https://www.pk-sharma.com/briefing/fortinet-10-november-2026-advisories-50-in-the-feed-89-per-securityweek-17-pages-read-none-exploited P.K. Sharma en 2026-11-11T16:23:28Z Fortinet's 10 Nov feed lists 50 advisories, SecurityWeek counts 89; none of 17 pages read says exploited https://www.pk-sharma.com/briefing/git-2-56-1-fixes-six-vulnerabilities-recursive-clone-code-execution-what-git-and-github-say P.K. Sharma en 2026-11-11T16:18:57Z Git 2.56.1 and six older releases fix six flaws; one lets a recursive clone run code, say the notes https://www.pk-sharma.com/briefing/arctic-wolf-says-antifox-hosts-on-alibaba-cloud-linked-to-web-shell-and-aws-intrusions-18-services-flaw-not-identified P.K. Sharma en 2026-11-11T16:16:01Z Arctic Wolf says AntiFox hosts on Alibaba Cloud were linked to web shell and AWS intrusions; 18 services named https://www.pk-sharma.com/briefing/amd-november-2026-pages-counted-31-items-100-unique-cves-mitigation-dates-2020-to-april-2027-intel-advisory-unreadable P.K. Sharma en 2026-11-11T10:29:55Z AMD's November pages, counted: 31 items, 100 unique CVEs, mitigation dates from 2020 to a planned April 2027 https://www.pk-sharma.com/briefing/enisa-2026-state-of-cybersecurity-in-the-union-45-percent-of-surveyed-it-providers-took-over-three-months-to-patch P.K. Sharma en 2026-11-11T10:27:37Z ENISA: Index averages 71.53; 45% of surveyed ICT service management entities took over three months to patch https://www.pk-sharma.com/briefing/microsoft-research-lazarus-fewer-than-10-neuron-edits-backdoor-an-ai-agent-that-passes-evaluations-what-microsoft-says P.K. Sharma en 2026-11-11T10:22:15Z Microsoft says fewer than 10 neuron edits backdoor an AI agent that passes evaluations; no attacker use seen https://www.pk-sharma.com/briefing/microsoft-november-2026-patch-tuesday-outlook-ntlm-zero-day-rated-moderate-counts-disagree P.K. Sharma en 2026-11-11T07:03:39Z Microsoft says 1,094 CVEs in November, its file held 1,342 entries, now 1,362; the one exploited flaw is… https://www.pk-sharma.com/briefing/cisco-broadworks-cve-2026-20320-kev-83-days-after-advisory-which-still-says-no-malicious-use P.K. Sharma en 2026-11-11T06:59:12Z CISA's KEV lists Cisco BroadWorks CVE-2026-20320 83 days after the advisory, which still says no malicious use https://www.pk-sharma.com/briefing/gpustack-cve-2026-102895-trusted-loopback-header-grants-unauthenticated-admin-kev-9-nov P.K. Sharma en 2026-11-11T06:58:40Z GPUStack advisory says loopback trust gives unauthenticated admin; exploited, fixed in 2.2.0, on CISA KEV https://www.pk-sharma.com/briefing/openwave-webtop-media-transcoder-cve-2026-111793-jvn-says-attacks-seen-advisory-silent-fix-dated-2021-kev-10-nov P.K. Sharma en 2026-11-11T06:58:36Z Openwave Webtop Media Transcoder CVE-2026-111793: JVN says attacks seen, advisory silent, fix dated 2021 https://www.pk-sharma.com/briefing/gemini-4-carbon-opens-broadly-13-days-after-announcement-safety-report-no-material-capability-change-what-google-says P.K. Sharma en 2026-11-10T18:34:18Z Google says Gemini 4 Carbon shows no material capability change; 4 of its 7 cyber tests rose 10 points or more https://www.pk-sharma.com/briefing/vates-xen-orchestra-vsa-2026-062-empty-object-cookie-auth-bypass-exploited-fixed-5-213-1-what-vates-says P.K. Sharma en 2026-11-10T18:29:33Z Vates says Xen Orchestra bypass is exploited, fixed in 5.213.1; its Affected line also lists 5.213.2 https://www.pk-sharma.com/briefing/deepmind-alphaproof-code-signal-libsignal-aarch64-lean-proofs-6-5-million-lines-what-deepmind-says P.K. Sharma en 2026-11-10T15:05:44Z DeepMind says AI proved key libsignal properties in Lean: