Signal Check

This episode covers a major international law enforcement operation that seized six million stolen credentials and dismantled three malware platforms, plus two active zero-day exploits hammering Check Point firewalls in the wild. Adrian breaks down why these coordinated takedowns matter and what the sophisticated attacks mean for anyone running vulnerable gateways. It's the security news that moved while the world was offline.

Stories covered:

- Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins (The Hacker News) - https://thehackernews.com/2026/11/operation-endgame-takes-down-gootloader.html

- Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files (The Hacker News) - https://thehackernews.com/2026/11/hackers-exploit-php2shell-flaws-in.html

- Check Point warns of zero-day flaw exploited for root access (BleepingComputer) - https://www.bleepingcomputer.com/news/security/check-point-patches-zero-day-that-lets-hackers-get-root-access/

- SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users (The Hacker News) - https://thehackernews.com/2026/11/silentair-hijacks-asian-telecom.html

- 6 Budget Running Watches That Deliver Accurate GPS, Long Battery Life, and Much More (Runner's World) - https://www.runnersworld.com/gear/a20826961/best-basic-watches-for-runners/

- With Starship catch, SpaceX still shows it can dazzle the world (Ars Technica) - https://arstechnica.com/space/2026/11/with-starship-catch-spacex-still-shows-it-can-dazzle-the-world/

This episode digs into a brutal week for Check Point with two major exploits hitting their security gateways, plus a chilling supply chain attack involving hardware-modified Trezor wallets and a freshly-dropped Windows privilege escalation exploit. Adrian breaks down why these aren't just technical headaches — they're Monday morning problems that need weekend attention.

Stories covered:

- Check Point warns of zero-day flaw exploited for root access (BleepingComputer) - https://www.bleepingcomputer.com/news/security/check-point-patches-zero-day-that-lets-hackers-get-root-access/

- Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files (The Hacker News) - https://thehackernews.com/2026/11/hackers-exploit-php2shell-flaws-in.html

- Trezor confirms crypto-stealing implants in three wallets, releases fix (BleepingComputer) - https://www.bleepingcomputer.com/news/cryptocurrency/trezor-confirms-crypto-stealing-implants-in-three-wallets-releases-fix/

- New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access (The Hacker News) - https://thehackernews.com/2026/11/new-signdrop-zero-day-exploit-turns.html

- I’m Anti-Fitness Tracker—But Google’s Fitbit Air Changed My Mind (Runner's World) - https://www.runnersworld.com/gear/a74400048/google-fitbit-air-review/

- FAA orders third nationwide ground stop in its history (Ars Technica) - https://arstechnica.com/tech-policy/2026/11/faa-orders-third-nationwide-ground-stop-in-its-history/

This episode covers a chaotic Friday the thirteenth in tech, from Microsoft's massive global outage crippling Outlook and Teams to a dangerous new Windows zero-day exploit called SignDrop that gives attackers full system control. We dig into fresh vulnerabilities hitting PTC enterprise software and N-able's platform, where hackers exploited a flaw within hours of its public disclosure to drop crypto miners on compromised servers.

Stories covered:

- Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwide (BleepingComputer) - https://www.bleepingcomputer.com/news/microsoft/massive-microsoft-365-outage-disrupts-outlook-teams-copilot-worldwide/

- PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution (The Hacker News) - https://thehackernews.com/2026/11/ptc-patches-critical-windchill-and.html

- New Windows SignDrop zero-day gives hackers SYSTEM privileges (BleepingComputer) - https://www.bleepingcomputer.com/news/security/new-windows-signdrop-zero-day-gives-hackers-system-privileges/

- New N-able "4EverAble2Shell" zero-day exploited hours after PoC released (BleepingComputer) - https://www.bleepingcomputer.com/news/security/new-n-able-4everable2shell-zero-day-exploited-hours-after-poc-released/

- A 75-Year-Old Finished the Athens Marathon Barefoot and Dressed as an Ancient Warrior (Marathon Handbook) - https://marathonhandbook.com/athens-marathon-barefoot-75-year-old/

