https://www.pk-sharma.com/briefing/thales-sentinel-keys-server-cve-2026-78403-one-http-request-to-system-on-windows P.K. Sharma en 2026-11-01T14:42:34Z One HTTP request with no login may run code as SYSTEM on Thales Sentinel Keys Server, the CVE record says https://www.pk-sharma.com/briefing/pgadmin-4-9-19-fixes-15-cves-database-role-could-run-commands-on-the-pgadmin-host P.K. Sharma en 2026-11-01T14:41:33Z pgAdmin 4 9.19 fixes 15 CVEs; the worst let an ordinary user's query export run commands on the pgAdmin host https://www.pk-sharma.com/briefing/lxd-microcloud-cve-2026-112816-cvss-10-trusted-client-impersonation-public-certificate-in-chain P.K. Sharma en 2026-11-01T11:06:11Z LXD and MicroCloud trusted any certificate in a client's chain, so a public certificate could log in as it https://www.pk-sharma.com/briefing/fbi-attributes-binance-6-billion-theft-to-north-korea-tradertraitor-laundering-addresses-published P.K. Sharma en 2026-11-01T11:01:18Z FBI says North Korea stole more than $6 billion from Binance and lists 628 addresses to block https://www.pk-sharma.com/briefing/northflank-says-assume-all-environment-variables-decrypted-customers-report-ai-api-key-misuse-no-route-or-count-stated P.K. Sharma en 2026-10-31T20:16:59Z Northflank says assume all environment variables were decrypted; AI key misuse reported, no route or count https://www.pk-sharma.com/briefing/android-sms-of-death-zero-click-wap-push-crash-fix-in-october-source-not-in-bulletin-android-12-13-none-cve-reserved P.K. Sharma en 2026-10-31T20:08:34Z Android 'SMS of Death' exploit is public: fix is in October's code, not Google's bulletin; CVE only reserved https://www.pk-sharma.com/briefing/talos-volta-infostealer-sends-stolen-data-to-an-llm-to-rank-victim-assets-three-model-fallback-what-talos-found P.K. Sharma en 2026-10-31T14:59:48Z Talos says VOLTA stealer has an LLM rank victims' assets and falls back across 3 models; one sample listed https://www.pk-sharma.com/briefing/chainalysis-intrusion-offensive-agentic-techniques-names-emails-role-labels-accessed-no-route-or-count-stated P.K. Sharma en 2026-10-31T14:57:19Z Chainalysis says an actor using "offensive agentic techniques" accessed customer names, emails and role labels https://www.pk-sharma.com/briefing/cloudflare-says-no-interception-seen-from-emudhra-weak-keys-over-half-of-large-network-probes-trust-them P.K. Sharma en 2026-10-31T11:43:09Z Cloudflare: no interception seen from eMudhra's weak keys, yet over half of large network probes trust them https://www.pk-sharma.com/briefing/cloudflare-ddos-threat-report-2026-q3-8200-attacks-per-hour-swarms-fewer-giants-what-the-report-says P.K. Sharma en 2026-10-31T11:42:00Z Cloudflare's Q3 DDoS report counts 18.2 million network layer attacks, 96% under 10 minutes: what it measures https://www.pk-sharma.com/briefing/parameter-labs-chatgpt-shared-link-attacker-code-mathlive-postmessage-openai-fixed-p1-what-the-writeup-says P.K. Sharma en 2026-10-31T11:40:44Z Parameter Labs says a shared ChatGPT link could run attacker code via MathLive postMessage; OpenAI fixed, P1 https://www.pk-sharma.com/briefing/raid-ai-ransomware-readiness-framework-for-ai-systems-76-controls-in-script-90-plus-in-docs-what-it-measures P.K. Sharma en 2026-10-30T23:04:24Z RAID-AI ransomware framework for AI systems: its console code holds 76 controls, its docs say 90+ https://www.pk-sharma.com/briefing/microsoft-teams-help-desk-impersonation-quick-assist-ad-cs-esc1-esc8-two-intrusions-what-microsoft-says P.K. Sharma en 2026-10-30T22:54:59Z Microsoft says Teams help desk impersonation led to AD CS abuse in two intrusions, via ESC1 and ESC8 https://www.pk-sharma.com/briefing/revolve-group-8-k-payment-card-numbers-expiry-dates-stolen-saved-payment-accounts-127200-texas-what-the-filings-say P.K. Sharma en 2026-10-30T22:53:20Z Revolve says an actor may have obtained saved card numbers and expiry dates; Texas lists 127,200 people https://www.pk-sharma.com/briefing/character-ai-bankruptcy-doj-us-trustee-asks-consumer-privacy-ombudsman-12-million-users-chat-sale-what-the-filing-says P.K. Sharma en 2026-10-30T22:52:33Z Character.AI bankruptcy: US Trustee asks for a privacy ombudsman before any user data sale, filing says