220 Security Blogs

Last Updated: 13 Nov 26 23:31 UTC

Blog List | Github | OPML | Have a feed you want to add? Submit a PR

2026-11-13

Schneier on Security
Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters

Microsoft Security
SCKit abuses ScreenConnect to deploy remote access and target technician sessions

Talos Intelligence
ARTEX and beyond: AI-enabled penetration testing platforms

Amazon Security
Amazon Threat Intelligence observes threat actors running cybercrime campaigns with ARTEX AI agents

Dark Reading
ArcticRAT Cybercrime Gang Profiles Victim Finances With AI

Cloudflare
Kitesurf is now open source

Cloudflare
Adapting to AI penetration testing orchestrators: The Modern Security Model

XBOW
XBOW and Onapsis Collaborate to Uncover 14 SAP Vulnerabilities

Wiz
The Green Agent POV: Formulating the Fix for an Internet-Facing Container with Sensitive Data Access

Step Security
The Take-Home Test That Runs on Your Work Laptop: Inside the AccuraSoftHire Fake Interview Campaign

Meta Security
Cuttlefish on Mac: Running Android’s Virtual Device Framework Natively on Apple Silicon

Malwarebytes
New York City votes to ban surveillance pricing

Rapid7
MDR Pricing: Comparing Asset-Based and Ingestion-Based Costs

Ars Technica Security
Windows 0-day dropped by disgruntled researcher hands hackers System rights

GitGuardian
A Valid Signature Isn’t Enough: Attributing and Validating Leaked JWTs

Elastic Security Labs
Inside the loop: Five AI attack frameworks that never ask permission

Aikido
Top 8 Upwind Security alternatives for code and cloud security

Elastic Security Labs
56 AWS API calls in 141 milliseconds: Inside an AI-run intrusion

Step Security
ARTEX: Attackers Adopted This AI Pentesting Tool in Three Months. Leaked Secrets Are Its Fastest Way In.

Offensive Security
OffSec Celebrates 20 Years of Practitioner-Built Training From the Creators of Kali Linux and OSCP

GitGuardian
wfx-loot: A CI Secret Stealer Pushed With Stolen GitHub Credentials

Cloudflare
Introducing Spend Management: Spending limits and alerts for Cloudflare

MIT Technology Review
The Download: Silicon Valley’s blind spot and Nvidia’s chip-tracking plan

Dark Reading
Attackers in Binance Breach Targeted Known Weakness, Missing Controls

Schneier on Security
AI Doesn’t Have to Go Rogue to Break the World

CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog

Aikido
Top 9 Qualys alternatives for infrastructure and application security

Malwarebytes
Google pushes second Chrome update this week

MIT Technology Review
More autonomy, fewer NDAs: Volunteers have new requests for brain implant trials

MIT Technology Review
Silicon Valley claims to know the future. So why did it get the midterms so wrong?

Moonlock
Hackers came up with a new platform to manage ClickFix attacks

Moonlock
Downloading Claude Code? Watch out for this Mac malware trap

Aikido
Critical Apache HTTP Server vulnerability can allow remote code execution (CVE-2026-119618)

Malwarebytes
Worldwide Microsoft 365 outage disrupts Outlook, SharePoint, Teams, and more [updated]

NVISO Labs
Detection Engineering: Implementing Detection-as-Code in an Existing Environment: Part 3 – Validation and Future Possibilities

ISC SANS
Macfinger ClickFix campaign sends DownTheDRAIN infostealer for macOS, (Fri, Nov 13th)

ISC SANS
ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178, (Fri, Nov 13th)

Fastly
What a Midterm Election Night Looks Like from the Edge

Okta Security
Apache HTTP Server's HTTP/2 Vulnerability (CVE-2026-119618)

Datadog HQ
Investigate the person behind the risk with Cloud SIEM


2026-11-12

Dark Reading
Getting Past the Post-Quantum Cryptography Discovery Phase

Dark Reading
Cyber Experts Weigh In: How to Fight Artex & AntiFox

The Citizen Lab
Security Agencies Worldwide Found to Use Ad-Based Surveillance System

MIT Technology Review
Nvidia privately confirmed it could track chips to fight smuggling, even as industry publicly questioned feasibility

Dark Reading
Extortion Group Luna Moth Flits Into Law Firms a Second Time

Talos Intelligence
Never be afraid to ask questions

Black Lantern Security
BBOT 3.1 Release

Wiz
ASPM in the AI Era Part 3: Fixing Risk at the Speed of Code

Offensive Security
Build a Training Plan Around Your Next Security Project

Silverfort
Silverfort Named a Leader in the IDC MarketScape for Worldwide Augmented Identity Security Solutions 2026

Microsoft Security
Trained to betray: How post-training supply chain attacks hijack coding agents

GitGuardian
Coding Agent Security for AppSec Leaders: Start With What Agents Can Reach

Step Security
CVE-2026-126187: React Server Components Flaw Lets Attackers Execute Code Through Smuggled Flight Rows

Socket
Cyberattacks Are Skyrocketing in Japan as Researchers Trace AI-Assisted Intrusions

Malwarebytes
LEGO’s BrickLink taken offline: What users should know

Praetorian
CVE-2026-119618: What We Know About the Critical Apache mod_http2 Race Condition

Aikido
Top AI network and infrastructure pentesting tools in 2026

Google Safety & Security
Designing for privacy on intelligent eyewear

Bishop Fox Security
Inside Cirro: Enumeration as a Restricted Guest

MIT Technology Review
The Download: COP31’s climate challenge and the quest for immortality

Eye Security Research
Machine speed: how we defended against an AI-driven attack

Palo Alto Networks
Europe Is Setting the Global Standard for Sovereignty. Here Is Where We Stand.

