Filed under daily-briefing
Critical-severity threat briefing for 12 November 2026. Top story: PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution Also notable: Critical Xen Orchestra Flaws Exploited in Attacks; CVE-2026-110697: A flaw was found in Quay where the robot…
Critical-severity threat briefing for 11 November 2026. Top story: Barracuda Networks Barracuda Email Security Gateway (ESG): Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-116606) Also notable…
Critical-severity threat briefing for 10 November 2026. Top story: IBM Aspera Faspex: IBM Aspera Faspex Incorrect Authorization Vulnerability (CVE-2026-123218) Also notable: SignalWire FreeSwitch: SignalWire FreeSwitch Code Injection Vulnerability (CVE-2026-116779); GPUStack…
Critical-severity threat briefing for 9 November 2026. Top story: Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH Also notable: CVE-2026-107331: IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive……
Critical-severity threat briefing for 8 November 2026. Top story: CVE-2026-123551, a CVSS 10.0 information disclosure flaw in OpenAM 14.0.0 to 16.1.3, plus two CVSS 9.3 OpenAM CVEs, checked against NVD and CISA KEV.