220 Security Blogs

2026-11-12

Dark Reading

Cyber Experts Weigh In: How to Fight Artex & AntiFox

The Citizen Lab

Security Agencies Worldwide Found to Use Ad-Based Surveillance System

MIT Technology Review

Nvidia privately confirmed it could track chips to fight smuggling, even as industry publicly questioned feasibility

Dark Reading

Extortion Group Luna Moth Flits Into Law Firms a Second Time

Talos Intelligence

Never be afraid to ask questions

Black Lantern Security

BBOT 3.1 Release

Wiz

ASPM in the AI Era Part 3: Fixing Risk at the Speed of Code

Offensive Security

Build a Training Plan Around Your Next Security Project

Silverfort

Silverfort Named a Leader in the IDC MarketScape for Worldwide Augmented Identity Security Solutions 2026

Microsoft Security

Trained to betray: How post-training supply chain attacks hijack coding agents

GitGuardian

Coding Agent Security for AppSec Leaders: Start With What Agents Can Reach

Step Security

CVE-2026-126187: React Server Components Flaw Lets Attackers Execute Code Through Smuggled Flight Rows

Socket

Cyberattacks Are Skyrocketing in Japan as Researchers Trace AI-Assisted Intrusions

Malwarebytes

LEGO’s BrickLink taken offline: What users should know

Praetorian

CVE-2026-119618: What We Know About the Critical Apache mod_http2 Race Condition

Aikido

Top AI network and infrastructure pentesting tools in 2026

Google Safety & Security

Designing for privacy on intelligent eyewear

MIT Technology Review

The Download: COP31’s climate challenge and the quest for immortality

Eye Security Research

Machine speed: how we defended against an AI-driven attack

Palo Alto Networks

Europe Is Setting the Global Standard for Sovereignty. Here Is Where We Stand.

NVISO Labs

Breaking the Semantic Cache: A LiteLLM Case Study (CVE-2026-89032)

Schneier on Security

Another Way Police Are Locating People from Their Smartphones

CISA Alerts & Advisories

Siemens RUGGEDCOM APE1808

CISA Alerts & Advisories

Siemens Desigo, Gridscale

CISA Alerts & Advisories

Siemens RUGGEDCOM APE1808

CISA Alerts & Advisories

Siemens Building Automation and Energy Products

CISA Alerts & Advisories

Siemens Industrial Edge Management

ISC SANS

Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)

Dark Reading

Inside an AI Attack Against a US Retailer

Malwarebytes

Why scammers want you to allow push notifications

Elastic Security Labs

0% GPU utilization: How SANSAR hides Linux cryptomining

Step Security

WFX Phantom: The GitHub Actions Secret Stealer That Deletes Its Tracks

ReversingLabs

Securing Frontier AI: ReversingLabs Is Part of Anthropic’s Expanded Cyber Verification Program

Malwarebytes

FBI agent stole $2.47m in crypto from criminal wallets

Semgrep

Semgrep Launches Agentic AppSec Platform to Secure Code at Agentic Speed

Semgrep

Context Is the Missing Layer in Agentic AppSec

Semgrep

The Fastest Fix is the One Never Committed

Semgrep

Coding Agents Grew Your Security Backlog. The Semgrep MCP Server Helps Your Agent Fix It.

Semgrep

Introducing Semgrep Mandoline: Program Analysis Inside the Agent’s Reasoning Loop

ISC SANS

ISC Stormcast For Thursday, November 12th, 2026 https://isc.sans.edu/podcastdetail/10176, (Thu, Nov 12th)

Aikido

wfx-loot campaign pushes CI secret stealer to tens of thousands of repositories

Dark Reading

Chinese AI Project Scouts Spies in Taiwan Chip Industry

Semgrep

Seconds from Disaster: WFX Phantom and the CI Pipeline Nobody Was Watching

Greynoise

GreyNoise AI Cyber Index: Benchmarking AI Models on Defensive Capabilities

Okta Security

OpenSSH "SSHole" Vulnerability (CVE-2026-123158)

Apple Security Research

Secure Exclaves and Ambient Sensing

Dark Reading

Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise

Fastly

Fastly Recognized in the Inaugural Gartner® Magic Quadrant™ for Edge Distribution Platforms

2026-11-11

Doyensec

Introducing ProtoSpector: A Burp Suite Extension for Analyzing, Tampering With, and Testing Protobuf and gRPC Traffic

Dark Reading

AIを活用したサイバー攻撃の増加を受け、日本がサイバーセキュリティへの緊急資金拠出を推進

Black Hills Info Sec

Log Analysis Field Guide: Tips for Spotting Patterns and Red Flags

Dark Reading

Attackers Say 'Hello' to a Different Scale of Cloud Attack

Dark Reading

AI Raises the Stakes for Cyber Resilience

Dark Reading

N-able Takes N-central Platform Offline After Discovery of 33 Flaws

Amazon Security

Ease of use and secure defaults in the new AWS experience

Microsoft Security

The global socket: how threat actors are weaponizing GSocket for stealthy C2

Wiz

Critical RCE Vulnerability in Apache HTTP Server: Everything You Need To Know

Malwarebytes

Vanderbilt restores systems after cyberattack as hackers claim data theft

ISC SANS

Microsoft Patch Tuesday November 2026, (Tue, Nov 10th)

GitGuardian

AntiFox Targeting AWS Credentials: The Latest Wave of AI Agent Attacks

Amazon Security

Part 4 – Cybersecurity journeys: What I’d tell my younger self

Krebs on Security

Who Runs the Ransomware Group Qilin?

Meta Security

Intelligent Delivery: Making Every Unit of Compute Serve Better Ads

MIT Technology Review

What to know about this year’s UN climate talks

Google Safety & Security

Google Cloud leaders share what to expect in cybersecurity for 2027.