NVISO Labs
Breaking the Semantic Cache: A LiteLLM Case Study (CVE-2026-89032)

Schneier on Security
Another Way Police Are Locating People from Their Smartphones

CISA Alerts & Advisories
Siemens Building Automation and Energy Products

CISA Alerts & Advisories
Siemens RUGGEDCOM APE1808

CISA Alerts & Advisories
Siemens RUGGEDCOM APE1808

CISA Alerts & Advisories
Siemens Desigo, Gridscale

CISA Alerts & Advisories
Siemens Industrial Edge Management

ISC SANS
Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)

Dark Reading
Inside an AI Attack Against a US Retailer

Malwarebytes
Why scammers want you to allow push notifications

Elastic Security Labs
0% GPU utilization: How SANSAR hides Linux cryptomining

Step Security
WFX Phantom: The GitHub Actions Secret Stealer That Deletes Its Tracks

ReversingLabs
Securing Frontier AI: ReversingLabs Is Part of Anthropic’s Expanded Cyber Verification Program

Malwarebytes
FBI agent stole $2.47m in crypto from criminal wallets

Semgrep
Coding Agents Grew Your Security Backlog. The Semgrep MCP Server Helps Your Agent Fix It.

Semgrep
Introducing Semgrep Mandoline: Program Analysis Inside the Agent’s Reasoning Loop

Semgrep
The Fastest Fix is the One Never Committed

Semgrep
Context Is the Missing Layer in Agentic AppSec

Semgrep
Semgrep Launches Agentic AppSec Platform to Secure Code at Agentic Speed

ISC SANS
ISC Stormcast For Thursday, November 12th, 2026 https://isc.sans.edu/podcastdetail/10176, (Thu, Nov 12th)

Aikido
wfx-loot campaign pushes CI secret stealer to tens of thousands of repositories

Dark Reading
Chinese AI Project Scouts Spies in Taiwan Chip Industry

Okta Security
OpenSSH "SSHole" Vulnerability (CVE-2026-123158)

Greynoise
GreyNoise AI Cyber Index: Benchmarking AI Models on Defensive Capabilities

Semgrep
Seconds from Disaster: WFX Phantom and the CI Pipeline Nobody Was Watching

Dark Reading
Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise

Fastly
Fastly Recognized in the Inaugural Gartner® Magic Quadrant™ for Edge Distribution Platforms


2026-11-11

Doyensec
Introducing ProtoSpector: A Burp Suite Extension for Analyzing, Tampering With, and Testing Protobuf and gRPC Traffic

Dark Reading
AIを活用したサイバー攻撃の増加を受け、日本がサイバーセキュリティへの緊急資金拠出を推進

Black Hills Info Sec
Log Analysis Field Guide: Tips for Spotting Patterns and Red Flags

Dark Reading
Attackers Say 'Hello' to a Different Scale of Cloud Attack

Dark Reading
AI Raises the Stakes for Cyber Resilience

Dark Reading
As Test Takers Turn to AI for Answers, Exam Security Must Catch Up

Dark Reading
N-able Takes N-central Platform Offline After Discovery of 33 Flaws

Amazon Security
Ease of use and secure defaults in the new AWS experience

Microsoft Security
The global socket: how threat actors are weaponizing GSocket for stealthy C2

Wiz
Critical RCE Vulnerability in Apache HTTP Server: Everything You Need To Know

Malwarebytes
Vanderbilt restores systems after cyberattack as hackers claim data theft

ISC SANS
Microsoft Patch Tuesday November 2026, (Tue, Nov 10th)

GitGuardian
AntiFox Targeting AWS Credentials: The Latest Wave of AI Agent Attacks

Amazon Security
Part 4 – Cybersecurity journeys: What I’d tell my younger self

Krebs on Security
Who Runs the Ransomware Group Qilin?

Meta Security
Intelligent Delivery: Making Every Unit of Compute Serve Better Ads

Google Safety & Security
Google Cloud leaders share what to expect in cybersecurity for 2027.

