220 Security Blogs

Last Updated: 12 Nov 26 12:31 UTC

Blog List | Github | OPML | Have a feed you want to add? Submit a PR

2026-11-12

NVISO Labs
Breaking the Semantic Cache: A LiteLLM Case Study (CVE-2026-89032)

Schneier on Security
Another Way Police Are Locating People from Their Smartphones

ISC SANS
Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)

Dark Reading
Inside an AI Attack Against a US Retailer

Malwarebytes
Why scammers want you to allow push notifications

Step Security
WFX Phantom: The GitHub Actions Secret Stealer That Deletes Its Tracks

Malwarebytes
FBI agent stole $2.47m in crypto from criminal wallets

ISC SANS
ISC Stormcast For Thursday, November 12th, 2026 https://isc.sans.edu/podcastdetail/10176, (Thu, Nov 12th)

Aikido
wfx-loot campaign pushes CI secret stealer to tens of thousands of repositories

Dark Reading
Chinese AI Project Scouts Spies in Taiwan Chip Industry

Dark Reading
Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise


2026-11-11

Black Hills Info Sec
Log Analysis Field Guide: Tips for Spotting Patterns and Red Flags

Dark Reading
Attackers Say 'Hello' to a Different Scale of Cloud Attack

Dark Reading
AI Raises the Stakes for Cyber Resilience

Dark Reading
N-able Takes N-central Platform Offline After Discovery of 33 Flaws

Amazon Security
Ease of use and secure defaults in the new AWS experience

Microsoft Security
The global socket: how threat actors are weaponizing GSocket for stealthy C2

Wiz
Critical RCE Vulnerability in Apache HTTP Server: Everything You Need To Know

Malwarebytes
Vanderbilt restores systems after cyberattack as hackers claim data theft

ISC SANS
Microsoft Patch Tuesday November 2026, (Tue, Nov 10th)

GitGuardian
AntiFox Targeting AWS Credentials: The Latest Wave of AI Agent Attacks

Amazon Security
Part 4 – Cybersecurity journeys: What I’d tell my younger self

Krebs on Security
Who Runs the Ransomware Group Qilin?

Meta Security
Intelligent Delivery: Making Every Unit of Compute Serve Better Ads

Google Safety & Security
Google Cloud leaders share what to expect in cybersecurity for 2027.

MIT Technology Review
What to know about this year’s UN climate talks

Microsoft Security
Lessons from 59 Linux Kernel Bug Reports

PortSwigger
Blind trust: stealing credentials through CSP

Cloudflare
Choosing QuePaxa, an unusual consensus algorithm

Ars Technica Security
Google DeepMind just mathematically verified key parts of Signal

Bishop Fox Security
Proofpoint ITM | 4.4.3.148–5.0.1

Malwarebytes
Remus malware claims Gmail access even after you change your password

MIT Technology Review
The Download: preserving minds and weighing open AI risks

Malwarebytes
Muse sleep band users weren’t told their brain data was training AI

Schneier on Security
Three People Arrested for AI-Enhanced Impersonation Fraud

Malwarebytes
Microsoft Patch Tuesday fixes Outlook flaw already under attack

Xint
How Xint Code Reads a Large Codebase

DarkRelay
Living on the Edge: How APT Groups Weaponize Network Appliances

Step Security
GitHub Package Firewall vs. StepSecurity Secure Registry: Protection beyond npm

ISC SANS
ISC Stormcast For Wednesday, November 11th, 2026 https://isc.sans.edu/podcastdetail/10174, (Wed, Nov 11th)

Talos Intelligence
Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities

ZeroPath
Overview of CVE-2026-120002: SharePoint Server Secure Store Incorrect Authorization Leading to Elevation of Privilege

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-123380 Heap-Based Buffer Overflow Enabling Remote Code Execution

ZeroPath
Quick Look: CVE-2026-112734, a Use After Free in Microsoft PowerPoint Outline View Leading to Code Execution

ZeroPath
Overview of CVE 2026 118146: Windows Active Directory Domain Services Incorrect Authorization Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-118703: Use After Free in Microsoft Office Excel Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118706 Use After Free Remote Code Execution

ZeroPath
Quick Look: CVE-2026-118707, a Heap-Based Buffer Overflow in Microsoft Excel Leading to Remote Code Execution

ZeroPath
Brief Summary: CVE-2026-118722, a Heap-Based Buffer Overflow Enabling Remote Code Execution in Microsoft Excel

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118730 Use After Free Leading to Remote Code Execution

ZeroPath
Brief Summary: CVE-2026-118732, a Use After Free Leading to Remote Code Execution in Microsoft Office Excel

ZeroPath
Overview of CVE-2026-119985: Visual Studio Code Incorrect Authorization Let Remote Workspaces Bypass Workspace Trust

ZeroPath
Brief Summary: CVE-2026-119986, a Microsoft Excel Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Quick Look: Azure OpenAI CVE-2026-119990, a Critical Missing-Authentication Privilege Escalation Mitigated by Microsoft

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-119995 Heap-Based Buffer Overflow Enabling Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-111307 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Quick Look: Microsoft Office CVE-2026-120003 Heap-Based Buffer Overflow Reachable Through the Preview Pane

ZeroPath
Overview of CVE-2026-120779: Visual Studio Code Code Injection Through MCP Elicitation Notifications, With Patch Analysis

