Meanwhile in Cybersecurity November 9th till 13th, 2026

United States

• Vanderbilt University ransomware attack. The BYOD ransomware gang claimed it encrypted the university’s databases and stole sensitive student and employee data, including Social Security numbers. Vanderbilt hasn’t confirmed those claims and is bringing campus systems back online.
  BleepingComputer · Malwarebytes cybernewsmalwarebytes

• N-able N-central platform pulled offline. N-able took its hosted N-central environments offline and told on-premises customers to shut down their servers after a researcher publicly disclosed more than 30 alleged zero-day flaws. N-central is a remote management tool, so a compromise could expose many customers’ systems.
  BleepingComputer · Huntress Bleeping Computer

• Notion AI chat exposure. A security incident at Notion’s AI vendor, Fireworks AI, exposed AI chat transcripts in fewer than 1% of workspaces.
  Security Check-in roundup Substack

• Microsoft 365 outage (not confirmed as an attack). A global outage continued into Friday, disrupting Outlook email and some Teams features. Microsoft had not confirmed the root cause.
  Cointelegraph · Outlook India Cointelegraphoutlookindia

Florida

• Seminole County court records cyberattack (ongoing). The clerk’s office shut off public access to court and official records after detecting a breach. A Nov 12 headline links it to Russian hackers. I saw only the headline, so the strength of that attribution is unclear.
  ClickOrlando · Spectrum News 13 clickorlando

• Florida Department of Education student aid breach (disclosed ~Nov 2). Unauthorized access to its student financial aid website potentially affected about 4.9 million people. Social Security numbers and other personal data may have been exposed.
  SecurityWeek · Intelligent CISO intelligentcisosecurityweek

• Florida DMV “DAVID” database breach (September, still in the news). The state confirmed the breach after the ShinyHunters gang claimed to have stolen more than 200,000 driver records. The state traced it to credentials belonging to a single Plant City police user. The 200,000 figure is the hackers’ claim, not an official count.
  Fox News · NBC Miami oodaloopFox News

European Union

• Operation Endgame malware takedown. Police in nine countries, working with Europol, took down servers behind the Gootloader, CastleRAT and StealC malware and recovered more than 6 million stolen credentials.
  Help Net Security · CyberScoop helpnetsecurity

• France blames Iran for supermarket attacks. France attributed the Oct. 11–12 attacks on refrigeration systems at about 700 stores to an Iranian military hacking unit, citing food losses and at least 15 fires. It plans to summon Iran’s ambassador and propose EU sanctions. A separate wave hit stores in seven countries in early November. No one has claimed responsibility for it. The US has also issued warnings about the same type of attack.
  Axios · The Register · Cybernews France blames Iran for supermarket fridge hacks +2

• Maersk data breach. The extortion group WhiteArmor claims to have stolen about 100 GB from a logistics platform tied to the former LF Logistics business and demands $5m. Maersk says its findings so far strongly suggest no sensitive data was disclosed.
  BleepingComputer · Infosecurity Magazine portnewsportnews

• Baltic SMS leak (CSC Telecom). More than 125 million text messages may have leaked from the Latvian branch of CSC Telecom, potentially affecting people and businesses across the Baltics. Swedbank suspended its use of the provider’s services.
  Cybernews · ERR News errjauns