MIT Technology Review
What to know about this year’s UN climate talks

Microsoft Security
Lessons from 59 Linux Kernel Bug Reports

PortSwigger
Blind trust: stealing credentials through CSP

Cloudflare
Choosing QuePaxa, an unusual consensus algorithm

Ars Technica Security
Google DeepMind just mathematically verified key parts of Signal

Bishop Fox Security
Proofpoint ITM | 4.4.3.148–5.0.1

Malwarebytes
Remus malware claims Gmail access even after you change your password

MIT Technology Review
The Download: preserving minds and weighing open AI risks

Malwarebytes
Muse sleep band users weren’t told their brain data was training AI

Schneier on Security
Three People Arrested for AI-Enhanced Impersonation Fraud

Malwarebytes
Microsoft Patch Tuesday fixes Outlook flaw already under attack

Xint
How Xint Code Reads a Large Codebase

Palo Alto Networks
The SASE “Trilemma”: How Regulated Enterprises are Navigating Digital Sovereignty, Resilience, and Global Cyber Threat Intelligence

DarkRelay
Living on the Edge: How APT Groups Weaponize Network Appliances

Step Security
GitHub Package Firewall vs. StepSecurity Secure Registry: Protection beyond npm

ISC SANS
ISC Stormcast For Wednesday, November 11th, 2026 https://isc.sans.edu/podcastdetail/10174, (Wed, Nov 11th)

Talos Intelligence
Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities

ZeroPath
Brief Summary: CVE-2026-118722, a Heap-Based Buffer Overflow Enabling Remote Code Execution in Microsoft Excel

ZeroPath
Brief Summary: Visual Studio Code CVE-2026-121665 Workspace Trust Bypass via Unregistered and Nested Settings

Datadog HQ
Where to run AWS workloads and how to limit their access

ZeroPath
Quick Look: Arista EOS BGP Agent Stack Buffer Overflow (CVE-2026-121289)

ZeroPath
Quick look: CVE-2026-110053, a heap-based buffer overflow in Microsoft Office Word

ZeroPath
Brief Summary: Microsoft Word CVE-2026-111307 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Quick Look: CVE-2026-111310, a Heap Buffer Overflow in Microsoft Word Enabling Remote Code Execution

ZeroPath
Quick Look: CVE-2026-112734, a Use After Free in Microsoft PowerPoint Outline View Leading to Code Execution

ZeroPath
Overview of CVE 2026 118146: Windows Active Directory Domain Services Incorrect Authorization Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-118703: Use After Free in Microsoft Office Excel Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118706 Use After Free Remote Code Execution

ZeroPath
Quick Look: CVE-2026-118707, a Heap-Based Buffer Overflow in Microsoft Excel Leading to Remote Code Execution

Fastly
Static Publishing on Fastly Compute: What’s New in v8

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118730 Use After Free Leading to Remote Code Execution

ZeroPath
Brief Summary: CVE-2026-118732, a Use After Free Leading to Remote Code Execution in Microsoft Office Excel

ZeroPath
Overview of CVE-2026-119985: Visual Studio Code Incorrect Authorization Let Remote Workspaces Bypass Workspace Trust

ZeroPath
Brief Summary: CVE-2026-119986, a Microsoft Excel Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Quick Look: Azure OpenAI CVE-2026-119990, a Critical Missing-Authentication Privilege Escalation Mitigated by Microsoft

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-119995 Heap-Based Buffer Overflow Enabling Remote Code Execution

ZeroPath
Overview of CVE-2026-120002: SharePoint Server Secure Store Incorrect Authorization Leading to Elevation of Privilege

ZeroPath
Quick Look: Microsoft Office CVE-2026-120003 Heap-Based Buffer Overflow Reachable Through the Preview Pane

ZeroPath
Overview of CVE-2026-120779: Visual Studio Code Code Injection Through MCP Elicitation Notifications, With Patch Analysis

ZeroPath
Brief Summary: CVE-2026-120780, a Visual Studio Code Web Server Release Downgrade Enabling Remote Code Execution

ZeroPath
Overview of CVE-2026-120785: Heap-Based Buffer Overflow Leading to Code Execution in Microsoft Excel

ZeroPath
Overview of CVE-2026-120786: Heap-Based Buffer Overflow in Microsoft Excel Enabling Code Execution

ZeroPath
Quick Look: Microsoft Excel CVE-2026-120789 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-120790 Heap Buffer Overflow and User Context Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-120791 Heap-Based Buffer Overflow Leading to User-Assisted Code Execution

ZeroPath
Overview of CVE-2026-121287: Arista EOS RIPv2 MD5 Buffer Underwrite Crashes the Rip Agent

Okta Security
Node.js Project: November 11 Security Releases

ZeroPath
Brief Summary: Microsoft Office CVE-2026-122198 Heap-Based Buffer Overflow Allowing Code Execution When a Folder Is Viewed

ZeroPath
Quick Look: Microsoft Outlook CVE-2026-123375, a Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-123376, a Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-123377 Heap-Based Buffer Overflow Enabling Code Execution via Crafted Contact Certificates

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-123380 Heap-Based Buffer Overflow Enabling Remote Code Execution

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-123381 Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-123382 Untrusted Pointer Dereference Remote Code Execution

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-123383 Heap-Based Buffer Overflow Enabling Remote Code Execution

ZeroPath
Quick Look: Microsoft Outlook CVE-2026-123384 Heap Buffer Overflow Enabling Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-123385 Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft SharePoint Server CVE-2026-123390 Authenticated Deserialization Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-123394 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-124176: Microsoft Excel Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-124187 Use After Free Leading to Code Execution via Tracked Changes

ZeroPath
Overview of CVE-2026-62903: Microsoft.Data.SqlClient Enclave Key Binding Gap Enables Capture Replay Information Disclosure

ZeroPath
Brief Summary: CVE-2026-66801, a Heap-Based Buffer Overflow in Microsoft GDK for Xbox Enabling Unauthenticated Network Code Execution

