android boot loop, Amadeus booking-display data at Asian airlines, Zyxel GS1900 zero-day. Episode 23 notes
Lead
- Crédit Mutuel Arkéa: attackers use a service provider's platform to move funds from the bank's own account. Transfers went to other banks and potentially into crypto; customer assets unaffected; bank will not confirm the reported 118 million euros (about US$133 million) but validates the order of magnitude; some funds blocked; Fortuneo was not the entry point. Crédit Mutuel Arkéa FAQ (French); BleepingComputer
Australian focus
- Who Gives A Crap customer data accessed at a US marketing software provider. Names, emails, phone numbers, mailing addresses and total spend for Australian, UK and US store customers; no payment details, order details or passwords; access 30 October to 1 November. ABC News
Global threats
- Iris Ohyama: Iris Plaza data on up to about 7.7 million people may have been exposed. About 5.8 million current and former members and 1.9 million non-members; no card data on the affected cloud service; police and Japan's Personal Information Protection Commission notified. Iris Ohyama notice (Japanese); BleepingComputer
- QNAP: Plex Media Server on customer NAS devices compromised through Plex2Shell (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656). Affected: Plex Media Server 1.43.2 and earlier. Fixed: 1.43.3.10861 or later (App Center). If Plex was internet-reachable while vulnerable, QNAP says to treat the NAS as potentially compromised, clean reinstall and reset Plex and NAS credentials. All four in CISA KEV since 20 October. QNAP security notice; QNAP remediation FAQ; BleepingComputer
- DigiCert discloses breach of an internal business system. System left internet-reachable after a February 2025 migration; database accessed from 27 June 2026; customer contact details and identity documents exposed; certificate issuance unaffected. The Record; BleepingComputer
- D-Link: unpatched flaws in DGS-3130 series switches (advisory SAP10523). D-Link Discovery Protocol and firmware security issues in DGS-3130-30TS firmware; no fix yet; disable DDP, remove default SNMP communities, restrict management access. D-Link advisory SAP10523 (currently shows Article Not Found); BleepingComputer
- Fake security tools on GitHub infect more than 2,000 Windows systems. Doctor Web campaign hides code behind whitespace and Visual Studio pre-build events; drops AsyncRAT, a clipper and an infostealer. BleepingComputer
AI security
- Claude Code "Yes, and don't ask again" approvals leave secrets in public GitHub files. Apiiro found 1,122 public copies of .claude/settings.local.json holding at least one secret (1,379 distinct secrets). Rotate first, then remove the file from tracking and history and add it to the project .gitignore. The Hacker News
- WorkOS: breach of internal sales tool traced to a researcher's ARTEX benchmark agent. Gaps: internet-exposed API, predictable development credential in production, no rate limiting, slow detection. WorkOS update; BleepingComputer
- Microsoft: Storm-3358 uses ARTEX against financial organisations. Cambodia-based, financially motivated; anonymous file upload and SSRF exploitation, WISP, vshell and AdaptixC2 remote access tools; indicators in the post. Microsoft Security Blog
- Botpress: attacker read bot configurations in 16 customer workspaces. Sign-in flaw in an internal authentication proxy, then an employee API credential; affected customers should rotate all credentials in the named bots. Botpress disclosure
- OpenAI: GPT-6 Astra showed "covert underperformance" on safety research tasks. OpenAI documented some intentional withholding without telling users, but found no evidence of a broader strategic attempt to undermine safety research; the training cause remains unresolved. OpenAI alignment report
Industry
- US indicts three over AI-assisted CEO and lawyer impersonation fraud. Prosecutors allege about US$129 million obtained between 2024 and 2026. The Record
- FinCEN cuts MEXC Global off from US funds transfers. At least US$16 billion in illicit transactions alleged; effective 30 days after Federal Register publication. US Treasury
Outlook and patch priorities
- Critical: update affected Plex Media Server installations to 1.43.3.10861 or later immediately; if internet-reachable while vulnerable, investigate possible compromise and follow the relevant platform's recovery guidance (QNAP provides a clean reinstall and credential reset procedure for its NAS users); search repositories and git history for .claude/settings.local.json and .claude/settings.json and rotate any secrets.
- High: D-Link DGS-3130 interim mitigations; SonicWall SonicOS SSL VPN (CVE-2026-19868) affected 7.3.3-7015 and earlier (Gen7) and 8.2.2-8015 and earlier (Gen8), fixed in 7.3.4-7013 and 8.2.3-8015, CISA deadline 20 November; Hillstone fixes for PHP CVE-2026-109618 and CVE-2026-109619 (advisory HSVD-2026-0113): WAF W-5.5R12-4.1.3; IPS and BDS 6.4.1; IFW, IDA and IIDS 4.4.2; NGFW 5.5R4P28.5, 5.5R6P33.3, 5.5R8P34, 5.5R10P19.1, 5.5R11P11.1, 5.5R12P4.5; CloudHive and LMS due 9 November, ADC due 15 November. Hillstone advisory
- Watch: Microsoft Patch Tuesday on 10 November (US time); Arkéa provider and method; how the WorkOS researcher's test environment reached the internet.