ScreenConnect attacks reach 47 organizations

November 12, 2026

A ScreenConnect campaign has reached six managed service providers and at least 47 organizations, with victim numbers still rising. Here are the other developments to know today.

Attackers are abusing ScreenConnect’s Run Command feature to install rogue remote-access clients on customer devices, enabling access outside MSPs’ legitimate environments. Huntress has identified six compromised providers and 286+ endpoints across 47 organizations, with victim numbers still rising.

For businesses that rely on managed IT, one provider breach can expose many of its customers.

[ BleepingComputer ]

Australia’s proposed AI rules would require frontier-model firms to immediately report security incidents, partly to catch early signs of AI agents going off the rails. A new oversight body would enforce compliance alongside the Australian AI Safety Institute, with steep penalties for violations.

If passed, the rules could set a tougher standard for how frontier AI firms test and report problems.

[ The Decoder ]

Radical Numerics says its Omnii Defense model is designed to flag natural and AI-engineered pathogens on a laptop with a USB gene sequencer, even offline. Founded in 2025 by researchers behind Stanford’s Evo and Evo-2 models, the San Francisco startup aims to bolster field and public-health defenses.

A portable detection tool could help public-health teams assess biological threats in the field.

[ WIRED ]

Unlike quick voice commands, Gemini Live supports natural, back-and-forth conversations from Apple CarPlay, hands-free. iOS users can resume a recent chat or start fresh, interrupt to add details, change topics, or pause to focus on the road.

Drivers can ask follow-up questions without handling their phones, while keeping their attention on the road.

[ News from Google ]

Canonical’s status page reported disruption from about 1100 UTC across more than two dozen services, including Ubuntu cloud images, Launchpad PPAs and Landscape; email and Discourse remained available. The outage’s cause is unconfirmed ahead of the online Ubuntu Summit, which runs Nov. 12-13.

The disruption could slow teams that rely on Canonical’s software downloads and management tools.

[ www.theregister.com – Articles ]

Existing AWS tests and CLI scripts can now run locally without deployment, using the same APIs through a local HTTPS endpoint while application code stays unchanged. Written in Rust, AWS Emulator has no service fee and installs via Linux packages or Docker on macOS and Windows.

Running tests locally could help teams catch problems before deploying changes to AWS.

[ AWS News Blog ]

Google Wallet’s home key is tied to your Google Home setup, so one key can unlock every compatible Aliro lock and sync across Android phones on your account. Tap to Unlock works with the screen locked by default on Android 9+, while approach unlocking requires supported UWB phones and locks; Wear OS isn’t supported at launch.

Android users can use their phones in place of a physical key, if their lock is supported.

[ 9to5Google ]

This article was generated by AI and cites original sources.