ZeroPath
Overview of CVE-2026-66813: Out-of-Bounds Read Leading to Privilege Escalation in Microsoft SQL Server

ZeroPath
Brief Summary: CVE-2026-67374, an Authenticated Heap Buffer Overflow Leading to Remote Code Execution in Microsoft SQL Server

ZeroPath
Brief Summary: CVE-2026-67375, a SQL Server Stack Buffer Overflow Enabling Escalation to sysadmin

ZeroPath
Brief Summary: Microsoft SQL Server CVE-2026-67391 Heap-Based Buffer Overflow Enabling Authenticated Remote Code Execution

ZeroPath
Brief Summary: SQL Server CVE-2026-67632 Heap Buffer Overflow Allowing Authenticated Remote Code Execution

ZeroPath
Quick Look: SQL Server 2025 CVE-2026-67646, an Authenticated Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-70094: Untrusted search path in Visual Studio Code via JavaScript Debugger auto attach

ZeroPath
Overview of CVE-2026-80095: Stored Cross-Site Scripting in SharePoint Server Subscription Edition Enabling Elevation of Privilege

ZeroPath
Overview of CVE-2026-81384: Heap Buffer Overflow in Windows DNS Server Enables Conditional Remote Code Execution

ZeroPath
Overview of CVE-2026-85839: Heap Buffer Overflow in Microsoft WDAC OLE DB Provider for SQL Enables Client-Side Code Execution

ZeroPath
Overview of CVE-2026-88222: Heap-Based Buffer Overflow in Microsoft WDAC OLE DB Provider for SQL Enables Client-Side Code Execution

ZeroPath
Brief Summary: SQL Server CVE-2026-94511 Heap-Based Buffer Overflow Allowing Authorized Remote Code Execution

ZeroPath
Quick Look: Microsoft Excel CVE-2026-120788 Heap Buffer Overflow Enabling Code Execution


2026-11-10

Amazon Security
Reduce alert fatigue by customizing threat detection features in Amazon GuardDuty

Microsoft Security
Detecting sleeper agents hiding in AI model neurons

Dark Reading
November Patch Tuesday: An Overflowing Cornucopia of CVEs

Rapid7
Patch Tuesday - November 2026

Krebs on Security
Microsoft Fixes Nearly 1,100 Security Vulnerabilities

Amazon Security
AWS refreshes ProcessUnity Global Risk Exchange assessment to enhance customer’s third-party due diligence

Ars Technica Security
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI

Dark Reading
Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon

GitGuardian
An ARTEX build ships no secret scanner. In our lab, it found the secrets anyway

Step Security
Railway’s Security Incident: Why CI/CD Needs Runtime Security

Dark Reading
F-Secure Identifies 26 Ways AI Can Harm Consumers, and Where to Stop Them

Dark Reading
Checkmarx Appoints Kobi Sivilya as Chief Information Security Officer

Troy Hunt
Finally, Payment by Bank Transfer Comes to Have I Been Pwned

Dark Reading
How to Assess OT Incident Response Preparedness

Eclypsium
Php2shell: A Network Edge Risk Playbook

Zero Day Initiative
The November 2026 Security Update Review

Dark Reading
AI Coding Agents Leak Thousands of Secrets to GitHub

Mozilla Security
Open research, stronger privacy: Making Firefox users harder to fingerprint

Amazon Security
Digital sovereignty at re:Invent 2026: Sessions you won’t want to miss

Github Security Blog
Git security vulnerabilities announced

Meta Security
Your Algorithm: Giving People More Ways to Personalize Facebook Recommendations

Meta Security
How We Built TLX: A Hardware-Native GPU Compiler for Production ML at Scale

Wiz
How to Evaluate AI Agent Cybersecurity Capabilities

Malwarebytes
Researcher bypassed Meta smart glasses’ safeguards to run her own code

Shielder Blog
Kubernetes Non-Core Security Audit

Rapid7
Critical vulnerabilities in N-able N-central prompt hosted shutdown

Rapid7
Five Signs Your MDR is All Alert, No Action

Bishop Fox Security
AI Security Assessment: A Six-Step Full-Stack Evaluation Standard

Wiz
Wiz and ISMAP: Building the Foundation for Japan's Public Sector

Malwarebytes
Update Chrome now to fix a flaw attackers are exploiting

MIT Technology Review
The Download: Pelosi’s successor targets AI and data centers face power woes

Malwarebytes
Before you buy an advent calendar, check these warning signs

MIT Technology Review
Evolving metal extraction processes

Dark Reading
AI Makes Reverse Engineering Mainstream Software & Malware Far Easier

ISC SANS
Apple Patches Everyting: November 2026 Edition, (Tue, Nov 10th)

Project Discovery
Probably Not Exploitable

Schneier on Security
New OpenSSH Vulnerability

CISA Alerts & Advisories
CISA Adds Six Known Exploited Vulnerabilities to Catalog

Escape DAST
Escape research found a scope bypass that made Gitea's restricted tokens full admins. It's now CVE-2026-117635.

ReversingLabs
The AI Cyberattack Surge Hasn't Arrived. But the Warning Signs Are Growing.