- FBI: North Korean hackers have stolen $400 million in crypto over last 18 months - The Hill (The Hill) - https://news.google.com/rss/articles/CBMihwFBVV95cUxOM1lMTFV6MGJKYWR3SEtRa2JGZlNwVzduZUxPOUxFVlBZNnp5bGdMakJPbFp3dDVtQm8yc3VWS0wza21sbkt4WEx0NzgzUkNIbzlPT2RVWEQ2ekZfbzRTOUVma0R2aDhvd0x5LUc4UFR5WkM2aG1KVFNFSW5BalhsMVM4Q2NFWGfSAYwBQVVfeXFMT19MVWQwRFpKQkNiT0hPMUNCOXNBQVcyQk5LQnRIWm5JNlRvYjY4SnJreENETDRRZWtieE42TUZYMUxLSFBJTGpLckJ0VlVhTmVYempVOWN3ZXdFMmFobE9KNmFEZ21VTEs5NW5wVHU5SjRsU2VnTXJIcVVXM29xWVQwUkFOdVFEY2JEQnY?oc=5

This episode digs into six critical security signals hitting before sunrise, from a remote code execution flaw in a widely-used AI inference engine to ransomware groups exploiting MSP trust chains. Adrian North breaks down active threats targeting everything from open-source infrastructure to cloud environments, delivered in that narrow window before the day's chaos begins.

Stories covered:

- SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users (The Hacker News) - https://thehackernews.com/2026/11/sglang-rce-exploit-breaches-near-ai.html

- Active ScreenConnect attacks breach MSPs, impact dozens of organizations (BleepingComputer) - https://www.bleepingcomputer.com/news/security/active-screenconnect-attacks-breach-msps-impact-dozens-of-organizations/

- Who Runs the Ransomware Group Qilin? (Krebs on Security) - https://krebsonsecurity.com/2026/11/who-runs-the-ransomware-group-qilin/

- Hackers use AntiFox AI agents in AWS credential-theft attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/hackers-use-antifox-ai-agents-in-aws-credential-theft-attacks/

- The Best Advanced GPS Running Watches of 2026, Tested by an Ultrarunner (Runner's World) - https://www.runnersworld.com/gear/a20827055/advanced-gps-watches-for-runners/

- The 8 Best Altra Running Shoes for Runners Who Hate Cramped Toes and Want to Try Zero-Drop (Runner's World) - https://www.runnersworld.com/gear/a23311221/best-altra-running-shoes/

This episode covers a string of critical security breaches—from an AI inference engine exploit at NEAR AI to an authentication bypass in Xen Orchestra and hard-coded flaws that let hackers remotely unlock cars. Adrian also touches on Altra running shoes and their zero-drop design philosophy. It's a quick morning sweep of what moved while most people were still asleep.

Stories covered:

- SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users (The Hacker News) - https://thehackernews.com/2026/11/sglang-rce-exploit-breaches-near-ai.html

- Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access (The Hacker News) - https://thehackernews.com/2026/11/hackers-exploit-critical-xen-orchestra.html

- All net-connected vehicles from two major automakers allowed hackers to remotely unlock doors and start the engine — now-patched hard-coded credentials and bypassed MFA security showcase a lack of 101-level best practices - Tom's Hardware (Tom's Hardware) - https://news.google.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?oc=5

- The 8 Best Altra Running Shoes for Runners Who Hate Cramped Toes and Want to Try Zero-Drop (Runner's World) - https://www.runnersworld.com/gear/a23311221/best-altra-running-shoes/

- Best Gifts for Hikers, Backpackers, Outdoorsy People (2026) (Wired) - https://www.wired.com/gallery/awesome-gifts-for-hikers-backpackers-outdoorsy-people/

- Railway breach leads to $740,000 in fraudulent AI charges (BleepingComputer) - https://www.bleepingcomputer.com/news/apple/railway-breach-leads-to-740-000-in-fraudulent-ai-charges/

This episode digs into a string of recent security wake-up calls, from accidentally published API keys in GitHub repos to third-party cloud breaches and active SSH exploits in the wild. Adrian also shifts gears to cover a recent surge in jaw-dropping climbing records, including a 5.12A free solo. It's a morning check-in on what matters — both inside and outside the terminal.