ZeroPath
Brief Summary: CVE-2026-120780, a Visual Studio Code Web Server Release Downgrade Enabling Remote Code Execution

ZeroPath
Overview of CVE-2026-120785: Heap-Based Buffer Overflow Leading to Code Execution in Microsoft Excel

ZeroPath
Overview of CVE-2026-120786: Heap-Based Buffer Overflow in Microsoft Excel Enabling Code Execution

ZeroPath
Quick Look: Microsoft Excel CVE-2026-120789 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-120790 Heap Buffer Overflow and User Context Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-120791 Heap-Based Buffer Overflow Leading to User-Assisted Code Execution

ZeroPath
Overview of CVE-2026-121287: Arista EOS RIPv2 MD5 Buffer Underwrite Crashes the Rip Agent

ZeroPath
Brief Summary: Visual Studio Code CVE-2026-121665 Workspace Trust Bypass via Unregistered and Nested Settings

ZeroPath
Brief Summary: Microsoft Office CVE-2026-122198 Heap-Based Buffer Overflow Allowing Code Execution When a Folder Is Viewed

ZeroPath
Quick Look: Microsoft Outlook CVE-2026-123375, a Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-123376, a Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-123377 Heap-Based Buffer Overflow Enabling Code Execution via Crafted Contact Certificates

ZeroPath
Quick Look: CVE-2026-111310, a Heap Buffer Overflow in Microsoft Word Enabling Remote Code Execution

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-123381 Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-123382 Untrusted Pointer Dereference Remote Code Execution

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-123383 Heap-Based Buffer Overflow Enabling Remote Code Execution

ZeroPath
Quick Look: Microsoft Outlook CVE-2026-123384 Heap Buffer Overflow Enabling Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-123385 Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft SharePoint Server CVE-2026-123390 Authenticated Deserialization Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-123394 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-124176: Microsoft Excel Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-124187 Use After Free Leading to Code Execution via Tracked Changes

ZeroPath
Overview of CVE-2026-62903: Microsoft.Data.SqlClient Enclave Key Binding Gap Enables Capture Replay Information Disclosure

ZeroPath
Brief Summary: CVE-2026-66801, a Heap-Based Buffer Overflow in Microsoft GDK for Xbox Enabling Unauthenticated Network Code Execution

ZeroPath
Overview of CVE-2026-66813: Out-of-Bounds Read Leading to Privilege Escalation in Microsoft SQL Server

ZeroPath
Brief Summary: CVE-2026-67374, an Authenticated Heap Buffer Overflow Leading to Remote Code Execution in Microsoft SQL Server

ZeroPath
Brief Summary: CVE-2026-67375, a SQL Server Stack Buffer Overflow Enabling Escalation to sysadmin

ZeroPath
Brief Summary: Microsoft SQL Server CVE-2026-67391 Heap-Based Buffer Overflow Enabling Authenticated Remote Code Execution

ZeroPath
Brief Summary: SQL Server CVE-2026-67632 Heap Buffer Overflow Allowing Authenticated Remote Code Execution

ZeroPath
Quick Look: SQL Server 2025 CVE-2026-67646, an Authenticated Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-70094: Untrusted search path in Visual Studio Code via JavaScript Debugger auto attach

ZeroPath
Overview of CVE-2026-80095: Stored Cross-Site Scripting in SharePoint Server Subscription Edition Enabling Elevation of Privilege

ZeroPath
Overview of CVE-2026-81384: Heap Buffer Overflow in Windows DNS Server Enables Conditional Remote Code Execution

ZeroPath
Overview of CVE-2026-85839: Heap Buffer Overflow in Microsoft WDAC OLE DB Provider for SQL Enables Client-Side Code Execution

ZeroPath
Overview of CVE-2026-88222: Heap-Based Buffer Overflow in Microsoft WDAC OLE DB Provider for SQL Enables Client-Side Code Execution

ZeroPath
Brief Summary: SQL Server CVE-2026-94511 Heap-Based Buffer Overflow Allowing Authorized Remote Code Execution

ZeroPath
Quick Look: Microsoft Excel CVE-2026-120788 Heap Buffer Overflow Enabling Code Execution

ZeroPath
Quick look: CVE-2026-110053, a heap-based buffer overflow in Microsoft Office Word

ZeroPath
Quick Look: Arista EOS BGP Agent Stack Buffer Overflow (CVE-2026-121289)

Okta Security
Node.js Project: November 11 Security Releases

Datadog HQ
Where to run AWS workloads and how to limit their access

Fastly
Static Publishing on Fastly Compute: What’s New in v8


2026-11-10

Amazon Security
Reduce alert fatigue by customizing threat detection features in Amazon GuardDuty

Microsoft Security
Detecting sleeper agents hiding in AI model neurons

Dark Reading
November Patch Tuesday: An Overflowing Cornucopia of CVEs

Rapid7
Patch Tuesday - November 2026

Krebs on Security
Microsoft Fixes Nearly 1,100 Security Vulnerabilities

Amazon Security
AWS refreshes ProcessUnity Global Risk Exchange assessment to enhance customer’s third-party due diligence

Ars Technica Security
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI

Dark Reading
Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon

GitGuardian
An ARTEX build ships no secret scanner. In our lab, it found the secrets anyway

Step Security
Railway’s Security Incident: Why CI/CD Needs Runtime Security

Dark Reading
F-Secure Identifies 26 Ways AI Can Harm Consumers, and Where to Stop Them