TrustedSec
CUI and Export Controls

ISC SANS
ISC Stormcast For Tuesday, November 10th, 2026 https://isc.sans.edu/podcastdetail/10172, (Tue, Nov 10th)

Troy Hunt
Weekly Update 529: Kids Social Media Bans (and Everything Else)

ZeroPath
Brief Summary: Microsoft Word CVE-2026-111298 Out-of-Bounds Read Leading to Remote Code Execution

ZeroPath
Quick Look: Microsoft Word CVE-2026-112735 Use After Free Leading to Remote Code Execution

Teleport Blog
Phases: Git for container filesystems, or, what I built after leaving CNCF buildpacks.io

Teleport Blog
Announcing beam-init - a Rust init process for agents

Joshua Rogers
Annoying ChatGPT data usage

Datadog HQ
Monitor and troubleshoot employee devices with Datadog End User Device Monitoring

Datadog HQ
Monitor OpenAI Codex usage and impact with Datadog

Datadog HQ
Monitor OCI workloads in US government clouds with Datadog

Datadog HQ
Detect and respond to PHP2Shell with Datadog

ZeroPath
Brief Summary: ASP.NET Core CVE-2026-114146 Incorrect Authorization Leading to Privilege Elevation

ZeroPath
Overview of CVE-2026-105437: Heap Buffer Overflow in Git's xdiff Three-Way Merge via Oversized Conflict Markers

ZeroPath
Overview of CVE-2026-108186: Improper Input Validation Privilege Escalation in Zoom Workplace for Windows

ZeroPath
Brief Summary: CVE-2026-108187, an Origin Validation Error Enabling Privilege Escalation in Zoom Workplace for Windows

ZeroPath
Overview of CVE-2026-109467: Azure DevOps Improper Authentication Lets a Project Reader Trigger Pipeline Code Execution

ZeroPath
Brief Summary: CVE-2026-109472, a Deserialization Remote Code Execution Flaw in SharePoint Server Subscription Edition

ZeroPath
Quick Look: CVE-2026-109499, Type Confusion Code Execution in SharePoint Server Subscription Edition

ZeroPath
Brief Summary: Microsoft Word CVE 2026 109501, an Out-of-Bounds Read Leading to Code Execution via PDF Export

ZeroPath
Brief Summary: CVE-2026-109502, a SharePoint Server SSRF That Exposes Farm Service Account Credentials

ZeroPath
Brief Summary: Microsoft Office Word CVE 2026 109503, a Double Free Reached Through PDF Export

ZeroPath
Brief Summary: Microsoft Word CVE-2026-109505 Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-110043 Heap Buffer Overflow Enabling Remote Code Execution via the Preview Pane

ZeroPath
Brief Summary: Microsoft SharePoint Server CVE-2026-110044 Deserialization Remote Code Execution for Site Members

ZeroPath
Quick Look: Microsoft Word CVE-2026-110047 Use After Free Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-110048 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-110050 Heap-Based Buffer Overflow Enabling Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-110054, a Heap-Based Buffer Overflow in the PDF Conversion Path Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-110061: Heap-Based Buffer Overflow Enabling Remote Code Execution in Microsoft Office Word

ZeroPath
Quick Look: CVE-2026-110062, a Heap Buffer Overflow Enabling Code Execution in Microsoft Office Word

ZeroPath
Quick Look: CVE 2026 110064, a Heap-Based Buffer Overflow Enabling Remote Code Execution in Microsoft Office Word

ZeroPath
Quick Look: Microsoft Office Word CVE-2026-110067 Use After Free Remote Code Execution

ZeroPath
Overview of CVE-2026-111285: Heap-Based Buffer Overflow Leading to Remote Code Execution in Microsoft Word

ZeroPath
Brief Summary: Microsoft Office CVE-2026-111289 Use After Free Enabling Remote Code Execution via the Preview Pane

ZeroPath
Brief Summary: Microsoft Word CVE-2026-111290 Heap-Based Buffer Overflow Leading to Code Execution

ZeroPath
Overview of CVE-2026-111294: Heap-Based Buffer Overflow in Microsoft Word Reached Through Edit Points

ZeroPath
Quick Look: Microsoft Word CVE-2026-111295 Heap Buffer Overflow and Its Legacy Save Path to Code Execution

Datadog HQ
Troubleshoot Kubernetes inference workloads with Datadog

ZeroPath
Brief Summary: Microsoft Word CVE-2026-111299 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-111304 Use After Free Leading to Code Execution

ZeroPath
Quick Look: Microsoft Word CVE-2026-111306 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-111308: Numeric Truncation Leading to Heap Overflow RCE in Microsoft Word

ZeroPath
Brief Summary: Microsoft Outlook CVE-2026-111309 Invalid Pointer Release Enables Remote Code Execution via Preview Pane

ZeroPath
Quick Look: CVE-2026-112714, a Microsoft Word Heap Buffer Overflow Enabling Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-112715 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-112716 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Quick Look: Microsoft Word CVE-2026-112717 Heap-Based Buffer Overflow Leading to Code Execution

ZeroPath
Quick Look: Microsoft Word CVE-2026-112718 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-112719 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: CVE-2026-112721, a Heap Buffer Overflow in Microsoft Office Word Enabling Remote Code Execution

ZeroPath
Overview of CVE-2026-112722: Heap-Based Buffer Overflow Enables Code Execution in Microsoft Office Word