Microsoft Security

Lessons from 59 Linux Kernel Bug Reports

PortSwigger

Blind trust: stealing credentials through CSP

Cloudflare

Choosing QuePaxa, an unusual consensus algorithm

Ars Technica Security

Google DeepMind just mathematically verified key parts of Signal

Bishop Fox Security

Proofpoint ITM | 4.4.3.148–5.0.1

Malwarebytes

Remus malware claims Gmail access even after you change your password

MIT Technology Review

The Download: preserving minds and weighing open AI risks

Malwarebytes

Muse sleep band users weren’t told their brain data was training AI

Schneier on Security

Three People Arrested for AI-Enhanced Impersonation Fraud

Malwarebytes

Microsoft Patch Tuesday fixes Outlook flaw already under attack

Xint

How Xint Code Reads a Large Codebase

Palo Alto Networks

The SASE “Trilemma”: How Regulated Enterprises are Navigating Digital Sovereignty, Resilience, and Global Cyber Threat Intelligence

DarkRelay

Living on the Edge: How APT Groups Weaponize Network Appliances

Step Security

GitHub Package Firewall vs. StepSecurity Secure Registry: Protection beyond npm

ISC SANS

ISC Stormcast For Wednesday, November 11th, 2026 https://isc.sans.edu/podcastdetail/10174, (Wed, Nov 11th)

Talos Intelligence

Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities

ZeroPath

Brief Summary: Microsoft Excel CVE-2026-120790 Heap Buffer Overflow and User Context Code Execution

ZeroPath

Overview of CVE-2026-124176: Microsoft Excel Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Overview of CVE-2026-119985: Visual Studio Code Incorrect Authorization Let Remote Workspaces Bypass Workspace Trust

ZeroPath

Brief Summary: CVE-2026-119986, a Microsoft Excel Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath

Quick Look: Azure OpenAI CVE-2026-119990, a Critical Missing-Authentication Privilege Escalation Mitigated by Microsoft

ZeroPath

Brief Summary: Microsoft Outlook CVE-2026-119995 Heap-Based Buffer Overflow Enabling Remote Code Execution

ZeroPath

Overview of CVE-2026-120002: SharePoint Server Secure Store Incorrect Authorization Leading to Elevation of Privilege

ZeroPath

Quick Look: Microsoft Office CVE-2026-120003 Heap-Based Buffer Overflow Reachable Through the Preview Pane

ZeroPath

Overview of CVE-2026-120779: Visual Studio Code Code Injection Through MCP Elicitation Notifications, With Patch Analysis

ZeroPath

Brief Summary: CVE-2026-120780, a Visual Studio Code Web Server Release Downgrade Enabling Remote Code Execution

ZeroPath

Overview of CVE-2026-120785: Heap-Based Buffer Overflow Leading to Code Execution in Microsoft Excel

ZeroPath

Overview of CVE-2026-120786: Heap-Based Buffer Overflow in Microsoft Excel Enabling Code Execution

ZeroPath

Quick Look: Microsoft Excel CVE-2026-120789 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Excel CVE-2026-118730 Use After Free Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Excel CVE-2026-120791 Heap-Based Buffer Overflow Leading to User-Assisted Code Execution

ZeroPath

Overview of CVE-2026-121287: Arista EOS RIPv2 MD5 Buffer Underwrite Crashes the Rip Agent

ZeroPath

Brief Summary: Visual Studio Code CVE-2026-121665 Workspace Trust Bypass via Unregistered and Nested Settings

ZeroPath

Brief Summary: Microsoft Office CVE-2026-122198 Heap-Based Buffer Overflow Allowing Code Execution When a Folder Is Viewed

ZeroPath

Quick Look: Microsoft Outlook CVE-2026-123375, a Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Outlook CVE-2026-123376, a Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Outlook CVE-2026-123377 Heap-Based Buffer Overflow Enabling Code Execution via Crafted Contact Certificates

ZeroPath

Brief Summary: Microsoft Outlook CVE-2026-123380 Heap-Based Buffer Overflow Enabling Remote Code Execution

ZeroPath

Brief Summary: Microsoft Outlook CVE-2026-123381 Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Outlook CVE-2026-123382 Untrusted Pointer Dereference Remote Code Execution

ZeroPath

Brief Summary: Microsoft Outlook CVE-2026-123383 Heap-Based Buffer Overflow Enabling Remote Code Execution

ZeroPath

Quick Look: Microsoft Outlook CVE-2026-123384 Heap Buffer Overflow Enabling Remote Code Execution

ZeroPath

Brief Summary: Microsoft Excel CVE-2026-123385 Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft SharePoint Server CVE-2026-123390 Authenticated Deserialization Remote Code Execution

ZeroPath

Brief Summary: Microsoft Word CVE-2026-123394 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: CVE-2026-118732, a Use After Free Leading to Remote Code Execution in Microsoft Office Excel

ZeroPath

Brief Summary: Microsoft Excel CVE-2026-124187 Use After Free Leading to Code Execution via Tracked Changes

ZeroPath

Overview of CVE-2026-62903: Microsoft.Data.SqlClient Enclave Key Binding Gap Enables Capture Replay Information Disclosure

ZeroPath

Brief Summary: CVE-2026-66801, a Heap-Based Buffer Overflow in Microsoft GDK for Xbox Enabling Unauthenticated Network Code Execution

ZeroPath

Overview of CVE-2026-66813: Out-of-Bounds Read Leading to Privilege Escalation in Microsoft SQL Server

ZeroPath

Brief Summary: CVE-2026-67374, an Authenticated Heap Buffer Overflow Leading to Remote Code Execution in Microsoft SQL Server

ZeroPath

Brief Summary: CVE-2026-67375, a SQL Server Stack Buffer Overflow Enabling Escalation to sysadmin

ZeroPath

Brief Summary: Microsoft SQL Server CVE-2026-67391 Heap-Based Buffer Overflow Enabling Authenticated Remote Code Execution

ZeroPath

Brief Summary: SQL Server CVE-2026-67632 Heap Buffer Overflow Allowing Authenticated Remote Code Execution

