No video briefing yet today
New video briefings appear here the moment they are published. Earlier briefings are on our YouTube channel — or pick a date below.
Browse advisories by date
Pick a day to see its advisories. Older video briefings live on our YouTube channel.
▶ = has a video briefing · • = advisories only · dates in IST
Latest Cybersecurity Advisories & CVE Briefings
A continuously updated feed of the latest vulnerabilities, CVEs, zero-days, ransomware and breaches — each advisory is traced back to its original source and explained as a short visual briefing, with the affected systems and recommended actions. New advisories are published within hours of disclosure.
100 advisories published · filtered: 67
Critical Fortinet2Shell Vulnerability Enables RCE Attacks in FortiClient with FortiPAM Enabled
Fortinet has warned about a critical flaw in FortiClient that lets a remote attacker run code on a user’s computer.
Read full brief →Critical Fortinet Flaws Expose FortiManager and FortiAnalyzer to Remote Code Execution Without Login
Fortinet has disclosed critical security flaws affecting FortiManager, FortiAnalyzer, and FortiOS, including weaknesses that could let attackers execute code…
Read full brief →Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for November 2026, which includes 1095 vulnerabilities affecting a range of products, including 64 that…
Read full brief →Microsoft Fixes Nearly 1,100 Security Vulnerabilities
Microsoft did another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in its Windows operating systems and…
Read full brief →Microsoft Patch Tuesday, November 2026 Security Update Review
As the year approaches its final stretch, Microsoft’s November 2026 Patch Tuesday highlights the continued importance of proactive vulnerability management.
Read full brief →Microsoft November 2026 Patch Tuesday Fixes 1,093 Vulnerabilities, Including Outlook Zero-Day
Microsoft has released its November 2026 Patch Tuesday updates, fixing 1,093 newly released vulnerabilities across Windows, Office, SQL Server, SharePoint,…
Read full brief →Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem
Three distinct threat activity clusters with shared infrastructure and malware code similarities have been observed targeting telecommunications providers,…
Read full brief →Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild.
Read full brief →The November 2026 Security Update Review
The penultimate month of 2026 bring with it the usual storm of patches from Microsoft and Adobe.
Read full brief →Hackers Can Exploit SAP PROXYGATE and ICM2SHELL Flaws for Unauthorized Full System Access
SAP has released fixes for PROXYGATE and ICM2SHELL, critical security flaws that could let attackers take control of SAP systems without signing in.
Read full brief →Ivanti Patches New Security Flaws Affecting Endpoint Manager, EPMM, Sentry, CSA, and Workspace Manager
Ivanti has released security updates for Endpoint Manager, Endpoint Manager Mobile, Sentry, Cloud Services Application, and User Workspace Manager.
Read full brief →Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers
A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow…
Read full brief →N-able issues advisory on critical vulnerabilities
Categories: Threat Research Tags: advisory, N-able
Read full brief →Not All That Glitters Is Gold: Tracking CopperDragon’s Sparrow Framework Around the Globe
Key Points During a year-long investigation, Check Point Research identified three distinct operational clusters spanning Latin America, Asia, and Europe…
Read full brief →Critical vulnerabilities in N-able N-central prompt hosted shutdown
Overview On November 9, 2026, N-able announced that it was responding to the public disclosure of critical vulnerabilities affecting N-central, its remote…
Read full brief →Finite State Raises $27 Million to Help Device Makers Fight ‘Vulnpocalypse’ with AI-Powered Product Security
Columbus, Ohio, United States, November 10th, 2026, CyberNewswire Funding Will Scale Finite State’s Autonomous Platform and International Expansion as…
Read full brief →Critical Apache Airflow RCE Flaw Allows Attackers to Execute Code Without Authentication
Apache Airflow has a critical remote code execution flaw that lets anyone with write access to the Celery message broker run code on worker nodes.
Read full brief →CVE-2026-109469: CVSS 10 Entra Device Registration Flaw
Microsoft has disclosed CVE-2026-109469, a critical elevation of privilege vulnerability in Entra Device Registration, the cloud service that registers and…
Read full brief →SAP Security Patch Day – Critical SAP NetWeaver, Dispatcher and Gateway Vulnerabilities Patched
SAP’s November 2026 Security Patch Day brings fixes for critical vulnerabilities across SAP NetWeaver, Web Dispatcher, Gateway, and other business…
Read full brief →Dark Web Profile: CyberXero
CyberXero is a Russian-speaking, financially motivated Initial Access Broker (IAB) active on Dark Web forums, including Dread and HackForums.
Read full brief →Anthropic Launches Claude Mythos 5.2, Scoring 76.3% on Cybersecurity Benchmark to Identify 0-Day Flaws
Anthropic has launched Claude Mythos 5.2, its latest AI model for cybersecurity engineering, reporting a 76.3% score on CyScenarioBench.