ZeroPath
Overview of CVE-2026-112723: Heap-Based Buffer Overflow in Microsoft Office Word Enabling Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-112724 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
CVE-2026-112726: Heap buffer overflow leading to remote code execution in Microsoft Word

ZeroPath
Overview of CVE-2026-112727: Windows DNS Untrusted Pointer Dereference Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-112728: Heap-Based Buffer Overflow in Microsoft Office Word Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-112729: Heap-Based Buffer Overflow in Microsoft Word Enables Code Execution via Crafted Documents

ZeroPath
Brief Summary: CVE-2026-112730, a Heap-Based Buffer Overflow Enabling Code Execution in Microsoft Office Word

ZeroPath
Brief Summary: Microsoft Word CVE-2026-112733 Heap-Based Buffer Overflow in the Font Substitution Path

Teleport Blog
Introducing Teleport Beams: A Trusted Runtime for Securing Agents in Production Infrastructure

ZeroPath
Brief Summary: CVE-2026-112741, a Heap Buffer Overflow in Microsoft Office Word Enabling Code Execution

ZeroPath
Brief Summary: CVE-2026-114147, an ASP.NET Core SignalR Redis Subscription Leak Leading to Denial of Service

ZeroPath
Brief Summary: CVE-2026-114151, a Visual Studio and .NET Deserialization Remote Code Execution Flaw

ZeroPath
Overview of CVE-2026-114152: Stack Buffer Overflow in the Visual Studio and .NET Native Symbol Reader

ZeroPath
Overview of CVE-2026-114159: Heap Buffer Overflow in the Visual Studio and .NET Native PDB Reader

ZeroPath
Brief Summary: Azure Managed Grafana CVE-2026-114160 SSRF Service Token Disclosure Leading to Elevation of Privilege

ZeroPath
Quick Look: CVE-2026-114162, Incorrect Authorization in Microsoft Graph (Azure PIM) Enabling Global Administrator Escalation

ZeroPath
Brief Summary: Microsoft Office CVE-2026-116717 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-116718: Heap-Based Buffer Overflow in Microsoft Word Enabling Code Execution via Crafted Documents

ZeroPath
Brief Summary: Microsoft Word CVE-2026-116719 Heap Buffer Overflow Leading to Remote Code Execution

ZeroPath
Quick Look: Microsoft Word CVE-2026-116720 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Word CVE-2026-116722 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Quick Look: Microsoft Word CVE-2026-116923 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Quick Look: CVE-2026-116925, a Heap Buffer Overflow in Microsoft Word Enabling Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE 2026 116927 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft SQL Server CVE-2026-116930 Command Injection Leading to Remote Code Execution

ZeroPath
Brief Summary: CVE-2026-116934 in Microsoft SQL Server, an Untrusted Pointer Dereference Enabling Privilege Escalation

ZeroPath
Overview of CVE-2026-116941: Authenticated Heap Overflow Leading to Code Execution in Microsoft SQL Server

ZeroPath
Brief Summary: Microsoft SQL Server CVE-2026-116942 Heap Buffer Overflow Allowing Authenticated Remote Code Execution

ZeroPath
Brief Summary: Microsoft SQL Server CVE-2026-116943 Unauthenticated Buffer Overread Information Disclosure

ZeroPath
Brief Summary: CVE-2026-116945, a Heap Buffer Overflow RCE in Microsoft SQL Server Integration Packages

ZeroPath
Overview of CVE-2026-116946: Heap Buffer Overflow in Microsoft SQL Server Integration Packages Enables Authenticated Code Execution

ZeroPath
Overview of CVE-2026-118106: Heap-Based Buffer Overflow in Microsoft SQL Server Replication

ZeroPath
Quick Look: CVE-2026-118120, SQL Injection in Microsoft SQL Server Replication Enabling Privilege Escalation

ZeroPath
CVE-2026-118149: Authenticated Code Injection Leading to Remote Code Execution in Microsoft Exchange Server SE

ZeroPath
Quick Look: CVE-2026-118150, a Microsoft Exchange Server SE Authorization Bypass Enabling Privilege Escalation

ZeroPath
Brief Summary: Microsoft Exchange Server SE CVE-2026-118207 Authenticated Remote Code Execution

ZeroPath
Overview of CVE-2026-118292: Microsoft Excel Stack-Based Buffer Overflow Leading to Code Execution

ZeroPath
Brief Summary: CVE-2026-118293, Microsoft Excel Out-of-Bounds Read Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118295 Stack-Based Buffer Overflow Enabling Remote Code Execution

ZeroPath
Overview of CVE-2026-118297: Microsoft Excel Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Overview of CVE-2026-118299: Heap-Based Buffer Overflow in Microsoft Excel AutoFormat Enables Code Execution

ZeroPath
Brief Summary: CVE-2026-118302, a Microsoft Excel Heap-Based Buffer Overflow Triggered Through Forecast Sheets

ZeroPath
Overview of CVE-2026-118700: Stack-Based Buffer Overflow in Microsoft Excel Enabling Remote Code Execution

ZeroPath
Brief Summary: CVE-2026-118701, Microsoft Excel Heap Buffer Overflow Enabling Remote Code Execution