about 6.5M proof lines on 26,000 trusted lines https://www.pk-sharma.com/briefing/sap-november-2026-patch-day-onapsis-four-cvss-10-notes-websocket-kernel-proxygate-what-onapsis-says P.K. Sharma en 2026-11-10T15:03:55Z Onapsis says SAP's 43 November notes hold four rated 10.0; PROXYGATE's fix is a patch plus a parameter https://www.pk-sharma.com/briefing/freeswitch-cve-2026-116779-inbound-sip-message-runs-api-commands-in-the-wild-before-kev-what-the-advisory-says P.K. Sharma en 2026-11-10T15:03:02Z FreeSWITCH CVE-2026-116779: advisory of 28 Oct says exploited; the 1.11.3 fix release was 61 days earlier https://www.pk-sharma.com/briefing/ibm-aspera-faspex-cve-2026-123218-bulletin-says-authenticated-vector-says-no-privileges-fixed-5-0-19-pl1-what-ibm-says P.K. Sharma en 2026-11-10T14:59:22Z Aspera Faspex CVE-2026-123218: IBM text says authenticated, its CVSS vector says no privileges; KEV 9 Nov https://www.pk-sharma.com/briefing/acronis-575-malicious-openclaw-skills-13-accounts-hugging-face-payloads-what-acronis-says P.K. Sharma en 2026-11-10T10:59:32Z Acronis says 575 malicious OpenClaw skills sit with 13 accounts; other firms count differently https://www.pk-sharma.com/briefing/chrome-157-0-8103-50-fixes-xml-use-after-free-cve-2026-125350-exploit-in-the-wild-3-days-after-report-what-google-says P.K. Sharma en 2026-11-10T10:58:44Z Google: Chrome XML bug CVE-2026-125350 has an exploit in the wild; fixed in 157.0.8103.50, 3 days after report https://www.pk-sharma.com/briefing/openssh-cve-2026-123158-sshole-kev-four-days-after-alpine-fix-old-version-numbers-what-alpine-and-cisa-say P.K. Sharma en 2026-11-10T10:57:19Z CISA lists OpenSSH CVE-2026-123158 four days after the fix; fixed Alpine packages keep old version numbers https://www.pk-sharma.com/briefing/eset-turla-cereal-exchange-transport-agents-hijacked-kazakhstan-romania-no-entry-route-what-eset-says P.K. Sharma en 2026-11-10T10:56:30Z ESET says Turla's Cereal toolset hijacks Exchange agents at two governments; entry route not stated https://www.pk-sharma.com/briefing/n-able-n-central-33-alleged-flaws-hosted-offline-no-exploitation-seen-no-cves-yet P.K. Sharma en 2026-11-10T10:56:02Z N-able took hosted N-central offline over 33 alleged flaws; by 11 Nov it had a hotfix and seven CVE records https://www.pk-sharma.com/briefing/fireworks-ai-second-incident-cloud-provider-23-october-llmjacking-links-what-fireworks-says P.K. Sharma en 2026-11-10T10:54:51Z Fireworks AI says an unnamed cloud provider's incident widened its breach; update came 34 days after detection https://www.pk-sharma.com/briefing/meta-muse-ember-small-closed-model-cost-per-task-claims-vs-artificial-analysis-what-meta-says P.K. Sharma en 2026-11-09T20:55:38Z Meta says Muse Ember costs a third of Haiku 5.5 per task at equal token prices; it trails on FrontierCode https://www.pk-sharma.com/briefing/france-attributes-october-fridge-controller-attack-to-iran-irgc-four-indicators-what-france-says P.K. Sharma en 2026-11-09T20:50:45Z France says an IRGC unit hit about 700 sites; its report lists four indicators, none an IP address https://www.pk-sharma.com/briefing/wiz-qubole-cross-account-aws-roles-abused-14-26-october-secrets-and-s3-data-what-wiz-says P.K. Sharma en 2026-11-09T20:49:32Z Wiz says mostly unused Qubole cross-account AWS roles were abused 14 to 26 Oct; entry route not stated https://www.pk-sharma.com/briefing/anthropic-claude-fable-5-2-and-mythos-5-2-one-model-two-configurations-cost-per-task-what-anthropic-says P.K. Sharma en 2026-11-09T20:23:05Z Anthropic: Fable 5.2 and Mythos 5.2 are one model; its chart scores Max below Xhigh at 3.15 times the cost