https://www.pk-sharma.com/briefing/citrix-words-27-of-28-netscaler-flaws-as-denial-of-service-yet-its-vectors-rate-10-high-on-all-three-impacts P.K. Sharma en 2026-11-12T17:56:52Z Citrix words 27 of 28 NetScaler flaws as denial of service, yet its vectors rate 10 high on all three impacts https://www.pk-sharma.com/briefing/signdrop-windows-zero-day-readme-says-only-2-of-4-clfs-mode-values-are-safe-both-with-the-mitigation-off P.K. Sharma en 2026-11-12T17:48:30Z SignDrop Windows zero-day README says only 2 of 4 CLFS Mode values are safe, both with the mitigation off https://www.pk-sharma.com/briefing/unit-42-says-cairn-ai-pentest-framework-with-glm-and-deepseek-ran-25-operations-against-19-organizations-what-it-says P.K. Sharma en 2026-11-12T17:47:39Z Unit 42 says Cairn with GLM and DeepSeek ran 25 operations against at least 19 organizations https://www.pk-sharma.com/briefing/europol-says-operation-endgame-seized-235-servers-and-257-domains-behind-gootloader-castlerat-and-stealc-europol-says P.K. Sharma en 2026-11-12T17:46:49Z Europol says Operation Endgame seized 235 servers and 257 domains behind Gootloader, CastleRAT and StealC https://www.pk-sharma.com/briefing/mongodb-lists-pre-auth-use-after-free-cve-2026-118383-at-9-5-fixed-in-seven-release-lines-what-mongodb-says P.K. Sharma en 2026-11-12T15:15:57Z MongoDB lists pre-auth use-after-free CVE-2026-118383 at 9.5, fixed in seven release lines https://www.pk-sharma.com/briefing/aikido-says-wfx-loot-stolen-github-tokens-probed-61764-repositories-secret-stealer-ran-in-over-1800-what-aikido-says P.K. Sharma en 2026-11-12T15:13:40Z Aikido says stolen GitHub tokens probed 61,764 repositories and its wfx-loot stealer ran in over 1,800 https://www.pk-sharma.com/briefing/darktrace-says-stolen-claude-credentials-let-it-run-nine-jobs-through-claude-code-in-a-lab-test-what-darktrace-says P.K. Sharma en 2026-11-12T15:12:32Z Darktrace says stolen Claude credentials let it run nine jobs through Claude Code in a lab test https://www.pk-sharma.com/briefing/connectwise-disables-five-screenconnect-extensions-in-about-400-environments-huntress-six-msps-compromised P.K. Sharma en 2026-11-12T07:08:27Z ConnectWise disables five ScreenConnect extensions in about 400 environments; Huntress: six MSPs compromised https://www.pk-sharma.com/briefing/apache-2-4-71-fixes-critical-mod-http2-rce-cve-2026-119618-found-by-anthropic-oss-scanner-and-google-what-apache-says P.K. Sharma en 2026-11-12T07:07:42Z Apache says 2.4.71 fixes critical mod_http2 RCE CVE-2026-119618, 16 days after Anthropic's OSS Scanner report https://www.pk-sharma.com/briefing/microsoft-forge-lab-59-linux-kernel-reports-33-cves-eight-root-exploits-from-26502-raw-findings-what-microsoft-says P.K. Sharma en 2026-11-11T21:54:50Z Microsoft's FORGE Lab says 26,502 raw Linux kernel findings became 59 reports, 33 CVEs, 8 root exploits https://www.pk-sharma.com/briefing/vulncheck-says-217-of-anthropics-37966-findings-marked-fixed-anthropic-dashboard-says-629-patched-what-each-counts P.K. Sharma en 2026-11-11T21:53:49Z VulnCheck says 217 of Anthropic's 37,966 findings are marked fixed; Anthropic's dashboard says 629 patched https://www.pk-sharma.com/briefing/microsoft-says-gsocket-keeps-linux-access-after-patching-detections-up-356-percent-no-attacker-owned-address