ZeroPath

Quick Look: SQL Server 2025 CVE-2026-67646, an Authenticated Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath

Overview of CVE-2026-70094: Untrusted search path in Visual Studio Code via JavaScript Debugger auto attach

ZeroPath

Overview of CVE-2026-80095: Stored Cross-Site Scripting in SharePoint Server Subscription Edition Enabling Elevation of Privilege

ZeroPath

Overview of CVE-2026-81384: Heap Buffer Overflow in Windows DNS Server Enables Conditional Remote Code Execution

ZeroPath

Overview of CVE-2026-85839: Heap Buffer Overflow in Microsoft WDAC OLE DB Provider for SQL Enables Client-Side Code Execution

ZeroPath

Overview of CVE-2026-88222: Heap-Based Buffer Overflow in Microsoft WDAC OLE DB Provider for SQL Enables Client-Side Code Execution

ZeroPath

Brief Summary: SQL Server CVE-2026-94511 Heap-Based Buffer Overflow Allowing Authorized Remote Code Execution

ZeroPath

Quick Look: Microsoft Excel CVE-2026-120788 Heap Buffer Overflow Enabling Code Execution

ZeroPath

Brief Summary: CVE-2026-118722, a Heap-Based Buffer Overflow Enabling Remote Code Execution in Microsoft Excel

ZeroPath

Quick Look: CVE-2026-118707, a Heap-Based Buffer Overflow in Microsoft Excel Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Excel CVE-2026-118706 Use After Free Remote Code Execution

ZeroPath

Overview of CVE-2026-118703: Use After Free in Microsoft Office Excel Leading to Remote Code Execution

ZeroPath

Overview of CVE 2026 118146: Windows Active Directory Domain Services Incorrect Authorization Leading to Remote Code Execution

ZeroPath

Quick Look: CVE-2026-112734, a Use After Free in Microsoft PowerPoint Outline View Leading to Code Execution

ZeroPath

Quick Look: CVE-2026-111310, a Heap Buffer Overflow in Microsoft Word Enabling Remote Code Execution

ZeroPath

Brief Summary: Microsoft Word CVE-2026-111307 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Quick look: CVE-2026-110053, a heap-based buffer overflow in Microsoft Office Word

ZeroPath

Quick Look: Arista EOS BGP Agent Stack Buffer Overflow (CVE-2026-121289)

Okta Security

Node.js Project: November 11 Security Releases

Datadog HQ

Where to run AWS workloads and how to limit their access

Fastly

Static Publishing on Fastly Compute: What’s New in v8

2026-11-10

Amazon Security

Reduce alert fatigue by customizing threat detection features in Amazon GuardDuty

Microsoft Security

Detecting sleeper agents hiding in AI model neurons

Dark Reading

November Patch Tuesday: An Overflowing Cornucopia of CVEs

Rapid7

Patch Tuesday - November 2026

Krebs on Security

Microsoft Fixes Nearly 1,100 Security Vulnerabilities

Amazon Security

AWS refreshes ProcessUnity Global Risk Exchange assessment to enhance customer’s third-party due diligence

Ars Technica Security

Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI

Dark Reading

Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon

GitGuardian

An ARTEX build ships no secret scanner. In our lab, it found the secrets anyway

Step Security

Railway’s Security Incident: Why CI/CD Needs Runtime Security

Dark Reading

F-Secure Identifies 26 Ways AI Can Harm Consumers, and Where to Stop Them

Dark Reading

Checkmarx Appoints Kobi Sivilya as Chief Information Security Officer

Troy Hunt

Finally, Payment by Bank Transfer Comes to Have I Been Pwned

Dark Reading

How to Assess OT Incident Response Preparedness

Eclypsium

Php2shell: A Network Edge Risk Playbook

Zero Day Initiative

The November 2026 Security Update Review

Dark Reading

AI Coding Agents Leak Thousands of Secrets to GitHub

Mozilla Security

Open research, stronger privacy: Making Firefox users harder to fingerprint

Amazon Security

Digital sovereignty at re:Invent 2026: Sessions you won’t want to miss

Github Security Blog

Git security vulnerabilities announced

Meta Security

Your Algorithm: Giving People More Ways to Personalize Facebook Recommendations

Meta Security

How We Built TLX: A Hardware-Native GPU Compiler for Production ML at Scale

Wiz

How to Evaluate AI Agent Cybersecurity Capabilities

Malwarebytes

Researcher bypassed Meta smart glasses’ safeguards to run her own code

Shielder Blog

Kubernetes Non-Core Security Audit

Rapid7

Critical vulnerabilities in N-able N-central prompt hosted shutdown

Rapid7

Five Signs Your MDR is All Alert, No Action

Bishop Fox Security

AI Security Assessment: A Six-Step Full-Stack Evaluation Standard

Wiz

Wiz and ISMAP: Building the Foundation for Japan's Public Sector

Malwarebytes

Update Chrome now to fix a flaw attackers are exploiting

MIT Technology Review

The Download: Pelosi’s successor targets AI and data centers face power woes

Malwarebytes

Before you buy an advent calendar, check these warning signs

Dark Reading

AI Makes Reverse Engineering Mainstream Software & Malware Far Easier

MIT Technology Review

Evolving metal extraction processes

ISC SANS

Apple Patches Everyting: November 2026 Edition, (Tue, Nov 10th)

Project Discovery

Probably Not Exploitable

Schneier on Security

New OpenSSH Vulnerability

CISA Alerts & Advisories

CISA Adds Six Known Exploited Vulnerabilities to Catalog

Escape DAST

Escape research found a scope bypass that made Gitea's restricted tokens full admins. It's now CVE-2026-117635.

ReversingLabs

The AI Cyberattack Surge Hasn't Arrived. But the Warning Signs Are Growing.