Read full brief →Hackers now exploit critical Barracuda ESG flaws to gain root access
Cybersecurity company Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway (ESG) vulnerabilities that let…
Read full brief →Hackers Breach Fireworks AI Through Third-Party Cloud Provider to Steal Customer Data
Fireworks AI has disclosed a wider security breach involving customer account details, billing records, datasets, and incomplete model weights.
Read full brief →Google Chrome 0-Day Vulnerability in the Wild to Execute Malicious Code Remotely
Google has fixed a Chrome zero-day that attackers are already using. The flaw is tracked as CVE-2026-125350, and it lets a remote attacker run malicious code…
Read full brief →Terminal2Shell: 55-Year-Old ‘Zero-Day’ Dating Back to 1971 Claims to Affect Billions of Devices
Terminal2Shell claims a critical flaw dating back to 1971 affects more than two billion devices, allowing anyone who opens a terminal to gain an interactive…
Read full brief →N-able Disables Cloud Services Following Disclosure of "Able2Shell" Exploit Chains
N-able took N-central offline after 33 critical flaws were disclosed, including chains enabling remote code execution and privilege escalation.
Read full brief →9th November – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 9th November, please download our Threat Intelligence Bulletin.
Read full brief →Critical Infrastructure Under Siege, From Freezers to Wider OT
The refrigeration cyberattack campaign that hit about 700 French supermarkets on October 11, 2026, is now a multi-country pattern of attacks on critical…
Read full brief →The Expanding Attack Surface Demands a New Operating Model
Why the Risk Operations Center Is Becoming the System of Record for Proactive Enterprise Risk Reduction The cybersecurity industry has spent years improving…
Read full brief →CISA Warns Two Critical 9.0 Flaws in PowerSYSTEM Center Allow Unauthorized Access and SQL Injection
CISA warned that two critical PowerSYSTEM Center flaws (CVSS 9.0) could let authenticated users access administrator resources or execute unauthorized database…
Read full brief →A week in security (November 2 – November 8)
Last week on Malwarebytes Labs: Big Tech sues over California plan to limit kids’ scrolling Attacks on supermarket and blood storage systems prompt US warning…
Read full brief →Veeam Warns Critical 9.8 Linux Kernel Flaw Could Crash Backup Appliances and Disrupt Recovery Operations
Veeam warned that a critical Linux kernel flaw with a CVSS score of 9.8, could cause denial of service or memory corruption across backup and recovery…
Read full brief →Critical React Server Components Flaw Lets Hackers Execute Code Remotely Without Authentication
A critical security flaw in React Server Components can let attackers run code remotely without logging in.
Read full brief →Insignary Releases Free Insignary-Chk Tool to Detect PHP2Shell and Node2Shell Exposure
Toronto, Canada, November 6th, 2026, CyberNewswire Free, read-only scanner helps organizations find Linux servers and container images exposed to two actively…
Read full brief →October 2026 CVE Landscape
In October 2026, Insikt Group® identified 82 high-impact vulnerabilities to prioritize for remediation, 52 of which had a Very Critical Recorded Future Risk…
Read full brief →sshole: OpenSSH Fixes Password Bypass on Alpine Linux
OpenSSH has shipped an emergency release, version 10.6p2, to stop a password bypass that lets a remote attacker log in to accounts that have no password set.
Read full brief →Claude Dispatch Flaw Lets Malicious Browser Extensions Run Code on Connected Computers
A flaw in Anthropic’s Claude Dispatch let a malicious browser extension run commands on a computer via Claude Desktop.
Read full brief →OpenAI Launches GPT-6 Cyber That Finds 81 Firefox Flaws and Develops 948 Linux Exploits
OpenAI has launched GPT-6 Cyber, a security-focused AI model that found 81 new high-severity Firefox flaws and built working exploits for 948 Linux kernel…
Read full brief →Critical Windows Paint Vulnerability Enables Remote Code Execution Attacks
Microsoft has disclosed a Windows Paint vulnerability that could let an attacker run code remotely without signing in or requiring a user to click anything.
Read full brief →OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux
Attackers can log in to accounts that have no password, such as SSH key-only accounts, on some Alpine Linux servers running the standard openssh-server…
Read full brief →New investments to reduce on-premises security risk
On-premises servers can be essential to business operations, but they are increasingly attractive targets to attackers.
Read full brief →OpenSSH Flaw Could Let Attackers Bypass Password Authentication on Alpine Linux Servers
A critical OpenSSH password authentication bypass could let remote attackers access affected Alpine Linux servers without knowing a password.
Read full brief →Gartner Report: The Attack Path is Closing Faster than Most Teams Can Patch
Security teams have never lacked vulnerability data. The harder problem is deciding which issues create a credible path to business impact, then acting before…
Read full brief →Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out
A critical finding can move through several security tools and still leave the organization exposed.
