Today's brief_
The five threats defenders should see today
- 01
AGENTMediumAIBOSSAI AI agents used to access systems and collect data, Acronis saidThe agents pulled emergency-dispatch records covering seven Taipei districts and accessed patient data exposed without a login, Acronis said. - 02
AI-ATKMediumPHISHFake OpenAI, SpaceX and Anthropic event pages blocked in phishing campaignPush Security blocked visits to fake OpenAI, SpaceX and Anthropic event pages in late October 2026; HKCERT reported the campaign on Nov 5. - 03
SUPPLYMediumAWSQubole AWS integrations abused to access customer environmentsWiz observed a threat actor using IAM credentials from an AWS account associated with Qubole between Oct 14 and Oct 26, 2026. Wiz published its report on Nov 9. - 04
AGENTMediumMCPMittwald MCP server flaw exploited, 56 projects compromisedMittwald said attackers exploited a flaw in its MCP server and compromised 56 customer projects after going undetected for eight days. - 05
LEAKMediumDATAIris Plaza data exposure could affect 7.7 million peopleIris Ohyama disclosed possible exposure of Iris Plaza personal information affecting about 7.7 million people, BleepingComputer reported. The company published its report on Nov 5, 2026.