ZeroPath
Brief Summary: CVE-2026-118702, a Double Free Remote Code Execution Flaw in Microsoft Excel

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118704 Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118712 Integer Underflow Remote Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118715 Heap Buffer Overflow Elevation of Privilege

ZeroPath
Overview of CVE-2026-118717: Stack-Based Buffer Overflow Enabling Code Execution in Microsoft Excel

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118718 Heap-Based Buffer Overflow Leading to Code Execution

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118721 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Quick Look: Microsoft Excel CVE-2026-118725 Out-of-Bounds Read Leading to Elevation of Privilege

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118731 Stack-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: ASP.NET Core Identity Scaffolding Flaw CVE-2026-118741 Sends Password Reset Links to Client-Supplied Addresses

ZeroPath
Brief Summary: Azure Front Door CVE-2026-118742, an Incorrect Permission Assignment Enabling Unauthenticated Privilege Elevation

ZeroPath
Brief Summary: CVE-2026-118745, a Heap-Based Buffer Overflow in the Native PDB Reader Behind Visual Studio and .NET

ZeroPath
Brief Summary: ASP.NET Core CVE-2026-118749, Quadratic Minimal API Validation Denial of Service (CWE-407)

ZeroPath
Overview of CVE-2026-118750: Unauthenticated Memory Exhaustion in ASP.NET Core WebUtilities FileBufferingReadStream

ZeroPath
Overview of CVE-2026-119951: Use-After-Free Remote Code Execution in Windows Deployment Services

ZeroPath
Brief Summary: Windows IIS CVE-2026-119961, a Race Condition Leading to Use After Free and Remote Code Execution

ZeroPath
Brief Summary: Ivanti CSA CVE-2026-121683, Missing Authentication in EPM Core Certificate Trust Management

ZeroPath
Brief Summary: Microsoft Excel CVE-2026-118714 Heap-Based Buffer Overflow Leading to Remote Code Execution

ZeroPath
Brief Summary: Microsoft Exchange Server CVE-2026-118153 Unauthenticated Denial of Service via Inefficient Algorithmic Complexity

ZeroPath
Brief Summary: Ivanti Endpoint Manager CVE-2026-121653, Unauthenticated SQL Injection Leading to RCE

ZeroPath
Brief Summary: Microsoft Word CVE-2026-109491 Use After Free Remote Code Execution

ZeroPath
Quick Look: Microsoft Outlook CVE-2026-110068 Use After Free Remote Code Execution

ZeroPath
Brief Summary: SharePoint Server CVE-2026-109464 Deserialization Remote Code Execution


2026-11-09

Xint
Node2Shell (CVE-2026-111497) Emergency Response Plan

Dark Reading
People Are Getting Weird About AI

Mehmet Ince
Part 3/6 | How I Ended Up Turning a 22-Year-Old PostgreSQL Type-Confusion Primitive into RCE (CVE-2026-6460)

Dark Reading
CISA Announces Enhanced Reporting Form for Cyber Incidents

Dark Reading
Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion

Dark Reading
Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India

Microsoft Security
FORGE Lab uses agentic tools to identify memory safety issues in Rust

Ars Technica Security
Vulnerability that lets hackers SSH into Linux devices is under active exploitation

MIT Technology Review
The backlash about data centers might really just be about electricity

Amazon Security
Help defend against memory poisoning in Amazon Bedrock AgentCore with multi-layer write validation

ISC SANS
Attackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th)

Dark Reading
Attackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux

Include Security
Why Don’t We Just Use AI?

Eclypsium
Unveiling AI Infrastructure Vulnerabilities - BTS #85

Ars Technica Security
Claude Code is accidentally exposing secrets all over GitHub

Dark Reading
PwC's CISO on AI, Robots & What's Next for Security

Meta Security
Extending LLDB to Debug Applications That Span CPUs and GPUs

GitGuardian
Beyond ARTEX: 45 Agentic Attack Frameworks, What They Hunt For, and How to Find Them

Jericho
Microsoft Advisories, CVEs, and Statistics Reminder

Amazon Security
Simplify cross-partition access with AWS IAM outbound identity federation

Dark Reading
NIST: Solo Shouldn't Mean Less Secure

Palo Alto Networks
Digital Contagion: How AI Is Transforming Supply Chain Cyber Risk

Wiz
Trusted by Default: Qubole Cross-Account Access Abused in the Wild

Socket
Malicious bee-js npm Release and Swarm Desktop Releases Deliver SleepyDuck Ethereum C2 Backdoor

Offensive Security
LEVEL 20: Same Game. New Level.

Malwarebytes
13.3 million people’s medical data exposed; companies pay $300,000

Cloudflare
Launching the Vite Ecosystem Fund

Hunt and Hackett
Your security seems to be under control, but can you prove it?

Schneier on Security
AI Security

CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA News
CISA Announces Enhanced Reporting Form for Cyber Incidents

GitGuardian
Claude Code settings.local.json Secrets: 17 months of exposure on GitHub, & Docker Hub

Malwarebytes
A week in security (November 2 – November 8)

Meta Red Team
Who needs permissions and the orange dot that never lit

ISC SANS
ISC Stormcast For Monday, November 9th, 2026 https://isc.sans.edu/podcastdetail/10170, (Mon, Nov 9th)

Step Security
@ethersphere/bee-js 13.3.0 Compromised

ZeroPath
Brief Summary: Confection WordPress Cable CVE-2026-115252 Unauthenticated PHP Code Execution

ZeroPath
Brief Summary: CVE-2026-120008, an Unauthenticated Out-of-Bounds Write in SAP NetWeaver Internet Graphics Service

Joshua Rogers
What’s going on with Taiwan’s RDAP server?

