The State of the Threat

The State of the Threat

Archives
Log in
Subscribe
November 6, 2026

Daily Brief, November 6, 2026

Daily Brief, November 6, 2026

Top Story

Microsoft reportedly declined an option to more than double its Nscale contract in Texas

Nscale, the London-based AI infrastructure company, disclosed $103.4 billion in active and contracted value for the end of August, only $2.6 billion of it active, and about 85% of it is Microsoft and Anthropic contracts, Capacity calculates, relaying the Financial Times' report of Microsoft's decision.

Source: Capacity

United States

Enforcement & Liability

The US Justice Department set up a Super Intelligence Task Force

The task force is meant to ensure US leadership in super intelligence, a term the announcement never defines, is not compromised by misuse from foreign state and state-sponsored actors, transnational criminal organizations, or individuals and companies engaged in fraud or other unlawful conduct. The announcement cites no statute.

Source: US Department of Justice

Myriad Genetics temporarily suspended testing and order management after unauthorized network access

Myriad Genetics, a genetic testing company, detected the access on November 2nd and says most of its systems are back to normal, but it is still assessing whether patient records were accessed.

Source: SEC EDGAR

Cyber Threats

Five US agencies say hackers are targeting refrigeration controllers at grocery and cold-storage sites

The Cybersecurity and Infrastructure Security Agency, the FBI and the Health, Agriculture and Transportation departments say the hackers may exploit unpatched or internet-accessible controllers to force continuous heating and defrost cycles that can cause widespread inventory loss and equipment hazards, and they urge owners and operators to act immediately.

Source: CISA

Layer3 Intel found 28 proxy services could route traffic out through the White House network

Residential proxy services rent out internet addresses so customers' web traffic appears to come from somewhere else, and Layer3 Intel, a security firm, says proxies exited from the White House network, the addresses reserved for the Executive Office of the President, 236 times between October 5th and November 3rd.

Source: Krebs on Security

Supply Chain Risk

Los Angeles and Long Beach port watchmen's contract runs out at midnight Friday, November 6th

The Pacific Maritime Association, which represents shipping lines and terminal operators, says a strike by the roughly 250 watchmen in Local 26 of the International Longshore and Warehouse Union would put terminals handling more than half the two ports' cargo at risk.

Source: Pacific Maritime Association

Regulatory Horizon

Piqua, Ohio, voters banned large data centers and recalled commissioners who backed Meta's project

Meta bought more than 600 acres in Piqua in 2025 for about $110 million, and a Meta spokesperson told Semafor the company will work with local officials to determine the future of that investment.

Source: Semafor

Around the World

Enforcement & Liability

A rival puts Russian foreign-AI resellers at about 50 by August, up from almost none

[RU · The Bell]

The resellers, sole proprietors selling foreign AI models to Russian businesses through Chinese intermediaries, numbered almost none in late 2025, GPTunneL, a lawful aggregator that competes with them, told Vedomosti, a Russian business daily.

Source: The Bell

404 Media reports North Korean fake IT workers used the OnlyFake fake-ID site

OnlyFake's fake IDs let buyers get around know-your-customer identity checks, the Justice Department says, and its creator, Yuriy Nazarenko, has pleaded guilty in a US fraud case. 404 Media, an independent media company founded by technology journalists, based its report on interviews with Nazarenko, his lawyer and court records.

Source: 404 Media

Brazilian prosecutors and tax agents searched fintech QI Tech in a probe of fake invoices

[PT · Estadao]

Two operations by Paraná prosecutors and Brazil's federal tax authority blocked 271 million Brazilian reais, about $50 million, in assets, and QI Tech says it is not a target and only supplied what was requested. The operations investigate a scheme in which shell companies issued fake invoices to generate improper tax credits for biodiesel plants.

Source: Estadao

Cyber Threats

Sekoia ties Russian state-linked hackers to a campaign affecting a US chemical trade association

APT29, an espionage group widely believed to work for Russia's foreign intelligence service, compromised Plerdy, a Ukrainian web analytics service used by thousands of websites, to target visitors' phones, according to Sekoia, a French cybersecurity firm, which found similar compromises affecting other organizations, including a major US chemical industry trade association.

Source: The Record

Supply Chain Risk

Refrigeration supplier Coolworld says a third-party component caused its cyber incident

A cybersecurity incident at a refrigeration equipment provider disrupted cold storage at three sites, the French Blood Establishment said, and Le Canard enchaîné, a French satirical newspaper, named the provider as Coolworld, the apparent target. Coolworld did not explicitly link its incident to the blood service and did not identify the third party.

Source: OCCRP

Paraguay's Ueno Bank crisis could affect tens of thousands of Brazilians, an economist estimates

[PT · G1]

Some Brazilians in Paraguay have savings blocked at Ueno, a major digital bank, according to G1, the news portal of Brazil's Globo group. Economist Alexandre Barros da Costa says quick sign-up made Ueno the first choice for thousands of medical students, small border traders, farmers and investors.

Source: G1

The governor of Russia's Rostov region says work at its three seaports is effectively suspended

[RU · The Bell]

Governor Yuri Slyusar told the state-owned Russia 24 news channel that drones damaged quay walls, storage tanks and cargo-handling capacity at the ports of Rostov, Taganrog and Azov.

Source: The Bell

Geopolitical Shocks

Paraguay's lower house impeached President Santiago Peña 78-0 minutes after his resignation announcement

As the lower house debated impeachment over the collapse of Ueno Bank, a major digital bank tied to his government, Peña said in a video posted to X on November 5th that he was stepping down. The charges now go to the Senate.

Source: AP

Russia's financial intelligence chief says 87% of export earnings arrive in national currencies

[RU · RBC]

Yuri Chikhanchin, head of the Rosfinmonitoring agency, also told President Vladimir Putin that exporters return 99.5% of the funds due back to Russia, the Russian news outlet RBC reports, citing the Kremlin press service.

Source: RBC

Somalia's Supreme Court ruled the president's stay in office unlawful

[FR · RFI]

The Supreme Court held that the constitution adopted in March, which extended the presidential term from four to five years, cannot apply to President Hassan Sheikh Mohamud's current term, and it demanded elections within 90 days, Radio France Internationale, a French public radio broadcaster, reports.

Source: RFI

A Nigerian court voided Atiku Abubakar's presidential nomination in a party leadership dispute

[FR · RFI]

The Abuja High Court declared invalid the decisions of David Mark, president of the African Democratic Congress, including naming Abubakar the party's presidential candidate, RFI, a French public radio broadcaster, reports. Abubakar's camp has announced an appeal, but a final ruling before the January 16th, 2027, election is not certain.

Source: RFI

Maritime monitors count four Strait of Hormuz attacks in about 52 hours

[FA · Iran International, opposition outlet]

The Joint Maritime Information Center, an information service for shipping, says all four were reported off Oman's Musandam coast between November 1st and 3rd, against three in its previous reporting period, in an advisory dated November 5th.

Source: UKMTO (JMIC advisory)

Infrastructure & Capacity

Nasdaq 100 shed $2.5 trillion on fears Democratic midterm wins could stall AI data centers

The Nasdaq 100 fell 6.4% and the Nasdaq Composite 5.5% on November 5th, the Nasdaq's deepest one-day drop since April 2025, Reuters reports.

Source: Reuters


Get the full risk analysis every Sunday. Manage your subscription.

Don't miss what's next. Subscribe to The State of the Threat:
← Newer Daily Brief, November 7, 2026 Older → Daily Brief, November 5, 2026
stateofthethreat.com
LinkedIn
Powered by Buttondown, the easiest way to start and grow your newsletter.