Stories covered:

- Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub (The Hacker News) - https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html

- Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data (The Hacker News) - https://thehackernews.com/2026/11/hackers-exploit-quboles-trusted-aws.html

- Hackers exploit SSHole OpenSSH flaw to breach Linux systems (BleepingComputer) - https://www.bleepingcomputer.com/news/security/hackers-exploit-sshole-openssh-flaw-to-breach-linux-systems/

- 4 Speed Records and Free Solos That Went Down in the Last 2 Weeks (Climbing Magazine) - https://www.climbing.com/news/fall-2026-speed-records-solos/

- This Week In Running: November 9, 2026 (iRunFar) - https://www.irunfar.com/this-week-in-running-november-9-2026

- LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks (The Hacker News) - https://thehackernews.com/2026/11/lnbits-urges-all-operators-to-shut-down.html

This episode covers four quiet signals most people missed over the weekend: AI coding tools accidentally leaking credentials to public repos, your phone constantly broadcasting trackable identifiers, GPT-6 Cyber finding nearly a thousand exploitable Linux kernel bugs in record time, and White House staffers unknowingly running proxy services on government devices. Adrian North walks through what each pattern means before the news cycle catches up.

Stories covered:

- Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub (The Hacker News) - https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html

- IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It (BleepingComputer) - https://www.bleepingcomputer.com/news/security/imsi-vs-imei-what-your-phone-broadcasts-and-who-can-read-it/

- OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs (BleepingComputer) - https://www.bleepingcomputer.com/news/security/openais-new-gpt-6-cyber-ai-finds-81-firefox-flaws-948-linux-bugs/

- Want to Rent an Internet Address at the White House? (Krebs on Security) - https://krebsonsecurity.com/2026/11/want-to-rent-an-internet-address-at-the-white-house/

- Don’t Get Locked Into a Spring or Fall Marathon Cycle. A Run Coach Explains Why You Should Race in Other Seasons. (Runner's World) - https://www.runnersworld.com/training/a74205083/marathon-training-cycle-race-seasons/

- A 55-Year-Old Math Problem Was Solved—This Time by Humans (Wired) - https://www.wired.com/story/a-55-year-old-math-problem-was-solved-this-time-by-humans/

This episode digs into the hidden identifiers your phone broadcasts to every cell tower, the accidental leaking of passwords through AI coding assistants, and a wave of cyberattacks targeting Europe's industrial refrigeration systems. Signal Check covers the surveillance risks in your pocket, the secrets sitting in public GitHub repos, and why someone rehearsing on food storage should terrify critical infrastructure operators.

Stories covered:

- IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It (BleepingComputer) - https://www.bleepingcomputer.com/news/security/imsi-vs-imei-what-your-phone-broadcasts-and-who-can-read-it/

- Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub (The Hacker News) - https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html

- Hackers probed Europe’s fridge systems weeks before cyberattacks. Who did it and what could they target next? - Euronews.com (Euronews.com) - https://news.google.com/rss/articles/CBMixAFBVV95cUxPT1VwdFFGNGxsc2ZtTmNXVWxERklTYndWcHQtb3N3NFR2YUVTaFh4SXFFUEx5aHdNa25wZ1JudmZKYUhJRElDc19WamF0VXVDZzFRSzFJS0VCTU04dng1SnBXOTBZNWVDZGwybl92bW54eTBnZGdBSFdNVGJlSGNVQWo2N0ZPbkxlV0JjY1k4dEwxMkxkZHJaUk05bko0YXNNTGxlbFpVUFpoVF9LTl94NXhTbmF1Zml2Rnl6Q29yNUFjbkIt?oc=5

- Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies (Krebs on Security) - https://krebsonsecurity.com/2026/11/tech-firms-dismantle-botnet-that-turned-1-3m-tv-boxes-into-proxies/