TrustedSec

CUI and Export Controls

ISC SANS

ISC Stormcast For Tuesday, November 10th, 2026 https://isc.sans.edu/podcastdetail/10172, (Tue, Nov 10th)

Troy Hunt

Weekly Update 529: Kids Social Media Bans (and Everything Else)

ZeroPath

Brief Summary: Microsoft Word CVE-2026-112733 Heap-Based Buffer Overflow in the Font Substitution Path

ZeroPath

Brief Summary: CVE-2026-116945, a Heap Buffer Overflow RCE in Microsoft SQL Server Integration Packages

ZeroPath

Brief Summary: Microsoft Word CVE-2026-110048 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Word CVE-2026-110050 Heap-Based Buffer Overflow Enabling Remote Code Execution

ZeroPath

Brief Summary: Microsoft Word CVE-2026-110054, a Heap-Based Buffer Overflow in the PDF Conversion Path Leading to Remote Code Execution

ZeroPath

Overview of CVE-2026-110061: Heap-Based Buffer Overflow Enabling Remote Code Execution in Microsoft Office Word

ZeroPath

Quick Look: CVE-2026-110062, a Heap Buffer Overflow Enabling Code Execution in Microsoft Office Word

ZeroPath

Quick Look: CVE 2026 110064, a Heap-Based Buffer Overflow Enabling Remote Code Execution in Microsoft Office Word

ZeroPath

Quick Look: Microsoft Office Word CVE-2026-110067 Use After Free Remote Code Execution

ZeroPath

Overview of CVE-2026-111285: Heap-Based Buffer Overflow Leading to Remote Code Execution in Microsoft Word

ZeroPath

Brief Summary: Microsoft Office CVE-2026-111289 Use After Free Enabling Remote Code Execution via the Preview Pane

ZeroPath

Brief Summary: Microsoft Word CVE-2026-111290 Heap-Based Buffer Overflow Leading to Code Execution

ZeroPath

Overview of CVE-2026-111294: Heap-Based Buffer Overflow in Microsoft Word Reached Through Edit Points

ZeroPath

Quick Look: Microsoft Word CVE-2026-111295 Heap Buffer Overflow and Its Legacy Save Path to Code Execution

ZeroPath

Brief Summary: Microsoft Word CVE-2026-111298 Out-of-Bounds Read Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Word CVE-2026-111299 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Word CVE-2026-111304 Use After Free Leading to Code Execution

ZeroPath

Quick Look: Microsoft Word CVE-2026-111306 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Overview of CVE-2026-111308: Numeric Truncation Leading to Heap Overflow RCE in Microsoft Word

ZeroPath

Brief Summary: Microsoft Outlook CVE-2026-111309 Invalid Pointer Release Enables Remote Code Execution via Preview Pane

ZeroPath

Quick Look: CVE-2026-112714, a Microsoft Word Heap Buffer Overflow Enabling Remote Code Execution

ZeroPath

Brief Summary: Microsoft Word CVE-2026-112715 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Word CVE-2026-112716 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath

Quick Look: Microsoft Word CVE-2026-112717 Heap-Based Buffer Overflow Leading to Code Execution

ZeroPath

Quick Look: Microsoft Word CVE-2026-112718 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Word CVE-2026-112719 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: CVE-2026-112721, a Heap Buffer Overflow in Microsoft Office Word Enabling Remote Code Execution

ZeroPath

Overview of CVE-2026-112722: Heap-Based Buffer Overflow Enables Code Execution in Microsoft Office Word

ZeroPath

Overview of CVE-2026-112723: Heap-Based Buffer Overflow in Microsoft Office Word Enabling Code Execution

ZeroPath

Brief Summary: Microsoft Word CVE-2026-112724 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

CVE-2026-112726: Heap buffer overflow leading to remote code execution in Microsoft Word

ZeroPath

Overview of CVE-2026-112727: Windows DNS Untrusted Pointer Dereference Leading to Remote Code Execution

ZeroPath

Overview of CVE-2026-112728: Heap-Based Buffer Overflow in Microsoft Office Word Leading to Remote Code Execution

ZeroPath

Overview of CVE-2026-112729: Heap-Based Buffer Overflow in Microsoft Word Enables Code Execution via Crafted Documents

ZeroPath

Brief Summary: CVE-2026-112730, a Heap-Based Buffer Overflow Enabling Code Execution in Microsoft Office Word

ZeroPath

Brief Summary: Microsoft SharePoint Server CVE-2026-110044 Deserialization Remote Code Execution for Site Members

ZeroPath

Quick Look: Microsoft Word CVE-2026-112735 Use After Free Leading to Remote Code Execution

ZeroPath

Brief Summary: CVE-2026-112741, a Heap Buffer Overflow in Microsoft Office Word Enabling Code Execution

ZeroPath

Brief Summary: CVE-2026-114147, an ASP.NET Core SignalR Redis Subscription Leak Leading to Denial of Service

ZeroPath

Brief Summary: CVE-2026-114151, a Visual Studio and .NET Deserialization Remote Code Execution Flaw

ZeroPath

Overview of CVE-2026-114152: Stack Buffer Overflow in the Visual Studio and .NET Native Symbol Reader

ZeroPath

Overview of CVE-2026-114159: Heap Buffer Overflow in the Visual Studio and .NET Native PDB Reader

ZeroPath

Brief Summary: Azure Managed Grafana CVE-2026-114160 SSRF Service Token Disclosure Leading to Elevation of Privilege

ZeroPath

Quick Look: CVE-2026-114162, Incorrect Authorization in Microsoft Graph (Azure PIM) Enabling Global Administrator Escalation

ZeroPath

Brief Summary: Microsoft Office CVE-2026-116717 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Overview of CVE-2026-116718: Heap-Based Buffer Overflow in Microsoft Word Enabling Code Execution via Crafted Documents

ZeroPath

Brief Summary: Microsoft Word CVE-2026-116719 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath

Quick Look: Microsoft Word CVE-2026-116720 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Word CVE-2026-116722 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Quick Look: Microsoft Word CVE-2026-116923 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Quick Look: CVE-2026-116925, a Heap Buffer Overflow in Microsoft Word Enabling Remote Code Execution

ZeroPath

Brief Summary: Microsoft Excel CVE 2026 116927 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft SQL Server CVE-2026-116930 Command Injection Leading to Remote Code Execution

ZeroPath

Brief Summary: CVE-2026-116934 in Microsoft SQL Server, an Untrusted Pointer Dereference Enabling Privilege Escalation

ZeroPath

Overview of CVE-2026-116941: Authenticated Heap Overflow Leading to Code Execution in Microsoft SQL Server

ZeroPath

Brief Summary: Microsoft SQL Server CVE-2026-116942 Heap Buffer Overflow Allowing Authenticated Remote Code Execution

ZeroPath

Brief Summary: Microsoft SQL Server CVE-2026-116943 Unauthenticated Buffer Overread Information Disclosure

ZeroPath

Quick Look: Microsoft Word CVE-2026-110047 Use After Free Remote Code Execution

ZeroPath

Overview of CVE-2026-116946: Heap Buffer Overflow in Microsoft SQL Server Integration Packages Enables Authenticated Code Execution

ZeroPath

Overview of CVE-2026-118106: Heap-Based Buffer Overflow in Microsoft SQL Server Replication

ZeroPath

Quick Look: CVE-2026-118120, SQL Injection in Microsoft SQL Server Replication Enabling Privilege Escalation

ZeroPath

CVE-2026-118149: Authenticated Code Injection Leading to Remote Code Execution in Microsoft Exchange Server SE

ZeroPath

Quick Look: CVE-2026-118150, a Microsoft Exchange Server SE Authorization Bypass Enabling Privilege Escalation

ZeroPath

Brief Summary: Microsoft Exchange Server SE CVE-2026-118207 Authenticated Remote Code Execution

ZeroPath

Overview of CVE-2026-118292: Microsoft Excel Stack-Based Buffer Overflow Leading to Code Execution

ZeroPath

Brief Summary: CVE-2026-118293, Microsoft Excel Out-of-Bounds Read Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Excel CVE-2026-118295 Stack-Based Buffer Overflow Enabling Remote Code Execution

ZeroPath

Overview of CVE-2026-118297: Microsoft Excel Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Overview of CVE-2026-118299: Heap-Based Buffer Overflow in Microsoft Excel AutoFormat Enables Code Execution

ZeroPath

Brief Summary: CVE-2026-118302, a Microsoft Excel Heap-Based Buffer Overflow Triggered Through Forecast Sheets

ZeroPath

Overview of CVE-2026-118700: Stack-Based Buffer Overflow in Microsoft Excel Enabling Remote Code Execution

ZeroPath

Brief Summary: CVE-2026-118701, Microsoft Excel Heap Buffer Overflow Enabling Remote Code Execution

ZeroPath

Brief Summary: CVE-2026-118702, a Double Free Remote Code Execution Flaw in Microsoft Excel

ZeroPath

Brief Summary: Microsoft Excel CVE-2026-118704 Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Excel CVE-2026-118712 Integer Underflow Remote Code Execution

ZeroPath

Brief Summary: Microsoft Excel CVE-2026-118715 Heap Buffer Overflow Elevation of Privilege

ZeroPath

Overview of CVE-2026-118717: Stack-Based Buffer Overflow Enabling Code Execution in Microsoft Excel

ZeroPath

Brief Summary: Microsoft Excel CVE-2026-118718 Heap-Based Buffer Overflow Leading to Code Execution

ZeroPath

Brief Summary: Microsoft Excel CVE-2026-118721 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Quick Look: Microsoft Excel CVE-2026-118725 Out-of-Bounds Read Leading to Elevation of Privilege

ZeroPath

Brief Summary: Microsoft Excel CVE-2026-118731 Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: ASP.NET Core Identity Scaffolding Flaw CVE-2026-118741 Sends Password Reset Links to Client-Supplied Addresses

ZeroPath

Brief Summary: Azure Front Door CVE-2026-118742, an Incorrect Permission Assignment Enabling Unauthenticated Privilege Elevation

ZeroPath

Brief Summary: CVE-2026-118745, a Heap-Based Buffer Overflow in the Native PDB Reader Behind Visual Studio and .NET

ZeroPath

Brief Summary: ASP.NET Core CVE-2026-118749, Quadratic Minimal API Validation Denial of Service (CWE-407)

ZeroPath

Overview of CVE-2026-118750: Unauthenticated Memory Exhaustion in ASP.NET Core WebUtilities FileBufferingReadStream

ZeroPath

Overview of CVE-2026-119951: Use-After-Free Remote Code Execution in Windows Deployment Services

ZeroPath

Brief Summary: Windows IIS CVE-2026-119961, a Race Condition Leading to Use After Free and Remote Code Execution

ZeroPath

Brief Summary: Ivanti CSA CVE-2026-121683, Missing Authentication in EPM Core Certificate Trust Management

ZeroPath

Brief Summary: Microsoft Excel CVE-2026-118714 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Exchange Server CVE-2026-118153 Unauthenticated Denial of Service via Inefficient Algorithmic Complexity

ZeroPath

Brief Summary: Ivanti Endpoint Manager CVE-2026-121653, Unauthenticated SQL Injection Leading to RCE

ZeroPath

Brief Summary: Microsoft Word CVE-2026-109491 Use After Free Remote Code Execution

ZeroPath

Quick Look: Microsoft Outlook CVE-2026-110068 Use After Free Remote Code Execution

ZeroPath

Brief Summary: SharePoint Server CVE-2026-109464 Deserialization Remote Code Execution

ZeroPath

Brief Summary: Microsoft Outlook CVE-2026-110043 Heap Buffer Overflow Enabling Remote Code Execution via the Preview Pane

ZeroPath

Brief Summary: Microsoft Word CVE-2026-109505 Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath

