Daily Summary of Cybersecurity · Live edition, updated continuouslySunday 8 November 2026 · UTC
Latest Cybersecurity News Today: 8 November 2026
Iris Ohyama breach and Barracuda patches lead cybersecurity news as Brenner leak emerges
Iris Ohyama said a cloud breach may have exposed data of about 7.7 million people, while Barracuda released patches for flaws that could let attackers run commands with root privileges on email gateways. Brenner Base Tunnel SE confirmed unauthorized access to some data, with the Everest group claiming 812 GB of files. Brava Security emerged from stealth with $15 million in seed funding.
Brenner Base Tunnel SE confirms data breach, Everest claims 812 GB
Brenner Base Tunnel SE, the company building the Brenner Base Tunnel between Italy and Austria, confirmed that unauthorized people accessed some of its data. The extortion group Everest claims it took 812 GB of files, but nobody has verified that. BBT SE told ANSA on 7 November that operations are unaffected, the systems involved are isolated, and outside forensic experts and the authorities are on the case.
Iris Ohyama says cloud breach may have exposed data of 7.7 million people
Iris Ohyama said unauthorized access to a third-party cloud service may have exposed personal data for about 7.7 million people, including up to 5.8 million registered or former members and 1.9 million non-members. The company suspended Iris Plaza and related systems on October 28 and notified Japan's Personal Information Protection Commission and police on October 29. It said credit card data was not stored in the affected service.
Barracuda patches flaws that could let attackers control email gateways
Barracuda released patches for two flaws that could let unauthenticated attackers alter settings and run commands with root privileges on its Email Security Gateway. watchTowr found the chain combines an authorization bypass with a command injection, while Mandiant assigned CVSS scores of 9.3 and 8.6. The fixes matter because the flaws could give attackers complete control of vulnerable appliances.
Brava Security exits stealth with $15 million seed funding
Brava Security emerged from stealth with $15 million in seed funding led by F2 Venture Capital and Pitango VC, with support from several angel investors. The Tel Aviv startup, founded in 2024 by Idan Basre and Itay Gabbay, offers an AI platform that models attacker behavior and simulates attacks to find security gaps. It says the platform can provide initial insights within 10 to 15 minutes of onboarding and integrates with more than 70 sources.
Help Net Security reviews XCPE botnet shutdown and AI agent stories
Help Net Security published a weekly review summarizing last week's notable cybersecurity developments. It highlighted Google's shutdown of XCPE botnet servers, which Google attributed with high confidence to Videostrong Technology, with more than 1.3 million devices enrolled. The review also covered an open source firewall testing tool, AI coding agents installing MCP servers that will never be patched, and AI generated malware.
Illustration 
