cybersecurity New Post November 13, 2026 Barracuda ESG Root Chain: A Forged Backup Hands Over Your Email Gateway Barracuda ESG CVE-2026-116606 and CVE-2026-111560 chain to pre-auth root and are exploited in the wild. Who is affected, how to check, patch and hunt. #barracuda #email-security #cve-2026-116606 #cve-2026-111560 #cisa-kev #edge-devices #patch-management
cybersecurity New Post November 12, 2026 AI Hackers Are Here: What Operation Snowball Means for Business An AI agent hacked a telecom for two weeks, stolen AI keys ran up $740K, and Pakistan's NCERT warns banks. What it means for your business and what to do now. #ai-security #agentic-ai #llmjacking #api-keys #ncert-pakistan #patch-management #business-security
cybersecurity New Post November 11, 2026 Outlook Zero-Day CVE-2026-124194: One Email, One Leaked Password Hash Outlook zero-day CVE-2026-124194 leaks NTLMv2 hashes from a crafted message and is in CISA KEV. Who is affected, fixed builds, detection queries and mitigations. #microsoft-outlook #cve-2026-124194 #zero-day #ntlm #patch-tuesday #email-security #microsoft-365
cybersecurity New Post November 9, 2026 Plex2Shell: Why QNAP Says Your Media Server May Already Be Compromised Plex2Shell chains four Plex Media Server CVEs into code execution on QNAP and Synology NAS. Who is affected, how to check for compromise and how to clean up. #plex2shell #plex-media-server #qnap #synology #nas-security #cisa-kev #incident-response
cybersecurity New Post November 8, 2026 SSHole: The OpenSSH Bug That Turns "No Password" Into Root OpenSSH CVE-2026-123158 (SSHole) lets attackers log in to passwordless accounts on Alpine and other musl systems. Who is affected, detection and fixes. #openssh #sshole #cve-2026-123158 #alpine-linux #linux-security #containers #patch-management
cybersecurity November 7, 2026 SonicWall SSL VPN SAML MFA Bypass: A Hunt and Harden Guide CVE-2026-19868 lets SonicWall SSL VPN users skip SAML and MFA and is in CISA KEV. How to check exposure, patch, and hunt for logins your IdP never saw. #sonicwall #vpn-security #mfa #saml #threat-hunting #cisa-kev #identity-security
cybersecurity November 6, 2026 Hacked Freezers: What the Cold-Chain Attacks Mean and What to Do Attackers hijacked refrigeration controllers across Europe, and FBI and CISA now warn cold-chain operators. What happened, who is at risk and a hardening checklist. #ot-security #ics #cold-chain #refrigeration #danfoss #retail-security #incident-response
cybersecurity November 5, 2026 Poisoned Trackers: What APT29's Plerdy Hijack Means for Your Business APT29 hijacked the Plerdy SEO tracker to attack site visitors' phones. What it means for businesses, and a plan to control third-party scripts and devices. #supply-chain-attack #third-party-scripts #apt29 #watering-hole #mobile-security #web-security #business-security
cybersecurity November 4, 2026 cPGuard Update Hijack: What Hosting Teams Must Do Now Attackers pushed a fake cPGuard update that stole /etc/shadow, SSH keys and DB credentials from ~2,950 servers. Who is affected, IOCs and a recovery checklist. #supply-chain-attack #cpguard #web-hosting #linux-security #credential-theft #incident-response #cpanel
cybersecurity November 3, 2026 Node-RED Under Attack: Find, Lock Down and Hunt CVE-2026-58115 CVE-2026-58115 is being exploited to plant bots and web shells via exposed Node-RED editors. How to find them, enable adminAuth and hunt for malicious flows. #node-red #cve-2026-58115 #ot-security #iot #threat-hunting #detection-engineering #hardening
cybersecurity November 2, 2026 The $6.3B Binance Heist Began on One Laptop: What to Do Now Binance lost about $6.3B after a DevOps laptop was compromised; the FBI blames North Korea's TraderTraitor. What happened, who is affected and how to defend. #binance #north-korea #tradertraitor #crypto-security #devops-security #social-engineering #incident-response
