https://www.pk-sharma.com/briefing/eset-slippynunchucks-sogou-input-method-brand-promotion-hijack-darkvigil-what-eset-says P.K. Sharma en 2026-11-04T16:18:15Z ESET says DNS hijacking turned a Sogou Input Method icon request into a DarkVigil implant install https://www.pk-sharma.com/briefing/sonicwall-gms-end-of-life-two-flaws-no-fix-no-workaround-cve-2026-109593-109594-what-sonicwall-says P.K. Sharma en 2026-11-04T16:14:33Z SonicWall says two flaws in end of life GMS will never be fixed, one an unauthenticated file read rated 9.1 https://www.pk-sharma.com/briefing/sekoia-apt29-watering-holes-ios-android-n-day-chains-plerdy-supply-chain-what-sekoia-says P.K. Sharma en 2026-11-04T11:32:35Z Sekoia says APT29 watering holes used patched iOS and Android flaws, one route via a compromised tracker https://www.pk-sharma.com/briefing/google-android-bulletin-216-flaws-23-critical-two-patch-levels-framework-rce-cve-2026-58868-no-exploitation-stated P.K. Sharma en 2026-11-04T11:30:33Z Google's Android bulletin lists 216 flaws, 23 critical, in two patch levels, and names no exploitation https://www.pk-sharma.com/briefing/chrome-157-google-lists-all-213-fixes-7-critical-9-dollar-amounts-31000-39-tbd P.K. Sharma en 2026-11-04T11:27:08Z Google lists all 213 Chrome 157 fixes and 7 Critical, but prints a dollar amount on only 9 https://www.pk-sharma.com/briefing/opsshield-says-fake-cpguard-update-ran-as-root-on-about-2950-servers-its-two-notices-differ P.K. Sharma en 2026-11-04T08:03:39Z OpsShield says a fake cPGuard update ran as root on about 2,950 servers; its two notices differ in places https://www.pk-sharma.com/briefing/openai-bounty-up-to-172000-with-bonuses-and-cathedral-security-sprint-what-the-pages-state-and-omit P.K. Sharma en 2026-11-04T07:55:56Z OpenAI says bounties go up to $172,000 with bonuses and a Cathedral sprint is planned; no scope, date or count https://www.pk-sharma.com/briefing/workos-says-ai-assisted-attack-reached-internal-sales-app-crm-contacts-and-call-summaries-no-count-or-route-stated P.K. Sharma en 2026-11-03T21:53:37Z WorkOS says an AI-assisted attack reached an internal sales app holding CRM contacts and call summaries https://www.pk-sharma.com/briefing/chainstack-says-attacker-had-5-days-before-detection-password-hashes-and-node-credentials-no-count-or-route-stated P.K. Sharma en 2026-11-03T19:09:20Z Chainstack says an attacker reached password hashes and credential systems; 5 days passed before detection https://www.pk-sharma.com/briefing/ncsc-ai-cyber-intrusion-assessment-highly-likely-ransomware-on-uk-cni-what-the-assessment-says P.K. Sharma en 2026-11-03T16:04:59Z NCSC says AI-powered malware in a ransomware attack on UK CNI is 'highly likely' by 2028, a range of 80 to 90% https://www.pk-sharma.com/briefing/bitdefender-3am-ransomware-uk-school-estate-hybrid-ai-agentic-loop-what-the-report-says P.K. Sharma en 2026-11-03T16:04:13Z Bitdefender calls a 3AM attack on a UK school estate hybrid: model like commands, a human not ruled out https://www.pk-sharma.com/briefing/kaspersky-cyberstrikeai-llm-on-the-c2-server-education-africa-latin-america-what-the-report-says P.K. Sharma en 2026-11-03T16:01:10Z Kaspersky says an LLM on the attacker's server chose the commands; agent to domain admin took 3 to 4 days https://www.pk-sharma.com/briefing/eset-gorbag-russia-aligned-group-harvests-ukrainian-councils-and-courts-what-eset-says P.K. Sharma en 2026-11-03T12:34:35Z ESET says Gorbag harvests Ukrainian justice bodies and city councils in one pass, then deletes itself https://www.pk-sharma.com/briefing/node-red-cve-2026-58115-siemens-iot2050-fix-80-days-before-exploitation-vulncheck P.K. Sharma en 2026-11-03T12:33:37Z VulnCheck says its canary caught CVE-2026-58115, a CVSS 10 Siemens flaw, exploited 80 days after the advisory https://www.pk-sharma.com/briefing/absolute-secure-access-13-0-to-14-60-critical-authentication-bypass-fixed-in-14-61-what-absolute-says P.K. Sharma en 2026-11-03T11:37:11Z Absolute says Secure Access servers 13.0 to 14.60 have a critical authentication bypass, fixed in 14.61 https://www.pk-sharma.com/briefing/google-llmjacking-stolen-cloud-access-ai-bills-100000-a-day-up-to-1-million-what-google-says-and-does-not P.K. Sharma en 2026-11-03T11:35:26Z Google says stolen cloud access ran AI bills up to $1 million; the post gives no count of victims or days https://www.pk-sharma.com/briefing/mcphantom-ai-coding-agents-install-archived-mcp-servers-glow-labs-says-no-patch-is-coming P.K. Sharma en 2026-11-03T11:35:20Z Glow Labs says AI coding agents install archived MCP servers from model memory, and no patch is coming https://www.pk-sharma.com/briefing/michigan-state-university-byod-ransomware-claims-1-3-million-students-what-the-university-says P.K. Sharma en 2026-11-02T21:12:41Z Michigan State says no evidence other data was stolen; a gang lists it and claims 1.3 million students https://www.pk-sharma.com/briefing/abrigo-sageworks-offline-about-69-hours-status-page-says-only-irregular-activity P.K. Sharma en 2026-11-02T21:11:56Z Abrigo kept Sageworks offline about 69 hours; its status page says only "irregular activity"