Storm Watch | Cyber News | MFA & Cybersecurity: Crypto-Miner Takedown, Ivanti Debacle, and AI-Enhanced Phishing

Summary: This GreyNoise podcast episode covers a mass crypto-miner takedown reported by the Ukrainian Cyber Police and Bleeping Computer, the Ivanti debacle as detailed in a Volexity blog post, and two X account hacking events involving the SEC and Mandiant. It also covers the NSA's warning about AI-enhanced phishing, new twists in the Stuxnet story, the Orrick breach, a Juniper vulnerability from Censys, and a roundup of CISA known exploited vulnerabilities.
Why it matters: The episode ties together a mass crypto-miner takedown, hacked X accounts at the SEC and Mandiant, and an NSA warning on AI-enhanced phishing - a reminder that the same week produced both commodity attacks and compromises of organizations whose job is to defend others.

Read the original at GreyNoise Blog ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026