Annanim News
Now
Geopolitics & techYandex Cloud: 2.84% of customer data permanently lost after drone strikesCybersecurityChrome and Firefox updates fix more than 180 vulnerabilitiesSpace, satellites & commsReport: SpaceX and Tesla could announce a merger as soon as DecemberGeopolitics & techCongressional Democrats open an inquiry into Nvidia's chip sales to ChinaCybersecurityNew Windows zero-day, SignDrop, gives attackers SYSTEM privilegesChinaChina Watch: Nexperia's interim CEO does not rule out reuniting with its China operationsTools & productsGlobal Microsoft 365 outage disrupts Outlook, Teams and CopilotModels & researchGoogle launches Gemini 4 Hydrogen, a fast coding and agent model replacing 3.8 FlashRoboticsMore stories: Runway's open robotics model, a Claude Code flaw and Marvell layoffsCybersecurityInternational operation takes down Gootloader, CastleRAT and StealC malware infrastructureDefense techElbit wins $260 million deal to supply PULS launchers to a European NATO memberQuantum & precision measurementQuantum software company Q-CTRL raises $290 million and becomes a unicorn

Thursday, 12 November 2026

23 stories

Attacker used 4,837 hijacked GitHub accounts to steal CI secrets from over 1,800 repositories

Since Tuesday, an attacker has used compromised GitHub accounts to plant code that steals cloud keys and secrets from repositories' CI workflows. According to Aikido Security, the stealer ran in at least 1,806 repositories, and probe pull requests reached 61,764.

Critical Apache HTTP Server flaw allows remote code execution; Anthropic and Google found it

Apache released HTTP Server 2.4.71, fixing a critical flaw (CVE-2026-119618) in its HTTP/2 module that lets an unauthenticated attacker run code on servers with HTTP/2 enabled. Anthropic's open-source scanner and Google Cloud researchers reported it independently.

China Watch: Alibaba moves ahead with a Hong Kong IPO of its T-Head chip unit

Five stories from China: Alibaba was cleared to proceed with spinning off its T-Head chip unit for an IPO, Qwen4-Max opened in preview, Huawei detailed how the Kirin 9050 runs a 30-billion-parameter model on a phone, startup Zhengyuan Quantum raised an angel round for a 1,000-qubit computer, and Huawei confirmed a new phone brand, OSTA.

Active ScreenConnect attacks: six IT service providers breached, dozens of organizations hit

ConnectWise is investigating an active campaign against managed service providers (MSPs) that use ScreenConnect. According to Huntress, six providers and more than 286 computers at 47 organizations have been hit, and the numbers are rising. ConnectWise disabled five third-party extensions across about 400 environments.

Install the app

In Safari: tap the Share button, then “Add to Home Screen”.