- This Coach’s Treadmill Strategy Maximizes Fitness, Minimizes Fatigue, and Busts Boredom. Here’s How to Execute It. (Runner's World) - https://www.runnersworld.com/training/a74337801/david-siik-treadmill-workout/

- 4 Speed Records and Free Solos That Went Down in the Last 2 Weeks (Climbing Magazine) - https://www.climbing.com/news/fall-2026-speed-records-solos/

This episode digs into how your phone constantly broadcasts two key identifiers that can be intercepted by anyone with the right equipment, GitHub's new problem with fake security tools targeting the researchers who should know better, and OpenAI's GPT-6 Cyber discovering nearly a thousand Linux kernel bugs complete with working exploits. Adrian breaks down what it means when AI starts finding vulnerabilities faster than humans can patch them.

Stories covered:

- IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It (BleepingComputer) - https://www.bleepingcomputer.com/news/security/imsi-vs-imei-what-your-phone-broadcasts-and-who-can-read-it/

- Fake security tools on GitHub push backdoors and infostealers (BleepingComputer) - https://www.bleepingcomputer.com/news/security/fake-security-tools-on-github-push-backdoors-and-infostealers/

- OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs (BleepingComputer) - https://www.bleepingcomputer.com/news/security/openais-new-gpt-6-cyber-ai-finds-81-firefox-flaws-948-linux-bugs/

- Runaway AI hacking agent behind WorkOS breach after escaping sandbox (BleepingComputer) - https://www.bleepingcomputer.com/news/security/runaway-ai-hacking-agent-behind-workos-breach-after-escaping-sandbox/

- This Coach’s Treadmill Strategy Maximizes Fitness, Minimizes Fatigue, and Busts Boredom. Here’s How to Execute It. (Runner's World) - https://www.runnersworld.com/training/a74337801/david-siik-treadmill-workout/

- Google has acquired Crusoe's data center site in southeast Wyoming (Hacker News) - https://www.crusoe.ai/resources/newsroom/crusoe-wyoming-data-center-campus-update

This episode covers a brutal week in cybersecurity, from a Linux vulnerability ironically hitting password-disabled accounts to trojanized web servers spreading through fake installers. Adrian walks through active exploits targeting OpenSSH, Zyxel network switches, and both iPhone and Android devices — all before your second cup of coffee.

Stories covered:

- OpenSSH flaw lets attackers log into password-disabled Linux accounts (BleepingComputer) - https://www.bleepingcomputer.com/news/security/openssh-flaw-lets-attackers-log-into-password-disabled-linux-accounts/

- Hackers backdoor Linux servers using trojanized CWP web server (BleepingComputer) - https://www.bleepingcomputer.com/news/security/hackers-backdoor-linux-servers-using-trojanized-cwp-web-server/

- Zyxel fixes zero-day exploited to hack nearly 1,000 network switches (BleepingComputer) - https://www.bleepingcomputer.com/news/security/zyxel-fixes-zero-day-exploited-to-hack-nearly-1-000-network-switches/

- Hackers Target iPhones and Android Phones: Here’s What We Know - TechRepublic (TechRepublic) - https://news.google.com/rss/articles/CBMiiwFBVV95cUxQUEdJRkxaN3FnRFNTZjlCWHFONnYwZU5sLXQ1MVVXazBlZG1ZSE56MnRwU0xQd1lqeVhFNXBhekZKb3dOWV9ueFdzQ0pfQURrb0habmVYZjdKaHJYNWxPZWVZZjhwLUxzRUlHX3d4eHJiZ0t4S045ZTFVaDhVOU1telpfOEJBWDdpbzN3?oc=5

- The Top 9 Running Shorts That Prevent Chafing, Store All the Snacks, and Keep You Cool at Every Pace (Runner's World) - https://www.runnersworld.com/gear/a22749888/running-shorts/

- 4 Speed Records and Free Solos That Went Down in the Last 2 Weeks (Climbing Magazine) - https://www.climbing.com/news/fall-2026-speed-records-solos/