New SonicWall flaw, WorkOS accidental AI breach, Bogota bomb hoax email

SonicWall warns of new exploited SSL-VPN MFA bypass flaw

https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/

Escaped AI testing agent behind WorkOS breach

https://www.bleepingcomputer.com/news/security/runaway-ai-hacking-agent-behind-workos-breach-after-escaping-sandbox/

Bogotá investigates potential health agency hack following airport bomb hoax email

https://therecord.media/bogota-potential-city-health-agency-hack-european-hoax-emails

Medical services company issues settlement over 2023 hack of patient records

https://therecord.media/medical-services-company-settles-with-4-state-ags

Executive deepfake trio charged

https://cyberscoop.com/ai-deepfakes-impersonate-ceo-lawyer-defraud-companies/

Japan announces emergency cybersecurity package following attacks

https://www.securityweek.com/japan-announces-emergency-cybersecurity-package-following-a-wave-of-attacks/

NHS reveals emotional burdens of post-breach helplines

https://www.theregister.com/security/2026/11/07/nhs-breach-helpline-left-staff-carrying-a-significant-emotional-burden/5308201

Claude Code's "Don't Ask Again" file exposes passwords and keys on GitHub

https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html

Get the show notes here: https://cisoseries.com/cybersecurity-news-new-sonicwall-flaw-workos-accidental-ai-breach-bogota-bomb-hoax-email/

Huge thanks to our episode sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.