Brief Summary: Microsoft Office Word CVE 2026 109503, a Double Free Reached Through PDF Export

ZeroPath

Brief Summary: CVE-2026-109502, a SharePoint Server SSRF That Exposes Farm Service Account Credentials

ZeroPath

Brief Summary: Microsoft Word CVE 2026 109501, an Out-of-Bounds Read Leading to Code Execution via PDF Export

ZeroPath

Quick Look: CVE-2026-109499, Type Confusion Code Execution in SharePoint Server Subscription Edition

ZeroPath

Brief Summary: CVE-2026-109472, a Deserialization Remote Code Execution Flaw in SharePoint Server Subscription Edition

ZeroPath

Overview of CVE-2026-109467: Azure DevOps Improper Authentication Lets a Project Reader Trigger Pipeline Code Execution

ZeroPath

Brief Summary: CVE-2026-108187, an Origin Validation Error Enabling Privilege Escalation in Zoom Workplace for Windows

ZeroPath

Overview of CVE-2026-108186: Improper Input Validation Privilege Escalation in Zoom Workplace for Windows

ZeroPath

Overview of CVE-2026-105437: Heap Buffer Overflow in Git's xdiff Three-Way Merge via Oversized Conflict Markers

Teleport Blog

Announcing beam-init - a Rust init process for agents

Teleport Blog

Phases: Git for container filesystems, or, what I built after leaving CNCF buildpacks.io

Teleport Blog

Introducing Teleport Beams: A Trusted Runtime for Securing Agents in Production Infrastructure

ZeroPath

Brief Summary: ASP.NET Core CVE-2026-114146 Incorrect Authorization Leading to Privilege Elevation

Joshua Rogers

Annoying ChatGPT data usage

Datadog HQ

Monitor and troubleshoot employee devices with Datadog End User Device Monitoring

Datadog HQ

Monitor OpenAI Codex usage and impact with Datadog

Datadog HQ

Monitor OCI workloads in US government clouds with Datadog

Datadog HQ

Detect and respond to PHP2Shell with Datadog

Datadog HQ

Troubleshoot Kubernetes inference workloads with Datadog

2026-11-09

Xint

Node2Shell (CVE-2026-111497) Emergency Response Plan

Dark Reading

People Are Getting Weird About AI

Mehmet Ince

Part 3/6 | How I Ended Up Turning a 22-Year-Old PostgreSQL Type-Confusion Primitive into RCE (CVE-2026-6460)

Dark Reading

CISA Announces Enhanced Reporting Form for Cyber Incidents

Dark Reading

Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion

Dark Reading

Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India

Microsoft Security

FORGE Lab uses agentic tools to identify memory safety issues in Rust

Ars Technica Security

Vulnerability that lets hackers SSH into Linux devices is under active exploitation

MIT Technology Review

The backlash about data centers might really just be about electricity

Amazon Security

Help defend against memory poisoning in Amazon Bedrock AgentCore with multi-layer write validation

ISC SANS

Attackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th)

Dark Reading

Attackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux

Include Security

Why Don’t We Just Use AI?

Eclypsium

Unveiling AI Infrastructure Vulnerabilities - BTS #85

Ars Technica Security

Claude Code is accidentally exposing secrets all over GitHub

Dark Reading

PwC's CISO on AI, Robots & What's Next for Security

MIT Technology Review

Nancy Pelosi’s replacement is ready to regulate AI

Meta Security

Extending LLDB to Debug Applications That Span CPUs and GPUs

GitGuardian

Beyond ARTEX: 45 Agentic Attack Frameworks, What They Hunt For, and How to Find Them

Jericho

Microsoft Advisories, CVEs, and Statistics Reminder

Amazon Security

Simplify cross-partition access with AWS IAM outbound identity federation

Dark Reading

NIST: Solo Shouldn't Mean Less Secure

Palo Alto Networks

Digital Contagion: How AI Is Transforming Supply Chain Cyber Risk

Wiz

Trusted by Default: Qubole Cross-Account Access Abused in the Wild

Socket

Malicious bee-js npm Release and Swarm Desktop Releases Deliver SleepyDuck Ethereum C2 Backdoor

Offensive Security

LEVEL 20: Same Game. New Level.

MIT Technology Review

The Download: empty AI climate claims, and an Nvidia investigation

Malwarebytes

13.3 million people’s medical data exposed; companies pay $300,000

Cloudflare

Launching the Vite Ecosystem Fund

MIT Technology Review

Innovating with AI in the special chemicals industry

Hunt and Hackett

Your security seems to be under control, but can you prove it?

Schneier on Security

AI Security

CISA News

CISA Announces Enhanced Reporting Form for Cyber Incidents

CISA Alerts & Advisories

CISA Adds Four Known Exploited Vulnerabilities to Catalog

GitGuardian

Claude Code settings.local.json Secrets: 17 months of exposure on GitHub, & Docker Hub

Malwarebytes

A week in security (November 2 – November 8)

Meta Red Team

Who needs permissions and the orange dot that never lit

ISC SANS

ISC Stormcast For Monday, November 9th, 2026 https://isc.sans.edu/podcastdetail/10170, (Mon, Nov 9th)

Step Security

@ethersphere/bee-js 13.3.0 Compromised

ZeroPath

Brief Summary: CVE-2026-120008, an Unauthenticated Out-of-Bounds Write in SAP NetWeaver Internet Graphics Service

ZeroPath

Overview of CVE-2026-119079: Quadratic ASN.1 Decoding Lets Unauthenticated Clients Exhaust MIT Kerberos KDC CPU

Snyk

Say Yes To MCP, Safely A Guide For Governing AI Coding Agents With Evo ADS

ZeroPath

Brief Summary: CVE-2026-89119, Administrative CSRF in SAP Web Dispatcher and NetWeaver ICM

ZeroPath

Brief Summary: SAP Gateway CVE-2026-89103, a Default ACL Broken Access Control Flaw Scored CVSS 10.0

ZeroPath

Brief Summary: SAP NetWeaver Kernel CVE-2026-76966, Unauthenticated RFC Memory Corruption

Fastly

Do You Have a Green Website?