Dark Reading
Checkmarx Appoints Kobi Sivilya as Chief Information Security Officer

Troy Hunt
Finally, Payment by Bank Transfer Comes to Have I Been Pwned

Dark Reading
How to Assess OT Incident Response Preparedness

Eclypsium
Php2shell: A Network Edge Risk Playbook

Zero Day Initiative
The November 2026 Security Update Review

Dark Reading
AI Coding Agents Leak Thousands of Secrets to GitHub

Mozilla Security
Open research, stronger privacy: Making Firefox users harder to fingerprint

Amazon Security
Digital sovereignty at re:Invent 2026: Sessions you won’t want to miss

Github Security Blog
Git security vulnerabilities announced

Meta Security
Your Algorithm: Giving People More Ways to Personalize Facebook Recommendations

Meta Security
How We Built TLX: A Hardware-Native GPU Compiler for Production ML at Scale

Wiz
How to Evaluate AI Agent Cybersecurity Capabilities

Malwarebytes
Researcher bypassed Meta smart glasses’ safeguards to run her own code

Shielder Blog
Kubernetes Non-Core Security Audit

Rapid7
Critical vulnerabilities in N-able N-central prompt hosted shutdown

Rapid7
Five Signs Your MDR is All Alert, No Action

Bishop Fox Security
AI Security Assessment: A Six-Step Full-Stack Evaluation Standard

Wiz
Wiz and ISMAP: Building the Foundation for Japan's Public Sector

Malwarebytes
Update Chrome now to fix a flaw attackers are exploiting

MIT Technology Review
The Download: Pelosi’s successor targets AI and data centers face power woes

Malwarebytes
Before you buy an advent calendar, check these warning signs

MIT Technology Review
Evolving metal extraction processes

Dark Reading
AI Makes Reverse Engineering Mainstream Software & Malware Far Easier

ISC SANS
Apple Patches Everyting: November 2026 Edition, (Tue, Nov 10th)

Project Discovery
Probably Not Exploitable

Schneier on Security
New OpenSSH Vulnerability

CISA Alerts & Advisories
CISA Adds Six Known Exploited Vulnerabilities to Catalog

Escape DAST
Escape research found a scope bypass that made Gitea's restricted tokens full admins. It's now CVE-2026-117635.

ReversingLabs
The AI Cyberattack Surge Hasn't Arrived. But the Warning Signs Are Growing.

TrustedSec
CUI and Export Controls

ISC SANS
ISC Stormcast For Tuesday, November 10th, 2026 https://isc.sans.edu/podcastdetail/10172, (Tue, Nov 10th)

Troy Hunt
Weekly Update 529: Kids Social Media Bans (and Everything Else)

ZeroPath
Quick Look: Microsoft Word CVE-2026-112718 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-116719 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: CVE-2026-108187, an Origin Validation Error Enabling Privilege Escalation in Zoom Workplace for Windows

ZeroPath
Overview of CVE-2026-109467: Azure DevOps Improper Authentication Lets a Project Reader Trigger Pipeline Code Execution

ZeroPath
Brief Summary: CVE-2026-109472, a Deserialization Remote Code Execution Flaw in SharePoint Server Subscription Edition

ZeroPath
Quick Look: CVE-2026-109499, Type Confusion Code Execution in SharePoint Server Subscription Edition

ZeroPath
Brief Summary: Microsoft Word CVE 2026 109501, an Out-of-Bounds Read Leading to Code Execution via PDF Export

ZeroPath
Brief Summary: CVE-2026-109502, a SharePoint Server SSRF That Exposes Farm Service Account Credentials

ZeroPath
Brief Summary: Microsoft Office Word CVE 2026 109503, a Double Free Reached Through PDF Export

ZeroPath
Brief Summary: Microsoft Word CVE-2026-109505 Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-110043 Heap Buffer Overflow Enabling Remote Code Execution via the Preview Pane

ZeroPath
Brief Summary: Microsoft SharePoint Server CVE-2026-110044 Deserialization Remote Code Execution for Site Members

ZeroPath
Quick Look: Microsoft Word CVE-2026-110047 Use After Free Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-110048 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-110050 Heap-Based Buffer Overflow Enabling Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-110054, a Heap-Based Buffer Overflow in the PDF Conversion Path Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-110061: Heap-Based Buffer Overflow Enabling Remote Code Execution in Microsoft Office Word

ZeroPath
Quick Look: CVE-2026-110062, a Heap Buffer Overflow Enabling Code Execution in Microsoft Office Word

ZeroPath
Quick Look: CVE 2026 110064, a Heap-Based Buffer Overflow Enabling Remote Code Execution in Microsoft Office Word

ZeroPath
Quick Look: Microsoft Office Word CVE-2026-110067 Use After Free Remote Code Execution

ZeroPath
Overview of CVE-2026-111285: Heap-Based Buffer Overflow Leading to Remote Code Execution in Microsoft Word

ZeroPath
Brief Summary: Microsoft Office CVE-2026-111289 Use After Free Enabling Remote Code Execution via the Preview Pane

ZeroPath
Brief Summary: Microsoft Word CVE-2026-111290 Heap-Based Buffer Overflow Leading to Code Execution

ZeroPath
Overview of CVE-2026-111294: Heap-Based Buffer Overflow in Microsoft Word Reached Through Edit Points

ZeroPath
Quick Look: Microsoft Word CVE-2026-111295 Heap Buffer Overflow and Its Legacy Save Path to Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-111298 Out-of-Bounds Read Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-111299 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-111304 Use After Free Leading to Code Execution

