https://www.pk-sharma.com/briefing/gemini-4-carbon-opens-broadly-13-days-after-announcement-safety-report-no-material-capability-change-what-google-says P.K. Sharma en 2026-11-10T18:34:18Z Google says Gemini 4 Carbon shows no material capability change; 4 of its 7 cyber tests rose 10 points or more https://www.pk-sharma.com/briefing/vates-xen-orchestra-vsa-2026-062-empty-object-cookie-auth-bypass-exploited-fixed-5-213-1-what-vates-says P.K. Sharma en 2026-11-10T18:29:33Z Vates says Xen Orchestra bypass is exploited, fixed in 5.213.1; its Affected line also lists 5.213.2 https://www.pk-sharma.com/briefing/deepmind-alphaproof-code-signal-libsignal-aarch64-lean-proofs-6-5-million-lines-what-deepmind-says P.K. Sharma en 2026-11-10T15:05:44Z DeepMind says AI proved key libsignal properties in Lean: about 6.5M proof lines on 26,000 trusted lines https://www.pk-sharma.com/briefing/sap-november-2026-patch-day-onapsis-four-cvss-10-notes-websocket-kernel-proxygate-what-onapsis-says P.K. Sharma en 2026-11-10T15:03:55Z Onapsis says SAP's 43 November notes hold four rated 10.0; PROXYGATE's fix is a patch plus a parameter https://www.pk-sharma.com/briefing/freeswitch-cve-2026-116779-inbound-sip-message-runs-api-commands-in-the-wild-before-kev-what-the-advisory-says P.K. Sharma en 2026-11-10T15:03:02Z FreeSWITCH CVE-2026-116779: advisory of 28 Oct says exploited; the 1.11.3 fix release was 61 days earlier https://www.pk-sharma.com/briefing/ibm-aspera-faspex-cve-2026-123218-bulletin-says-authenticated-vector-says-no-privileges-fixed-5-0-19-pl1-what-ibm-says P.K. Sharma en 2026-11-10T14:59:22Z Aspera Faspex CVE-2026-123218: IBM text says authenticated, its CVSS vector says no privileges; KEV 9 Nov https://www.pk-sharma.com/briefing/acronis-575-malicious-openclaw-skills-13-accounts-hugging-face-payloads-what-acronis-says P.K. Sharma en 2026-11-10T10:59:32Z Acronis says 575 malicious OpenClaw skills sit with 13 accounts; other firms count differently https://www.pk-sharma.com/briefing/chrome-157-0-8103-50-fixes-xml-use-after-free-cve-2026-125350-exploit-in-the-wild-3-days-after-report-what-google-says P.K. Sharma en 2026-11-10T10:58:44Z Google: Chrome XML bug CVE-2026-125350 has an exploit in the wild; fixed in 157.0.8103.50, 3 days after report https://www.pk-sharma.com/briefing/openssh-cve-2026-123158-sshole-kev-four-days-after-alpine-fix-old-version-numbers-what-alpine-and-cisa-say P.K. Sharma en 2026-11-10T10:57:19Z CISA lists OpenSSH CVE-2026-123158 four days after the fix; fixed Alpine packages keep old version numbers https://www.pk-sharma.com/briefing/eset-turla-cereal-exchange-transport-agents-hijacked-kazakhstan-romania-no-entry-route-what-eset-says P.K. Sharma en 2026-11-10T10:56:30Z ESET says Turla's Cereal toolset hijacks Exchange agents at two governments; entry route not stated https://www.pk-sharma.com/briefing/n-able-n-central-33-alleged-flaws-hosted-offline-no-exploitation-seen-no-cves-yet P.K. Sharma en 2026-11-10T10:56:02Z N-able took hosted N-central offline over 33 alleged flaws; says it sees no exploitation, no CVEs yet https://www.pk-sharma.com/briefing/fireworks-ai-second-incident-cloud-provider-23-october-llmjacking-links-what-fireworks-says P.K. Sharma en 2026-11-10T10:54:51Z Fireworks AI says an unnamed cloud provider's incident widened its breach; update came 34 days after detection https://www.pk-sharma.com/briefing/meta-muse-ember-small-closed-model-cost-per-task-claims-vs-artificial-analysis-what-meta-says P.K. Sharma en 2026-11-09T20:55:38Z Meta says Muse Ember costs a third of Haiku 5.5 per task at equal token prices; it trails on FrontierCode https://www.pk-sharma.com/briefing/france-attributes-october-fridge-controller-attack-to-iran-irgc-four-indicators-what-france-says P.K. Sharma en 2026-11-09T20:50:45Z France says an IRGC unit hit about 700 sites; its report lists four indicators, none an IP address https://www.pk-sharma.com/briefing/wiz-qubole-cross-account-aws-roles-abused-14-26-october-secrets-and-s3-data-what-wiz-says P.K. Sharma en 2026-11-09T20:49:32Z Wiz says mostly unused Qubole cross-account AWS roles were abused 14 to 26 Oct; entry route not stated https://www.pk-sharma.com/briefing/anthropic-claude-fable-5-2-and-mythos-5-2-one-model-two-configurations-cost-per-task-what-anthropic-says P.K. Sharma en 2026-11-09T20:23:05Z Anthropic: Fable 5.2 and Mythos 5.2 are one model; its chart scores Max below Xhigh at 3.15 times the cost https://www.pk-sharma.com/briefing/malbear-operation-snowball-jailbroken-deepseek-agent-european-telecom-two-weeks-what-malbear-says P.K. Sharma en 2026-11-09T18:47:14Z Malbear says a jailbroken DeepSeek Flash agent scored its own intrusion at 3,725; the parts sum to 3,620 https://www.pk-sharma.com/briefing/securityscorecard-copeland-xweb-pro-refrigeration-controllers-spam-botnet-what-securityscorecard-says P.K. Sharma en 2026-11-09T18:45:43Z SecurityScorecard says a suspected spam botnet has 9 IPs, 3 confirmed as Copeland XWEB PRO controllers https://www.pk-sharma.com/briefing/mittwald-mcp-server-incident-56-customer-projects-8-days-before-detection-ai-claim-what-mittwald-says P.K. Sharma en 2026-11-09T18:44:16Z Mittwald says an MCP flaw compromised 56 projects, first block came 7 days 20 hours later; AI is its inference https://www.pk-sharma.com/briefing/amplifon-americas-1-3-million-health-insurance-ids-237-days-detection-to-data-review-what-amplifon-says P.K. Sharma en 2026-11-09T14:36:38Z Amplifon Americas notice dates its data review 237 days after detection; Texas filing lists 1.33 million https://www.pk-sharma.com/briefing/google-deepmind-rsa-1024-forgery-30x-factoring-papers-what-deepmind-says P.K. Sharma en 2026-11-09T10:56:19Z Google DeepMind says AI agents cut a 1024-bit RSA forgery to 391 core-years; the factoring claim is theory https://www.pk-sharma.com/briefing/acronis-bossai-12-agent-ai-attack-mesh-taiwan-emergency-services-refusals-what-acronis-says P.K. Sharma en 2026-11-09T10:54:51Z Acronis says one operator's 12 AI agents targeted 11 countries; about 10 targets had confirmed access