ZeroPath

Brief Summary: SAP NetWeaver AS ABAP CVE-2026-76965, Missing Authorization Checks Leading to OS Command Execution

ZeroPath

Overview of CVE-2026-76964: Unauthenticated Memory Corruption in SAP NetWeaver AS ABAP Internet Communication Manager

ZeroPath

Brief Summary: CVE-2026-120017, a SAML2 Authentication Bypass in SAP NetWeaver AS ABAP and ABAP Platform

ZeroPath

Brief Summary: SAP Message Server CVE-2026-120010, an Unauthenticated Heap Buffer Overflow Causing Denial of Service

ZeroPath

Brief Summary: SAP Web Dispatcher CVE-2026-89126 Heap Buffer Overflow Allowing Unauthenticated Code Execution

ZeroPath

Brief Summary: Confection WordPress Cable CVE-2026-115252 Unauthenticated PHP Code Execution

ZeroPath

Brief Summary: SAP NetWeaver IGS CVE-2026-109806 Unauthenticated Denial of Service via Integer Overflow

ZeroPath

Brief Summary: SAP Message Server CVE-2026-109804 Unauthenticated Information Disclosure (CWE 908)

ZeroPath

Overview of CVE-2026-109803: SAP NetWeaver Knowledge Management XML Forms XSL Transformation Code Injection (CVSS 9.9)

ZeroPath

Brief Summary: SAP NetWeaver CVE-2026-109795 Code Injection via Missing Authorization Check (CVSS 9.9)

Datadog HQ

Datadog achieves Cyber Essentials Plus certification for its UK operations and UK1 production environment

Datadog HQ

Investigate Kubernetes health and processes with the Datadog MCP Server

Datadog HQ

Catch incidents and pause faulty deployments automatically with Datadog Deployment Gates

Joshua Rogers

What’s going on with Taiwan’s RDAP server?

Auth0

Authentication and Authorization: What's New in .NET 11

2026-11-08

Naveen Srinivasan

My W^X Hook Was Letting Things Be W+X

ISC SANS

Scans for Sshole Vulnerability (CVE-2026-123158), (Sun, Nov 8th)

ToxSec

AI Security: Model Extraction and the Risk to Proprietary AI Systems

Joshua Rogers

You can no longer star archived GitHub repositories

Rosecurify

Seclog - #203

ZeroPath

Brief Summary: Kyverno CVE-2026-124440, apiCall Namespace Clamp Bypass to Cluster Admin

ZeroPath

Brief Summary: Kyverno CVE-2026-124441 Authorization Bypass via Variable Generate Target Kind (with PoC)

ZeroPath

OpenEMR CVE-2026-124445: OneTimeAuth Token Replay and PIN Brute Force, with PoC Analysis

ZeroPath

Brief Summary: OpenEMR CVE-2026-124450 Broken Access Control and Path Traversal in the fax/sms disposeDocument Action (with PoC)

LogTriage Research

What finds a new MCP server: directories, monitors and scanners

2026-11-07

Ars Technica Security

British soldier ignored order to pull his SIM card, then got blackmailed

shubs

unlocking any car from X brand in most of the world

Microsoft Security

ARTEX abuse expands as cybercriminals target financial sector

Sam Curry

Hacking Two Automakers: ForgeRock Path Confusion, RCE, and Remote Vehicle Access

MaskRay's Blog

四色滑道：从博物馆的益智玩具到一道OI题

ZeroPath

CVE-2026-116751: Unauthenticated Time-Based SQL Injection via Tag Array Keys in Amelia Pro for WordPress

ZeroPath

CVE-2026-119155: Unauthenticated Time-Based SQL Injection in wpForo Forum via href[locale], with Patch Analysis

ZeroPath

Overview of CVE-2026-123543: Unauthenticated Denial of Service via Unbounded Java Deserialization in OpenAM

ZeroPath

Overview of CVE-2026-123549: OpenAM Self Registration Attribute Bypass Enables Anonymous Admin Takeover

ZeroPath

Quick Look: OpenAM CVE-2026-123550 SAML Authentication Bypass via Unsigned Assertions

ZeroPath

Brief Summary: Tenda AC19 CVE-2026-123966 Heap Buffer Overflow in saveParentControlInfo with Public PoC

ZeroPath

Brief Summary: OpenAM CVE-2026-123551 Session Token Disclosure via the Notification WebSocket

2026-11-06

Step Security

CVE-2026-123158 (*sshole): OpenSSH Password Authentication Bypass on Alpine Linux

Schneier on Security

Friday Squid Blogging: New Jurassic Squid Predecessors

Dark Reading

UK Wades Into Tech Sovereignty Amid AI Policy Changes

GitGuardian

The Agents Have Now Found Your Secrets On GitHub: ARTEX Is Abusing Public Secrets Right Now

Amazon Security

Addressing protocol security gaps in multi-tenant Kubernetes

Ars Technica Security

Chainalysis says hackers stole credentials and tokens for all of its customers

Socket

Free Certified Patch for Critical Rails Active Storage Vulnerability

Eclypsium

21st Annual API Cybersecurity Conference for the Oil and Natural Gas Industry

Eclypsium

FinServ Cyber Security Canada Summit 2026

Dark Reading

AI Gave Your Incident Archive a Second Job

XBOW

Top AI Models for Offensive Security, Fall 2026: Why Cost Changes Everything

Socket

Shai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI Tools

Palo Alto Networks

Checkmate for Checkboxes

Scott Helme

We Know 15,579 Websites Are Infected. How Do We Tell Them?