ZeroPath
Quick Look: Microsoft Word CVE-2026-111306 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-111308: Numeric Truncation Leading to Heap Overflow RCE in Microsoft Word

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-111309 Invalid Pointer Release Enables Remote Code Execution via Preview Pane

ZeroPath
Quick Look: CVE-2026-112714, a Microsoft Word Heap Buffer Overflow Enabling Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-112715 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-112716 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Quick Look: Microsoft Word CVE-2026-112717 Heap-Based Buffer Overflow Leading to Code Execution

ZeroPath
Overview of CVE-2026-105437: Heap Buffer Overflow in Git's xdiff Three-Way Merge via Oversized Conflict Markers

ZeroPath
Brief Summary: Microsoft Word CVE-2026-112719 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: CVE-2026-112721, a Heap Buffer Overflow in Microsoft Office Word Enabling Remote Code Execution

ZeroPath
Overview of CVE-2026-112722: Heap-Based Buffer Overflow Enables Code Execution in Microsoft Office Word

ZeroPath
Overview of CVE-2026-112723: Heap-Based Buffer Overflow in Microsoft Office Word Enabling Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-112724 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
CVE-2026-112726: Heap buffer overflow leading to remote code execution in Microsoft Word

ZeroPath
Overview of CVE-2026-112727: Windows DNS Untrusted Pointer Dereference Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-112728: Heap-Based Buffer Overflow in Microsoft Office Word Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-112729: Heap-Based Buffer Overflow in Microsoft Word Enables Code Execution via Crafted Documents

ZeroPath
Brief Summary: CVE-2026-112730, a Heap-Based Buffer Overflow Enabling Code Execution in Microsoft Office Word

ZeroPath
Brief Summary: Microsoft Word CVE-2026-112733 Heap-Based Buffer Overflow in the Font Substitution Path

ZeroPath
Quick Look: Microsoft Word CVE-2026-112735 Use After Free Leading to Remote Code Execution

ZeroPath
Brief Summary: CVE-2026-112741, a Heap Buffer Overflow in Microsoft Office Word Enabling Code Execution

ZeroPath
Brief Summary: CVE-2026-114147, an ASP.NET Core SignalR Redis Subscription Leak Leading to Denial of Service

ZeroPath
Brief Summary: CVE-2026-114151, a Visual Studio and .NET Deserialization Remote Code Execution Flaw

ZeroPath
Overview of CVE-2026-114152: Stack Buffer Overflow in the Visual Studio and .NET Native Symbol Reader

ZeroPath
Overview of CVE-2026-114159: Heap Buffer Overflow in the Visual Studio and .NET Native PDB Reader

ZeroPath
Brief Summary: Azure Managed Grafana CVE-2026-114160 SSRF Service Token Disclosure Leading to Elevation of Privilege

ZeroPath
Quick Look: CVE-2026-114162, Incorrect Authorization in Microsoft Graph (Azure PIM) Enabling Global Administrator Escalation

ZeroPath
Brief Summary: Microsoft Office CVE-2026-116717 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-116718: Heap-Based Buffer Overflow in Microsoft Word Enabling Code Execution via Crafted Documents

ZeroPath
Overview of CVE-2026-108186: Improper Input Validation Privilege Escalation in Zoom Workplace for Windows

ZeroPath
Quick Look: Microsoft Word CVE-2026-116720 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-116722 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Quick Look: Microsoft Word CVE-2026-116923 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Quick Look: CVE-2026-116925, a Heap Buffer Overflow in Microsoft Word Enabling Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE 2026 116927 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft SQL Server CVE-2026-116930 Command Injection Leading to Remote Code Execution

ZeroPath
Brief Summary: CVE-2026-116934 in Microsoft SQL Server, an Untrusted Pointer Dereference Enabling Privilege Escalation

ZeroPath
Overview of CVE-2026-116941: Authenticated Heap Overflow Leading to Code Execution in Microsoft SQL Server

ZeroPath
Brief Summary: Microsoft SQL Server CVE-2026-116942 Heap Buffer Overflow Allowing Authenticated Remote Code Execution

ZeroPath
Brief Summary: Microsoft SQL Server CVE-2026-116943 Unauthenticated Buffer Overread Information Disclosure

ZeroPath
Brief Summary: CVE-2026-116945, a Heap Buffer Overflow RCE in Microsoft SQL Server Integration Packages

ZeroPath
Overview of CVE-2026-116946: Heap Buffer Overflow in Microsoft SQL Server Integration Packages Enables Authenticated Code Execution

ZeroPath
Overview of CVE-2026-118106: Heap-Based Buffer Overflow in Microsoft SQL Server Replication

ZeroPath
Quick Look: CVE-2026-118120, SQL Injection in Microsoft SQL Server Replication Enabling Privilege Escalation

ZeroPath
CVE-2026-118149: Authenticated Code Injection Leading to Remote Code Execution in Microsoft Exchange Server SE

ZeroPath
Quick Look: CVE-2026-118150, a Microsoft Exchange Server SE Authorization Bypass Enabling Privilege Escalation

ZeroPath
Brief Summary: Microsoft Exchange Server SE CVE-2026-118207 Authenticated Remote Code Execution

ZeroPath
Overview of CVE-2026-118292: Microsoft Excel Stack-Based Buffer Overflow Leading to Code Execution