P.K. Sharma en 2026-11-11T21:51:27Z Microsoft says attackers use GSocket to keep Linux access after patching; devices with detections up 356.2% https://www.pk-sharma.com/briefing/maersk-says-legacy-system-data-extracted-no-sensitive-data-suggested-whitearmor-claims-100gb-unverified P.K. Sharma en 2026-11-11T21:49:13Z Maersk: data extracted from a legacy system, "no sensitive data" suggested; WhiteArmor claims 100GB https://www.pk-sharma.com/briefing/fortinet-10-november-2026-advisories-50-in-the-feed-89-per-securityweek-17-pages-read-none-exploited P.K. Sharma en 2026-11-11T16:23:28Z Fortinet's 10 Nov feed lists 50 advisories, SecurityWeek counts 89; none of 17 pages read says exploited https://www.pk-sharma.com/briefing/git-2-56-1-fixes-six-vulnerabilities-recursive-clone-code-execution-what-git-and-github-say P.K. Sharma en 2026-11-11T16:18:57Z Git 2.56.1 and six older releases fix six flaws; one lets a recursive clone run code, say the notes https://www.pk-sharma.com/briefing/arctic-wolf-says-antifox-hosts-on-alibaba-cloud-linked-to-web-shell-and-aws-intrusions-18-services-flaw-not-identified P.K. Sharma en 2026-11-11T16:16:01Z Arctic Wolf says AntiFox hosts on Alibaba Cloud were linked to web shell and AWS intrusions; 18 services named https://www.pk-sharma.com/briefing/amd-november-2026-pages-counted-31-items-100-unique-cves-mitigation-dates-2020-to-april-2027-intel-advisory-unreadable P.K. Sharma en 2026-11-11T10:29:55Z AMD's November pages, counted: 31 items, 100 unique CVEs, mitigation dates from 2020 to a planned April 2027 https://www.pk-sharma.com/briefing/enisa-2026-state-of-cybersecurity-in-the-union-45-percent-of-surveyed-it-providers-took-over-three-months-to-patch P.K. Sharma en 2026-11-11T10:27:37Z ENISA: Index averages 71.53; 45% of surveyed ICT service management entities took over three months to patch https://www.pk-sharma.com/briefing/microsoft-research-lazarus-fewer-than-10-neuron-edits-backdoor-an-ai-agent-that-passes-evaluations-what-microsoft-says P.K. Sharma en 2026-11-11T10:22:15Z Microsoft says fewer than 10 neuron edits backdoor an AI agent that passes evaluations; no attacker use seen https://www.pk-sharma.com/briefing/microsoft-november-2026-patch-tuesday-outlook-ntlm-zero-day-rated-moderate-counts-disagree P.K. Sharma en 2026-11-11T07:03:39Z Microsoft says 1,094 CVEs in November, its file held 1,342 entries, now 1,362; the one exploited flaw is… https://www.pk-sharma.com/briefing/cisco-broadworks-cve-2026-20320-kev-83-days-after-advisory-which-still-says-no-malicious-use P.K. Sharma en 2026-11-11T06:59:12Z CISA's KEV lists Cisco BroadWorks CVE-2026-20320 83 days after the advisory, which still says no malicious use https://www.pk-sharma.com/briefing/gpustack-cve-2026-102895-trusted-loopback-header-grants-unauthenticated-admin-kev-9-nov P.K. Sharma en 2026-11-11T06:58:40Z GPUStack advisory says loopback trust gives unauthenticated admin; exploited, fixed in 2.2.0, on CISA KEV https://www.pk-sharma.com/briefing/openwave-webtop-media-transcoder-cve-2026-111793-jvn-says-attacks-seen-advisory-silent-fix-dated-2021-kev-10-nov P.K. Sharma en 2026-11-11T06:58:36Z Openwave Webtop Media Transcoder CVE-2026-111793: JVN says attacks seen, advisory silent, fix dated 2021