Snyk
Say Yes To MCP, Safely A Guide For Governing AI Coding Agents With Evo ADS

Datadog HQ
Datadog achieves Cyber Essentials Plus certification for its UK operations and UK1 production environment

ZeroPath
Brief Summary: SAP NetWeaver CVE-2026-109795 Code Injection via Missing Authorization Check (CVSS 9.9)

ZeroPath
Overview of CVE-2026-109803: SAP NetWeaver Knowledge Management XML Forms XSL Transformation Code Injection (CVSS 9.9)

ZeroPath
Brief Summary: SAP Message Server CVE-2026-109804 Unauthenticated Information Disclosure (CWE 908)

ZeroPath
Brief Summary: SAP NetWeaver IGS CVE-2026-109806 Unauthenticated Denial of Service via Integer Overflow

ZeroPath
Brief Summary: SAP Message Server CVE-2026-120010, an Unauthenticated Heap Buffer Overflow Causing Denial of Service

Fastly
Do You Have a Green Website?

ZeroPath
Overview of CVE-2026-119079: Quadratic ASN.1 Decoding Lets Unauthenticated Clients Exhaust MIT Kerberos KDC CPU

Auth0
Authentication and Authorization: What's New in .NET 11

ZeroPath
Brief Summary: CVE-2026-120017, a SAML2 Authentication Bypass in SAP NetWeaver AS ABAP and ABAP Platform

ZeroPath
Overview of CVE-2026-76964: Unauthenticated Memory Corruption in SAP NetWeaver AS ABAP Internet Communication Manager

ZeroPath
Brief Summary: SAP NetWeaver AS ABAP CVE-2026-76965, Missing Authorization Checks Leading to OS Command Execution

ZeroPath
Brief Summary: SAP NetWeaver Kernel CVE-2026-76966, Unauthenticated RFC Memory Corruption

ZeroPath
Brief Summary: SAP Gateway CVE-2026-89103, a Default ACL Broken Access Control Flaw Scored CVSS 10.0

ZeroPath
Brief Summary: CVE-2026-89119, Administrative CSRF in SAP Web Dispatcher and NetWeaver ICM

ZeroPath
Brief Summary: SAP Web Dispatcher CVE-2026-89126 Heap Buffer Overflow Allowing Unauthenticated Code Execution

Datadog HQ
Investigate Kubernetes health and processes with the Datadog MCP Server

Datadog HQ
Catch incidents and pause faulty deployments automatically with Datadog Deployment Gates


2026-11-08

Naveen Srinivasan
My W^X Hook Was Letting Things Be W+X

ToxSec
AI Security: Model Extraction and the Risk to Proprietary AI Systems

Joshua Rogers
You can no longer star archived GitHub repositories

LogTriage Research
What finds a new MCP server: directories, monitors and scanners

Rosecurify
Seclog - #203

ZeroPath
Brief Summary: Kyverno CVE-2026-124440, apiCall Namespace Clamp Bypass to Cluster Admin

ZeroPath
Brief Summary: Kyverno CVE-2026-124441 Authorization Bypass via Variable Generate Target Kind (with PoC)

ZeroPath
OpenEMR CVE-2026-124445: OneTimeAuth Token Replay and PIN Brute Force, with PoC Analysis

ZeroPath
Brief Summary: OpenEMR CVE-2026-124450 Broken Access Control and Path Traversal in the fax/sms disposeDocument Action (with PoC)


2026-11-07

Ars Technica Security
British soldier ignored order to pull his SIM card, then got blackmailed

shubs
unlocking any car from X brand in most of the world

Microsoft Security
ARTEX abuse expands as cybercriminals target financial sector

Sam Curry
Hacking Two Automakers: ForgeRock Path Confusion, RCE, and Remote Vehicle Access

MaskRay's Blog
四色滑道：从博物馆的益智玩具到一道OI题

ZeroPath
CVE-2026-116751: Unauthenticated Time-Based SQL Injection via Tag Array Keys in Amelia Pro for WordPress

ZeroPath
CVE-2026-119155: Unauthenticated Time-Based SQL Injection in wpForo Forum via href[locale], with Patch Analysis

ZeroPath
Overview of CVE-2026-123543: Unauthenticated Denial of Service via Unbounded Java Deserialization in OpenAM

ZeroPath
Overview of CVE-2026-123549: OpenAM Self Registration Attribute Bypass Enables Anonymous Admin Takeover

ZeroPath
Quick Look: OpenAM CVE-2026-123550 SAML Authentication Bypass via Unsigned Assertions

ZeroPath
Brief Summary: Tenda AC19 CVE-2026-123966 Heap Buffer Overflow in saveParentControlInfo with Public PoC

ZeroPath
Brief Summary: OpenAM CVE-2026-123551 Session Token Disclosure via the Notification WebSocket