ZeroPath
Brief Summary: CVE-2026-118293, Microsoft Excel Out-of-Bounds Read Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118295 Stack-Based Buffer Overflow Enabling Remote Code Execution

ZeroPath
Overview of CVE-2026-118297: Microsoft Excel Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-118299: Heap-Based Buffer Overflow in Microsoft Excel AutoFormat Enables Code Execution

ZeroPath
Brief Summary: CVE-2026-118302, a Microsoft Excel Heap-Based Buffer Overflow Triggered Through Forecast Sheets

ZeroPath
Overview of CVE-2026-118700: Stack-Based Buffer Overflow in Microsoft Excel Enabling Remote Code Execution

ZeroPath
Brief Summary: CVE-2026-118701, Microsoft Excel Heap Buffer Overflow Enabling Remote Code Execution

ZeroPath
Brief Summary: CVE-2026-118702, a Double Free Remote Code Execution Flaw in Microsoft Excel

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118704 Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118712 Integer Underflow Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118715 Heap Buffer Overflow Elevation of Privilege

ZeroPath
Overview of CVE-2026-118717: Stack-Based Buffer Overflow Enabling Code Execution in Microsoft Excel

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118718 Heap-Based Buffer Overflow Leading to Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118721 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Quick Look: Microsoft Excel CVE-2026-118725 Out-of-Bounds Read Leading to Elevation of Privilege

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118731 Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: ASP.NET Core Identity Scaffolding Flaw CVE-2026-118741 Sends Password Reset Links to Client-Supplied Addresses

ZeroPath
Brief Summary: Azure Front Door CVE-2026-118742, an Incorrect Permission Assignment Enabling Unauthenticated Privilege Elevation

ZeroPath
Brief Summary: CVE-2026-118745, a Heap-Based Buffer Overflow in the Native PDB Reader Behind Visual Studio and .NET

ZeroPath
Brief Summary: ASP.NET Core CVE-2026-118749, Quadratic Minimal API Validation Denial of Service (CWE-407)

ZeroPath
Overview of CVE-2026-118750: Unauthenticated Memory Exhaustion in ASP.NET Core WebUtilities FileBufferingReadStream

ZeroPath
Overview of CVE-2026-119951: Use-After-Free Remote Code Execution in Windows Deployment Services

ZeroPath
Brief Summary: Windows IIS CVE-2026-119961, a Race Condition Leading to Use After Free and Remote Code Execution

ZeroPath
Brief Summary: Ivanti CSA CVE-2026-121683, Missing Authentication in EPM Core Certificate Trust Management

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118714 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Exchange Server CVE-2026-118153 Unauthenticated Denial of Service via Inefficient Algorithmic Complexity

ZeroPath
Brief Summary: Ivanti Endpoint Manager CVE-2026-121653, Unauthenticated SQL Injection Leading to RCE

ZeroPath
Brief Summary: Microsoft Word CVE-2026-109491 Use After Free Remote Code Execution

ZeroPath
Quick Look: Microsoft Outlook CVE-2026-110068 Use After Free Remote Code Execution

ZeroPath
Brief Summary: SharePoint Server CVE-2026-109464 Deserialization Remote Code Execution

ZeroPath
Brief Summary: ASP.NET Core CVE-2026-114146 Incorrect Authorization Leading to Privilege Elevation

Teleport Blog
Introducing Teleport Beams: A Trusted Runtime for Securing Agents in Production Infrastructure

Teleport Blog
Phases: Git for container filesystems, or, what I built after leaving CNCF buildpacks.io

Teleport Blog
Announcing beam-init - a Rust init process for agents

Joshua Rogers
Annoying ChatGPT data usage

Datadog HQ
Monitor and troubleshoot employee devices with Datadog End User Device Monitoring

Datadog HQ
Monitor OpenAI Codex usage and impact with Datadog

Datadog HQ
Monitor OCI workloads in US government clouds with Datadog

Datadog HQ
Detect and respond to PHP2Shell with Datadog

Datadog HQ
Troubleshoot Kubernetes inference workloads with Datadog


2026-11-09

Xint
Node2Shell (CVE-2026-111497) Emergency Response Plan

Dark Reading
People Are Getting Weird About AI

Dark Reading
CISA Announces Enhanced Reporting Form for Cyber Incidents

Dark Reading
Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion

Dark Reading
Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India

Microsoft Security
FORGE Lab uses agentic tools to identify memory safety issues in Rust

Ars Technica Security
Vulnerability that lets hackers SSH into Linux devices is under active exploitation

MIT Technology Review
The backlash about data centers might really just be about electricity

Amazon Security
Help defend against memory poisoning in Amazon Bedrock AgentCore with multi-layer write validation

ISC SANS
Attackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th)

Dark Reading
Attackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux

Include Security
Why Don’t We Just Use AI?

Eclypsium
Unveiling AI Infrastructure Vulnerabilities - BTS #85

Ars Technica Security
Claude Code is accidentally exposing secrets all over GitHub

Dark Reading
PwC's CISO on AI, Robots & What's Next for Security

MIT Technology Review
Nancy Pelosi’s replacement is ready to regulate AI

Meta Security
Extending LLDB to Debug Applications That Span CPUs and GPUs

GitGuardian
Beyond ARTEX: 45 Agentic Attack Frameworks, What They Hunt For, and How to Find Them

Jericho
Microsoft Advisories, CVEs, and Statistics Reminder

Amazon Security
Simplify cross-partition access with AWS IAM outbound identity federation

Dark Reading
NIST: Solo Shouldn't Mean Less Secure

Wiz
Trusted by Default: Qubole Cross-Account Access Abused in the Wild

Socket
Malicious bee-js npm Release and Swarm Desktop Releases Deliver SleepyDuck Ethereum C2 Backdoor

Offensive Security
LEVEL 20: Same Game. New Level.

