Daily digest,
Widespread Microsoft 365 Outage Disrupts Global Services (+4 more)
Vulnerabilities
Widespread Microsoft 365 Outage Disrupts Global Services
On November 12, 2026, Microsoft experienced a significant outage affecting its 365 services, including Outlook, Teams, and Copilot, due to a large number of servers becoming unexpectedly unavailable. Initially reported in the Americas, the outage quickly spread globally, impacting users' ability to access Exchange Online mailboxes and other services. Over 130,000 users reported issues on Downdetector, with connectivity errors persisting across multiple connection methods. Microsoft attributed the problems to elevated load on remaining infrastructure, not increased traffic, and began implementing fixes. The incident coincided with reports of an actively exploited vulnerability in Outlook, identified as CVE-2026-124194, although no direct link between the two has been confirmed. Microsoft is actively working to restore services and has paused all deployments to mitigate further issues.
Vulnerability · 19 sources · score 66 · CVE-2026-124194
Breaches
SafePal Data Breach Leads to Phishing Letters Targeting Customers
SafePal, a hardware wallet manufacturer, disclosed a data breach on August 16, 2026, affecting approximately 39,798 customers. The breach was caused by an authorization flaw in an order-tracking plugin, exposing names, email addresses, shipping addresses, phone numbers, and purchase details, but not sensitive financial data. Following the breach, scammers began sending fraudulent physical letters to affected Italian customers, containing QR codes that link to phishing sites masquerading as official SafePal communications. The letters falsely claim that the recipients' wallets have firmware flaws, prompting them to enter their recovery phrases on the fake sites. SafePal has confirmed the letters are scams and has taken down over 30 fraudulent websites. The company has implemented measures to notify affected customers and engage third-party auditors to enhance security.
Breach · 3 sources · score 62
Russian Hackers Target Seminole County Court Systems in Cyberattack
A cyberattack linked to Russian hackers forced Seminole County's Clerk of the Circuit Court to shut down online access to court records for over two weeks. The breach affected internal systems, but public access portals remained secure. Clerk Grant Maloy stated that the attack did not compromise the public-facing website, and services are expected to be restored soon. Investigations are ongoing to determine what information may have been accessed. The incident has been reported to the FBI and Florida Department of Law Enforcement. In-person services continue to be available during the outage.
Breach · 2 sources · score 60
Threat actors and malware
AI-Enhanced Scams Surge in 2026, Doubling Online Fraud Incidents
Akamai's report reveals that online scams nearly doubled in 2026, rising from 3.2 million to approximately 6.4 million incidents. This marks a significant shift as online scams have surpassed traditional phishing attacks for the first time. The report attributes this increase to attackers pivoting towards higher-return scams, utilizing AI to create more sophisticated phishing templates and social engineering tactics. AI is also being used to impersonate popular services, leading to new forms of 'AI phishing'. Despite MFA becoming a standard security measure, attackers are adapting their strategies for quicker financial gains. The report indicates that traditional phishing attacks still grew by 61% in the same period, highlighting the ongoing threat of credential theft. Organizations are advised to monitor these evolving tactics closely as they pose a significant risk to financial security.
Phishing · 2 sources · score 62
Also worth knowing
CEOs Face Rising Threats from Deepfakes and Disinformation
In 2026, CEOs are increasingly challenged by deepfakes and disinformation campaigns that threaten corporate reputation. These threats can originate from hacker groups, state actors, or individuals using AI technology to create convincing false narratives. Notably, a cyberattack on Stryker, attributed to an Iran-affiliated group, aimed to undermine brand credibility rather than infrastructure. Crisis communicators emphasize the need for rapid verification and integrated response strategies to mitigate damage from misinformation. The rise of AI-generated content complicates traditional crisis management, requiring leaders to prioritize digital defense and proactive reputation management. Companies must adapt their crisis plans to address the multifaceted nature of these threats, ensuring that communication teams are integrated into the response process from the outset. The urgency of these issues is underscored by the potential for deepfakes to disrupt trust and operations before they can be debunked.
Disinfo & Influence · 2 sources · score 56
New on leak sites
100 victims listed on ransomware leak sites by 15 groups in the 24 hours before this issue. The most active:
Also moving
- CVEs: CVE-2026-109618, CVE-2026-109619, CVE-2026-118383, CVE-2026-124194, CVE-2013-2729
- Ransomware groups: Lockbit, Alphv/Blackcat, Cl0p
- Vulnerabilities: Log4Shell, Action Pack Page Caching Vulnerability, Active Directory Domain Services Elevation Of Privilege Vulnerability, Active Directory Domain Services Remote Code Execution Vulnerability, Adobe Acrobat XI Double Free
- Campaigns: Operation TorNado, ClickFix Campaigns, CL-STA-1238
- APT groups: Alluring Pisces, APT 31, BlueNoroff, CageyChameleon
- Malware: Atomic Stealer, CastleRAT, ClickFix
Get the next one by email
The digest is free and arrives every morning. One click to leave.
A free account turns the digest into a personal watchlist: choose what you want to follow.