THREATNOIR
Subscribe

Today's Brief

Two briefings a day — morning and evening.
Get the full story, or explore it in audio and video formats.

All times in your local time (CET) Last updated: 05:11
PRIMARY BRIEF
START HERE

Morning Brief

November 13, 2026•07:30 LATEST HIGH

ThreatNoir Morning Brief — November 13

  • •US seizes North Korean APT38 infrastructure, $1.2B Binance theft
  • •N-able N-central zero-day exploited hours after PoC
  • •Critical Apache HTTP/2 race condition RCE
  • •Patch Tuesday fallout and the power of asking questions
~3 min read 5 IOCs
Updated 6h ago
LATER TODAY

Evening Brief

November 12, 2026•18:00MEDIUM

ThreatNoir Afternoon Brief — November 12

  • •Critical Red Hat Quay Vulnerability
  • •60,000 GitHub Repos Hit in Credential Theft
  • •Chromium Zero-Day Under Active Exploitation
  • •PHP2Shell and Node2Shell Runtime Flaws
~3 min read 6 IOCs
QUICK SCAN — Overnight Activity

Key developments from the past 12 hours.

View all 4
1

Grok AI App Builder Exposes Over 35,000 Apps, Leaking Confidential Business Data and Passwords

HIGH13h ago
2

4EverAble2Shell: N-central Hotfix 2 Servers Taken to Root Hours After PoC Dropped

HIGH1h ago
3

Citrus ransomware abuses Group Policy to push Sn00py and disable Microsoft Defender across domains

HIGH1d ago

EXPLORE THIS BRIEFING

Different ways to consume today's brief.

RED VS BLUE
1:40

React Server Components Open Door to Unauthenticated RCE

A critical vulnerability in React Server Components (GHSA-xqc2-xf4c-x3h3) allows unauthenticated remote code execution through malformed typed arrays in server responses across react-server-dom-webpack, parcel, and turbopack.

Watch breakdown
SHORT
SHORTS:60

2 stories in 60 seconds

Quick overview of today's
key events.

Watch on YouTube
Get the weekly roundup

The week in security, every Sunday. No spam. Unsubscribe anytime. Privacy

Prefer a feed reader? Follow by RSS

Indicators of compromise (IOCs) and source links are included in each full brief.