MIT Technology Review
The Download: empty AI climate claims, and an Nvidia investigation

Malwarebytes
13.3 million people’s medical data exposed; companies pay $300,000

Cloudflare
Launching the Vite Ecosystem Fund

MIT Technology Review
Innovating with AI in the special chemicals industry

Hunt and Hackett
Your security seems to be under control, but can you prove it?

Schneier on Security
AI Security

CISA News
CISA Announces Enhanced Reporting Form for Cyber Incidents

CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog

GitGuardian
Claude Code settings.local.json Secrets: 17 months of exposure on GitHub, & Docker Hub

MIT Technology Review
The climate case for AI has not been made

Malwarebytes
A week in security (November 2 – November 8)

ISC SANS
ISC Stormcast For Monday, November 9th, 2026 https://isc.sans.edu/podcastdetail/10170, (Mon, Nov 9th)

Step Security
@ethersphere/bee-js 13.3.0 Compromised

ZeroPath
Brief Summary: SAP NetWeaver IGS CVE-2026-109806 Unauthenticated Denial of Service via Integer Overflow

ZeroPath
Overview of CVE-2026-119079: Quadratic ASN.1 Decoding Lets Unauthenticated Clients Exhaust MIT Kerberos KDC CPU

ZeroPath
Brief Summary: SAP Message Server CVE-2026-120010, an Unauthenticated Heap Buffer Overflow Causing Denial of Service

ZeroPath
Brief Summary: CVE-2026-120017, a SAML2 Authentication Bypass in SAP NetWeaver AS ABAP and ABAP Platform

ZeroPath
Overview of CVE-2026-76964: Unauthenticated Memory Corruption in SAP NetWeaver AS ABAP Internet Communication Manager

ZeroPath
Brief Summary: SAP NetWeaver AS ABAP CVE-2026-76965, Missing Authorization Checks Leading to OS Command Execution

ZeroPath
Brief Summary: SAP NetWeaver Kernel CVE-2026-76966, Unauthenticated RFC Memory Corruption

ZeroPath
Brief Summary: SAP Gateway CVE-2026-89103, a Default ACL Broken Access Control Flaw Scored CVSS 10.0

ZeroPath
Brief Summary: CVE-2026-89119, Administrative CSRF in SAP Web Dispatcher and NetWeaver ICM

ZeroPath
Brief Summary: SAP Web Dispatcher CVE-2026-89126 Heap Buffer Overflow Allowing Unauthenticated Code Execution

Auth0
Authentication and Authorization: What's New in .NET 11

ZeroPath
Brief Summary: CVE-2026-120008, an Unauthenticated Out-of-Bounds Write in SAP NetWeaver Internet Graphics Service

ZeroPath
Brief Summary: Confection WordPress Cable CVE-2026-115252 Unauthenticated PHP Code Execution

ZeroPath
Brief Summary: SAP Message Server CVE-2026-109804 Unauthenticated Information Disclosure (CWE 908)

ZeroPath
Overview of CVE-2026-109803: SAP NetWeaver Knowledge Management XML Forms XSL Transformation Code Injection (CVSS 9.9)

ZeroPath
Brief Summary: SAP NetWeaver CVE-2026-109795 Code Injection via Missing Authorization Check (CVSS 9.9)

Datadog HQ
Datadog achieves Cyber Essentials Plus certification for its UK operations and UK1 production environment

Datadog HQ
Investigate Kubernetes health and processes with the Datadog MCP Server

Datadog HQ
Catch incidents and pause faulty deployments automatically with Datadog Deployment Gates

Fastly
Do You Have a Green Website?

Snyk
Say Yes To MCP, Safely A Guide For Governing AI Coding Agents With Evo ADS

Joshua Rogers
What’s going on with Taiwan’s RDAP server?


2026-11-08

Naveen Srinivasan
My W^X Hook Was Letting Things Be W+X

ISC SANS
Scans for Sshole Vulnerability (CVE-2026-123158), (Sun, Nov 8th)

ToxSec
AI Security: Model Extraction and the Risk to Proprietary AI Systems

Joshua Rogers
You can no longer star archived GitHub repositories

ZeroPath
Brief Summary: Kyverno CVE-2026-124440, apiCall Namespace Clamp Bypass to Cluster Admin

ZeroPath
Brief Summary: Kyverno CVE-2026-124441 Authorization Bypass via Variable Generate Target Kind (with PoC)

ZeroPath
OpenEMR CVE-2026-124445: OneTimeAuth Token Replay and PIN Brute Force, with PoC Analysis

ZeroPath
Brief Summary: OpenEMR CVE-2026-124450 Broken Access Control and Path Traversal in the fax/sms disposeDocument Action (with PoC)

Rosecurify
Seclog - #203

LogTriage Research
What finds a new MCP server: directories, monitors and scanners