Read full brief →AI-Powered Ransomware Is Coming for UK Critical Infrastructure, and Europe Is Already the Testing Ground
Overview The UK's National Cyber Security Centre (NCSC) has put a date on a threat that security teams across Europe have been bracing for.
Read full brief →SonicWall GMS Flaws Unpatched After End of Life
SonicWall has disclosed two vulnerabilities in its Global Management System (GMS) and says it will not fix either of them.
Read full brief →One Hacker Uses 12 AI Agents to Breach Taiwan’s Emergency Services and Steal Sensitive Data
A single operator in Taiwan built a team of 12 AI agents and used it to attack hundreds of organizations in 11 countries.
Read full brief →Critical Citrix XenServer Vulnerability Could Let Hackers Take Over Virtualization Hosts Without Authentication
Citrix has disclosed a critical XenServer vulnerability that could let an unauthenticated attacker compromise virtualization hosts and supporting appliances.
Read full brief →I Replaced My VPN with ZTNA. Why Did I Fail My Zero Trust Audit?
Replacing your VPN with ZTNA does not automatically make your network Zero Trust compliant.
Read full brief →Don’t Miss the Train: NCSC’s Sliding Doors Moment for OT
I read Richard Horne’s recent speech on the state of the UK’s cybersecurity landscape, and I have to say, it was one of the more sensible, thought-provoking,…
Read full brief →Critical Ruby on Rails Flaw Could Let Hackers Steal Server Secrets Through Malicious Image Uploads
A critical flaw in Ruby on Rails Active Storage lets an unauthenticated user upload a crafted image and make the server write files.
Read full brief →Cloud Agent, now in a Container: Host Security for Nodes You Can’t Touch
A single container image that brings Vulnerability Management and Policy Audit to every Kubernetes node, on immutable and mutable Linux alike, deployed the way…
Read full brief →The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliance
Introduction to BOD 26-04 On June 10, 2026, CISA issued Binding Operational Directive 26-04, "Prioritizing Security Updates Based on Risk." Strip away the…
Read full brief →Critical Barracuda Security Flaws Could Let Hackers Bypass Authentication and Gain Root Access
Barracuda has disclosed two security vulnerabilities that could allow attackers to bypass authorization controls and gain root access to affected appliances…
Read full brief →Critical SolarWinds Dameware Flaw Could Allow Attackers to Compromise Remote Systems
SolarWinds has warned about a critical command injection flaw in its Dameware remote support software.
Read full brief →Ransomware 2026 Report October
Reports Reports Ransomware 2026 Report October This report is about ‘PHP2Shell’. Download Report hbspt.forms.create({ portalId: "45734016", formId:…
Read full brief →Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app's server by uploading a crafted file if the app…
Read full brief →Cloudflare Launches Zero Wire to Track Critical CVEs, Active Exploits, and Security Fixes
Cloudflare has launched Zero Wire, a public vulnerability intelligence feed designed to help security teams track critical CVEs, understand exploitation…
Read full brief →Google Releases Major Chrome Security Update Fixing 213 Bugs, Including 7 Critical Vulnerabilities
Google has released Chrome 157 for Windows, macOS, and Linux, fixing 213 security bugs, including seven rated critical.
Read full brief →Hackers Exploit Zyxel GS1900 Zero-Day in the Wild to Hijack Network Switches
A flaw in Zyxel GS1900 switches was already being used by hackers, and the patch meant to fix it did not work.
Read full brief →Google Patches Over 200 Android Vulnerabilities, Including Critical Zero-Click RCE Flaws
Google has released its November 2026 Android security update, addressing more than 200 vulnerabilities across the operating system, kernel, and hardware…
Read full brief →Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin.
Read full brief →PHP2Shell on Windows and macOS: Automating the PHP Upgrade, With or Without an Agent
Executive Summary PHP2Shell (CVE-2026-109618 and CVE-2026-109619) allows unauthenticated remote code execution on exposed PHP servers.
Read full brief →FedRAMP Authorization Is the Easy Part: How to Stay Authorized with Qualys Policy Audit
Key Takeaways FedRAMP authorization isn’t the finish line. Providers are expected to keep monitoring their security posture and give federal agencies the…
Read full brief →Barracuda warns of critical flaws allowing root access to devices
Cybersecurity company Barracuda Networks warned customers to patch two vulnerabilities that can let attackers run commands with root privileges. [...]
Read full brief →Introducing Zero Wire, a hub for investigating critical Internet vulnerabilities
You run security at your organization. It’s 7:00 am, and you’re having breakfast. You receive a ping: a new critical vulnerability has been disclosed.
Read full brief →Hackers Use ARTEX AI to Automate Enterprise Attacks at Machine Speed – Insights for Defenders
AI-powered offensive frameworks are helping attackers move from stolen credentials to cloud privilege escalation, lateral movement, and data theft in minutes.
Read full brief →