Major Data Breaches and Critical Vulnerabilities Dominate Cybersecurity News

Critical Vulnerabilities Under Active Exploitation:

• Critical GitLab RCE Flaw (CVE-2026-97229) Actively Exploited: A critical, unauthenticated remote code execution vulnerability in GitLab (CVE-2026-97229) is being actively exploited. Attackers can exploit this flaw by submitting a crafted regular expression in a CI/CD configuration file, leading to arbitrary code execution. CISA has added this vulnerability to its Known Exploited Vulnerabilities catalog, mandating federal agencies to patch.

New Threats and Data Breaches:

• N0N Extortion Group Claims Breach of 830M Expedia Loyalty Records: The data extortion group N0N claims to have exfiltrated 830 million records from Expedia Group's loyalty program, including customer emails, loyalty IDs, and booking values. As of November 9, 2026, no proof has been provided, and Expedia Group has not publicly commented or filed a report.
• Bitter APT Targets South Asia with New C++/Rust PapRAT Backdoor: The cyber espionage group Bitter (APT-C-08) is targeting South Asia with a new remote access trojan (RAT) named PapRAT, available in C++ and Rust versions. The malware is delivered via malicious LNK files, VHDX disk images, and WebDAV servers, offering capabilities like command execution and file manipulation.
• Insight Credit Union Data Breach Exposes SSNs and Financial Data: Insight Credit Union has disclosed a data breach exposing customer names, Social Security numbers, driver's license numbers, and financial account details. The credit union began notifying affected individuals and filing reports on November 6, 2026, prompting investigations into potential class-action lawsuits.
• Marquis Software Ransomware Attack Breaches 670,000 Bank Customers: A ransomware attack on Marquis Software, a technology vendor for community banks, has impacted over 670,000 banking customers. This incident, reported on November 8, 2026, highlights significant supply chain risks within the financial sector.
• MediaLab Ventures Discloses Data Breach Exposing SSNs: MediaLab Ventures, a technology holding company, has reported a data breach exposing the first and last names and Social Security numbers of an undisclosed number of individuals. The company filed a notice on November 6, 2026, and is offering credit monitoring services to affected parties.

Policy & Industry Notes:

• Dutch Regulator Warns Financial Firms of Growing AI and Cyber Risks: The Dutch Authority for the Financial Markets (AFM) has warned financial service providers about increasing cyber risks associated with AI adoption and reliance on third-party IT services. The report, published on November 9, 2026, emphasizes the need for responsible AI policies and robust IT risk management, with firms retaining ultimate data protection responsibility.