2026-11-07

Ars Technica Security
British soldier ignored order to pull his SIM card, then got blackmailed

shubs
unlocking any car from X brand in most of the world

Microsoft Security
ARTEX abuse expands as cybercriminals target financial sector

Sam Curry
Hacking Two Automakers: ForgeRock Path Confusion, RCE, and Remote Vehicle Access

MaskRay's Blog
四色滑道：从博物馆的益智玩具到一道OI题

ZeroPath
CVE-2026-116751: Unauthenticated Time-Based SQL Injection via Tag Array Keys in Amelia Pro for WordPress

ZeroPath
CVE-2026-119155: Unauthenticated Time-Based SQL Injection in wpForo Forum via href[locale], with Patch Analysis

ZeroPath
Overview of CVE-2026-123543: Unauthenticated Denial of Service via Unbounded Java Deserialization in OpenAM

ZeroPath
Overview of CVE-2026-123549: OpenAM Self Registration Attribute Bypass Enables Anonymous Admin Takeover

ZeroPath
Quick Look: OpenAM CVE-2026-123550 SAML Authentication Bypass via Unsigned Assertions

ZeroPath
Brief Summary: Tenda AC19 CVE-2026-123966 Heap Buffer Overflow in saveParentControlInfo with Public PoC

ZeroPath
Brief Summary: OpenAM CVE-2026-123551 Session Token Disclosure via the Notification WebSocket


2026-11-06

Step Security
CVE-2026-123158 (*sshole): OpenSSH Password Authentication Bypass on Alpine Linux

Schneier on Security
Friday Squid Blogging: New Jurassic Squid Predecessors

Dark Reading
UK Wades Into Tech Sovereignty Amid AI Policy Changes

GitGuardian
The Agents Have Now Found Your Secrets On GitHub: ARTEX Is Abusing Public Secrets Right Now

Amazon Security
Addressing protocol security gaps in multi-tenant Kubernetes

Ars Technica Security
Chainalysis says hackers stole credentials and tokens for all of its customers

Socket
Free Certified Patch for Critical Rails Active Storage Vulnerability

Eclypsium
21st Annual API Cybersecurity Conference for the Oil and Natural Gas Industry

Eclypsium
FinServ Cyber Security Canada Summit 2026

Dark Reading
AI Gave Your Incident Archive a Second Job

XBOW
Top AI Models for Offensive Security, Fall 2026: Why Cost Changes Everything

Socket
Shai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI Tools

Scott Helme
We Know 15,579 Websites Are Infected. How Do We Tell Them?

Silverfort
AI Agent Security: 5 steps to take before the rules are written

Malwarebytes
Big Tech sues over California plan to limit kids’ scrolling

Schneier on Security
Pinpointing Location of Videos from Background Airplane Sounds

Dark Reading
Why Europe's Freezer Hacks Spread So Far, So Fast

Cloudflare
The post-quantum future of web privacy

Rapid7
Metasploit Wrapup: Unauth RCE modules in Network Perimeter Devices and much more

Offensive Security
What AI Changes About the Cybersecurity Skills Your Team Needs

MIT Technology Review
The Download: a humanoid cleans house and Samsung builds for the AI boom

GitGuardian
How to Handle Secrets in Helm

Malwarebytes
Attacks on supermarket and blood storage systems prompt US warning

Trail of Bits
After Binance, check what your signing systems can approve

CISA Alerts & Advisories
CISA Adds One Known Exploited Vulnerability to Catalog

Moonlock
Fake Homebrew installer linked to record-breaking $6.3 billion Binance heist

Dark Reading
UK Warns Its Critical Infrastructure Faces Grave Risk

DarkRelay
Cybersecurity Beginner Path: Networking, Linux, and First Recon Habits

Moonlock
Apple issued spyware alerts to iPhone users in 110 countries

Moonlock
Is Shopify legit and safe? How scam stores, phishing, and fraud work

Moonlock
Lost crypto to a MetaMask scam? What recovery realistically looks like

ISC SANS
ISC Stormcast For Friday, November 6th, 2026 https://isc.sans.edu/podcastdetail/10168, (Fri, Nov 6th)

ZeroPath
Brief Summary: Craft CMS CVE-2026-123488, Unauthenticated SQL Injection via the Element Search Endpoint

ZeroPath
Brief Summary: IBM API Connect CVE-2026-17402 OS Command Injection Rated 9.9

ZeroPath
Brief Summary: BuddyForms CVE-2026-107622, Unauthenticated Privilege Escalation via bf_post_type Form-Type Confusion

ZeroPath
Brief Summary: CVE-2026-109469, a CVSS 10.0 Authorization Bypass in Microsoft Entra Device Registration That Microsoft Has Already Mitigated

ZeroPath
Overview of CVE-2026-120537: Unauthenticated Stored XSS in the TranslatePress Dictionary Endpoint

ZeroPath
Brief Summary: IBM API Connect CVE-2026-16720 Improper Authentication Lets Attackers Obtain Other Users' Access Tokens

ZeroPath
Brief Summary: IBM API Connect CVE-2026-17131, an Unauthenticated SSRF Outbound Filter Bypass (CVSS 9.3)

ZeroPath
Overview of CVE-2026-17147: Authenticated Path Traversal to Code Execution in IBM API Connect

ZeroPath
Brief Summary: IBM API Connect CVE-2026-17278 Authentication Bypass by Spoofing Exposes API Catalog and Runtime Configuration

ZeroPath
Brief Summary: IBM API Connect CVE-2026-17301 Signature Verification Authentication Bypass

