Commonwealth Sentinel

D-Link warns that its DGS-3130 series switches, built mainly for small and midsize businesses, carry several unpatched flaws, and it advises turning off its Discovery Protocol until new firmware arrives. Full report in the reply. #CyberSecurity

Democrats plan to renew the lapsed state and local cyber security grant program and press CISA on staffing after taking Congress in January, Cybersecurity Dive reports. Full report in the reply. #CyberSecurity

WordPress sites can still be attacked during the update that installs the fix for an exploited flaw, and the researcher advises blocking the wp-content/upgrade folder first. Full report in the reply. #CyberSecurity #WordPress

In early 2024, criminals hijacked the numbers of dozens of AT&T customers and used texted login codes to reach their accounts, one reportedly losing nearly $1 million; our full article is in the reply. #CyberSecurity

CISA flags a SonicWall flaw that can let attackers with a valid password skip the second login step on remote access, and SonicWall advises updating SonicOS now. Full report in the reply. #CyberSecurity

CISA and the FBI warn that attackers are tampering with refrigeration controllers in grocery stores and cold storage, forcing units into heating cycles and hiding the temperatures. Full report in the reply. #CyberSecurity

This week in Cyber Security: a fake job interview behind a $6.34B Binance theft, an exploited WordPress core flaw, a DigiCert breach, a SonicWall MFA bypass, and an OpenSSH bug hit within hours. Link in the reply below.🔗 👇️ #CyberSecurity #InfoSec

Queens Public Library confirmed a ransomware attack Wednesday that hit its website, public Wi-Fi, app, and check-out machines, though branches remain open and no group has claimed it so far. Full report in the reply. #CyberSecurity

A team member who had never used ChatGPT turned one of our articles into a video in under an hour, against six to eight hours by hand; our full write-up is in the reply. #AI

Election security trackers reported limited threats on Election Day, and a former CISA official said there was no evidence of significant cyber incidents so far. Nextgov/FCW has the full report in the reply. #CyberSecurity

Malware on one computer can lock files, spread across the office network, and copy personal data for sale, and a recent backup is the surest way back; our full article is in the reply. #Ransomware

Google's November bulletin fixes 216 Android flaws, including a Critical one that needs no user action, and Google reported no attacks as of November 4. Check for a security patch level of 2026-11-05 or later. Full report in the reply. #CyberSecurity

Mismatched shadows, slightly unnatural movement, and audio out of step with the speaker can give a deepfake away; our full article on spotting them is in the reply. #Deepfakes

JCPS says a breach tied to vendor Frontline Education may have exposed Social Security numbers and home addresses of more than 37,000 current and former workers, who are being offered free credit monitoring. Full report in the reply. #BreakingNews #CyberSecurity

A cyberattack disrupted cold storage monitoring at three French blood banks, and staff moved blood products to unaffected refrigerators, though the French Health Ministry says supplies were not affected. Full report in the reply. #CyberSecurity

A factory reset leaves recoverable files on many old drives, and printers, routers, and smart TVs hold data too; our full article on safe disposal is in the reply. #CyberSecurity

Microsoft researchers found that about 2,000 of roughly 383,000 disclosed software flaws have been linked to real-world attacks, and 78% of those hand an attacker control of a system. Full report in the reply. #CyberSecurity

A widely cited figure holds that 94% of malware arrives by email, dressed up as a bank, a coworker, or a vendor; our full article on why, and what helps, is in the reply. #CyberSecurity