Silverfort

AI Agent Security: 5 steps to take before the rules are written

Malwarebytes

Big Tech sues over California plan to limit kids’ scrolling

Schneier on Security

Pinpointing Location of Videos from Background Airplane Sounds

Cloudflare

The post-quantum future of web privacy

Dark Reading

Why Europe's Freezer Hacks Spread So Far, So Fast

Rapid7

Metasploit Wrapup: Unauth RCE modules in Network Perimeter Devices and much more

Offensive Security

What AI Changes About the Cybersecurity Skills Your Team Needs

GitGuardian

How to Handle Secrets in Helm

Malwarebytes

Attacks on supermarket and blood storage systems prompt US warning

CISA Alerts & Advisories

CISA Adds One Known Exploited Vulnerability to Catalog

Trail of Bits

After Binance, check what your signing systems can approve

Moonlock

Fake Homebrew installer linked to record-breaking $6.3 billion Binance heist

Dark Reading

UK Warns Its Critical Infrastructure Faces Grave Risk

DarkRelay

Cybersecurity Beginner Path: Networking, Linux, and First Recon Habits

Moonlock

Apple issued spyware alerts to iPhone users in 110 countries

Moonlock

Lost crypto to a MetaMask scam? What recovery realistically looks like

Moonlock

Is Shopify legit and safe? How scam stores, phishing, and fraud work

ISC SANS

ISC Stormcast For Friday, November 6th, 2026 https://isc.sans.edu/podcastdetail/10168, (Fri, Nov 6th)

Datadog HQ

How we investigated prompt cache misses with Datadog

Hacktron

Partnering with OpenAI

ZeroPath

Brief Summary: IBM API Connect CVE-2026-17399 Authenticated Upload Validation Flaw Leading to Code Execution

ZeroPath

Brief Summary: IBM API Connect CVE-2026-17402 OS Command Injection Rated 9.9

ZeroPath

Brief Summary: IBM API Connect CVE-2026-17403 Hard-Coded Credentials Enabling Administrative Control

ZeroPath

Brief Summary: IBM API Connect CVE-2026-17408, an Unauthenticated OS Command Injection Rated CVSS 9.8

ZeroPath

Brief Summary: IBM API Connect CVE-2026-17409 Case-Sensitivity Access Control Bypass

ZeroPath

Brief Summary: IBM API Connect CVE-2026-17150, Custom Module Validation Flaw Enabling Cross-Tenant Code Execution

ZeroPath

Brief Summary: IBM API Connect CVE 2026 17313 Authentication Bypass via Alternate Path Exposing Gateway Configuration

ZeroPath

Brief Summary: IBM API Connect CVE-2026-17340 Unauthenticated Path Traversal Leading to Remote Code Execution

ZeroPath

Brief Summary: IBM API Connect CVE-2026-18838 Authentication Bypass by Spoofing Enables User Impersonation

ZeroPath

Brief Summary: SonicOS CVE-2026-107155 Permissive Cross-Domain (CORS) Policy in the Management API

ZeroPath

Brief Summary: IBM API Connect CVE-2026-17324 Missing Authentication for a Critical Function

ZeroPath

Overview of CVE-2026-17362: Missing Authorization Lets Remote Attackers Create, Modify, or Delete Tenants in IBM API Connect V12

ZeroPath

Brief Summary: IBM API Connect CVE-2026-17360 Hardcoded Credentials Allow Full Administrative Control

ZeroPath

Brief Summary: IBM API Connect CVE-2026-17342 Authenticated Code Injection Leading to Arbitrary Code Execution

ZeroPath

Brief Summary: IBM API Connect CVE-2026-17379 Signature Verification Flaw Allows Authentication Bypass and Arbitrary Role Assignment

ZeroPath

Brief Summary: IBM API Connect CVE-2026-17301 Signature Verification Authentication Bypass

ZeroPath

Brief Summary: IBM API Connect CVE-2026-17278 Authentication Bypass by Spoofing Exposes API Catalog and Runtime Configuration

ZeroPath

Overview of CVE-2026-17147: Authenticated Path Traversal to Code Execution in IBM API Connect

ZeroPath

Brief Summary: IBM API Connect CVE-2026-17131, an Unauthenticated SSRF Outbound Filter Bypass (CVSS 9.3)

ZeroPath

Brief Summary: IBM API Connect CVE-2026-16720 Improper Authentication Lets Attackers Obtain Other Users' Access Tokens

ZeroPath

Overview of CVE-2026-120537: Unauthenticated Stored XSS in the TranslatePress Dictionary Endpoint

ZeroPath

Brief Summary: IBM API Connect CVE-2026-17344 Unauthenticated Server-Side Request Forgery

Star Labs

Groklem: an Android banker that rents Grok to read your texts

ZeroPath

Brief Summary: CVE-2026-109469, a CVSS 10.0 Authorization Bypass in Microsoft Entra Device Registration That Microsoft Has Already Mitigated

ZeroPath

Brief Summary: BuddyForms CVE-2026-107622, Unauthenticated Privilege Escalation via bf_post_type Form-Type Confusion

ZeroPath

Brief Summary: SonicOS CVE-2026-107154 Management Interface Session Validation Flaw (CWE-291)

ZeroPath

Brief Summary: Craft CMS CVE-2026-123488, Unauthenticated SQL Injection via the Element Search Endpoint

ZeroPath

Overview of CVE-2026-119923: Unauthenticated Heap Overflow in the Babelfish for PostgreSQL TDS Prelogin Parser

Nebula Security

OpenSSH allows long-password logins to * accounts on musl with PAM off

Sam Curry

Leaking the WARDOGS Server Binary via Remote Code Execution on a Hosting Partner

Greynoise

Global Event: SSHole (CVE-2026-123158) Live Activity Report

Yunus Aydın

Claude Code was sending your email in the User-Agent header

Yunus Aydın

Claude Code, User-Agent başlığında e-postanızı gönderiyordu

2026-11-05

Microsoft Security

Threat actors use agentic AI tooling to find and abuse exposed secrets