ZeroPath
Brief Summary: IBM API Connect CVE-2026-17324 Missing Authentication for a Critical Function

ZeroPath
Brief Summary: IBM API Connect CVE-2026-17342 Authenticated Code Injection Leading to Arbitrary Code Execution

ZeroPath
Brief Summary: IBM API Connect CVE-2026-17344 Unauthenticated Server-Side Request Forgery

ZeroPath
Brief Summary: IBM API Connect CVE-2026-17360 Hardcoded Credentials Allow Full Administrative Control

ZeroPath
Overview of CVE-2026-17362: Missing Authorization Lets Remote Attackers Create, Modify, or Delete Tenants in IBM API Connect V12

ZeroPath
Brief Summary: IBM API Connect CVE-2026-17379 Signature Verification Flaw Allows Authentication Bypass and Arbitrary Role Assignment

ZeroPath
Brief Summary: IBM API Connect CVE-2026-17399 Authenticated Upload Validation Flaw Leading to Code Execution

ZeroPath
Brief Summary: SonicOS CVE-2026-107154 Management Interface Session Validation Flaw (CWE-291)

ZeroPath
Brief Summary: IBM API Connect CVE-2026-17403 Hard-Coded Credentials Enabling Administrative Control

ZeroPath
Brief Summary: IBM API Connect CVE-2026-17408, an Unauthenticated OS Command Injection Rated CVSS 9.8

ZeroPath
Brief Summary: IBM API Connect CVE-2026-17409 Case-Sensitivity Access Control Bypass

ZeroPath
Brief Summary: IBM API Connect CVE-2026-17150, Custom Module Validation Flaw Enabling Cross-Tenant Code Execution

ZeroPath
Brief Summary: IBM API Connect CVE 2026 17313 Authentication Bypass via Alternate Path Exposing Gateway Configuration

ZeroPath
Brief Summary: IBM API Connect CVE-2026-17340 Unauthenticated Path Traversal Leading to Remote Code Execution

ZeroPath
Brief Summary: IBM API Connect CVE-2026-18838 Authentication Bypass by Spoofing Enables User Impersonation

ZeroPath
Brief Summary: SonicOS CVE-2026-107155 Permissive Cross-Domain (CORS) Policy in the Management API

ZeroPath
Overview of CVE-2026-119923: Unauthenticated Heap Overflow in the Babelfish for PostgreSQL TDS Prelogin Parser

Nebula Security
OpenSSH allows long-password logins to * accounts on musl with PAM off

Hacktron
Partnering with OpenAI

Star Labs
Groklem: an Android banker that rents Grok to read your texts

Greynoise
Global Event: SSHole (CVE-2026-123158) Live Activity Report

Sam Curry
Leaking the WARDOGS Server Binary via Remote Code Execution on a Hosting Partner

Datadog HQ
How we investigated prompt cache misses with Datadog

Yunus Aydın
Claude Code was sending your email in the User-Agent header

Yunus Aydın
Claude Code, User-Agent başlığında e-postanızı gönderiyordu


2026-11-05

Microsoft Security
Threat actors use agentic AI tooling to find and abuse exposed secrets

Ars Technica Security
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices

Malwarebytes
Phone return scams: where a real delivery and a fake return end up in a bill for you

Dark Reading
Operação de influência russa tem como alvo generalizado a América Latina

Malwarebytes
NIKKE PC launcher compromise put players’ passwords and personal files at risk

Dark Reading
US Government Email Systems Open to Abuse Thanks to Typos

Malwarebytes
Scammers use AI-generated images of missing pets to extort owners

core-jmp
*sshole: OpenSSH on musl Accepts Any Password Over 256 Bytes

watchTowr Labs
Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560)

Black Hills Info Sec
Core Skills in the Age of AI

core-jmp
Turning Chrome Remote Desktop into Pure Red Team Ops

Dark Reading
What We Missed: Knicks Phishing Test Goes Out of Bounds

core-jmp
Signed, Sealed, and Relayed, NTLM-style: Bypassing LDAP Signing Through Reauthentication

core-jmp
Picking apart PHP2Shell

Aikido
Even gem list can run someone else's code

Dark Reading
APT29's Watering Holes Target Thousands of Mobile Users

Amazon Security
Introducing AWS account access manager: IAM role flexibility with centralized workforce access

Talos Intelligence
Bring a tent, I've got the coffee: Lessons from it-sa

Microsoft Security
New investments to reduce on-premises security risk

Aikido
Deleting a leaked key from your repo doesn't protect you

Cloudflare
Agents aren’t humans (but they kinda are)

Microsoft Security
​​​​What’s new in Microsoft Security: November 2026

Dark Reading
SecurityDataPipeline.com Launches as a New Educational Resource for the AI Era

Offensive Security
Keys to the Kingdom: The eMudhra Weak-Key Compromise

Microsoft Security
Email threat landscape: Q3 2026 trends and insights

GitGuardian
Binance, BitGet, and the Credential Playbook That Keeps Working

Red Siege InfoSec Blog
DigDug: Making Your Payload Too Big to Scan

Socket
GitHub to Block pull_request_target Workflows by Default Starting December 2

Bishop Fox Security
What Is an Agent Harness? How AI Security Tools Work

Rapid7
Gartner Report: The Attack Path is Closing Faster than Most Teams Can Patch

Escape DAST
Launching Continuous AI Pentesting: sharper with every finding, auditable with every release