https://www.pk-sharma.com/briefing/cursor-says-a-key-exposed-by-fireworks-led-to-the-malicious-claude-code-extension-three-figures-three-groups P.K. Sharma en 2026-11-14T20:36:50Z Cursor says a key exposed by Fireworks led to the malicious Claude Code extension; three figures, three groups https://www.pk-sharma.com/briefing/cisa-lists-unrealircd-cve-2026-114713-as-exploited-6-days-after-the-fix-vendor-says-critical-cve-record-says-8-6 P.K. Sharma en 2026-11-14T15:06:46Z CISA lists UnrealIRCd CVE-2026-114713 as exploited 6 days after the fix; vendor says critical, CVE says 8.6 https://www.pk-sharma.com/briefing/fbi-flash-artex-1600-exposed-consoles-67000-people-2250-tenants-all-11-endnotes-are-other-publishers-what-the-fbi-says P.K. Sharma en 2026-11-14T09:57:38Z FBI ARTEX flash: 1,600 consoles, 67,000 people, 2,250 tenants; all 11 endnotes are other publishers' work https://www.pk-sharma.com/briefing/arara-second-report-about-77-million-email-addresses-97-customer-servers-what-arara-says-and-what-it-does-not P.K. Sharma en 2026-11-14T09:53:50Z Arara's second report puts its email service breach at about 77 million addresses on 97 customer servers https://www.pk-sharma.com/briefing/microsoft-says-sckit-worm-uses-hijacked-screenconnect-session-to-reach-it-technician-workstations P.K. Sharma en 2026-11-14T09:52:22Z Microsoft says the SCKit worm uses a hijacked ScreenConnect session to reach IT technicians' workstations https://www.pk-sharma.com/briefing/quantum-systems-nine-sentence-statement-names-no-route-relayed-report-names-an-update-file-what-the-company-says P.K. Sharma en 2026-11-14T09:48:38Z Quantum Systems' 9 sentence statement names no route; a relayed report names an update file https://www.pk-sharma.com/briefing/enea-silentair-telecom-signalling-interception-what-enea-says P.K. Sharma en 2026-11-13T17:44:34Z Enea says a new actor, SilentAir, intercepts calls and SMS through compromised mobile operator nodes https://www.pk-sharma.com/briefing/amd-sev-snp-bulletins-came-90-days-after-august-firmware-date-server-bios-fixes-due-nov-and-dec-what-amd-says P.K. Sharma en 2026-11-13T17:42:57Z AMD's SEV-SNP bulletins came 90 days after its August firmware date; server BIOS fixes due Nov and Dec https://www.pk-sharma.com/briefing/openai-chatgpt-wallet-agents-pay-with-a-token-not-the-card-what-openai-says-and-what-it-does-not P.K. Sharma en 2026-11-13T17:42:23Z OpenAI names 10 companies for ChatGPT Wallet; agents get a token, not the card, and sites may still decline https://www.pk-sharma.com/briefing/apify-says-compromised-credential-reached-related-accounts-incident-page-lists-no-exposed-data-fields P.K. Sharma en 2026-11-13T17:41:52Z Apify says a compromised credential reached related accounts; its incident page lists no exposed data fields https://www.pk-sharma.com/briefing/tsmc-113-word-sec-statement-says-employee-data-matches-a-cloud-providers-names-no-provider-no-count P.K. Sharma en 2026-11-13T17:41:11Z TSMC's 113 word SEC statement says employee data matches a cloud provider's; it names no provider, no count https://www.pk-sharma.com/briefing/material-security-says-27-of-2429-suspected-north-korean-it-worker-personas-reached-onboarding-in-a-year P.K. Sharma en 2026-11-13T12:51:25Z Material Security says 27 of 2,429 suspected North Korean IT-worker personas reached onboarding in a year https://www.pk-sharma.com/briefing/house-letters-subpoena-if-former-nvidia-ceo-and-general-counsel-do-not-accept-by-13-nov-what-the-committee-says P.K. Sharma en 2026-11-13T12:49:11Z House letters: subpoena if ex-Nvidia CEO and general counsel do not accept by 13 Nov; release says request https://www.pk-sharma.com/briefing/openrouter-ernie-5-5-flash-preview-listing-says-over-200-tokens-a-second-its-own-median-reads-74 P.K. Sharma en 2026-11-13T12:47:54Z OpenRouter's ERNIE-5.5-Flash-Preview listing says over 200 tokens a second; its own median reads 74 https://www.pk-sharma.com/briefing/proofpoint-says-european-phishing-rose-4-5-times-against-1-5-worldwide-but-prints-no-detection-counts P.K. Sharma en 2026-11-13T12:47:25Z Proofpoint says European phishing rose 4.5 times against 1.5 worldwide, but prints no detection counts https://www.pk-sharma.com/briefing/openai-daybreak-red-team-and-defense-factory-agents-test-web-apps-and-prepare-patches-what-openai-says P.K. Sharma en 2026-11-13T12:19:55Z OpenAI says Daybreak agents confirm web app flaws and draft patches; its text prints 0 numerals and no result https://www.pk-sharma.com/briefing/microsoft-365-outage-12-13-november-what-microsofts-status-page-says P.K. Sharma en 2026-11-13T12:19:51Z Outlets relay five Microsoft explanations of the 365 outage; its status page stated a cause only at 17:57 UTC https://www.pk-sharma.com/briefing/openai-control-room-tracks-and-stops-model-workloads-across-research-infrastructure-what-openai-says P.K. Sharma en 2026-11-13T12:19:46Z OpenAI says Control Room halts research model output within 35 seconds; scale, drills and audit not stated https://www.pk-sharma.com/briefing/europol-says-354-dark-web-arrests-in-operation-tornado-its-country-table-adds-to-353-what-europol-says P.K. Sharma en 2026-11-13T11:31:46Z Europol says 354 dark web arrests in Operation TorNado; its own country table adds to 353 https://www.pk-sharma.com/briefing/check-point-cve-2026-123039-gaia-root-flaw-exploited-with-php2shell-wiper-attacks-what-check-point-says P.K. Sharma en 2026-11-13T11:31:08Z Check Point says a 7.8 root flaw in Gaia was step two of gateway attacks that ended in a wiper https://www.pk-sharma.com/briefing/sans-diary-names-downthedrain-mac-stealer-0-of-3-hashes-in-the-huntress-post-it-cites-what-sans-says P.K. Sharma en 2026-11-13T07:34:32Z SANS diary names a Mac stealer DownTheDRAIN: 0 of its 3 file hashes appear in the Huntress post it cites https://www.pk-sharma.com/briefing/huntress-says-fake-teams-booking-page-showed-the-device-code-as-a-booking-reference-what-huntress-says P.K. Sharma en 2026-11-13T07:33:36Z Huntress says a fake Teams page showed the device code as a booking reference; its figure shows 8 steps https://www.pk-sharma.com/briefing/efficientip-says-5-keypresses-on-a-fake-zillow-page-start-a-netsupport-rat-install-it-confirms-no-victims P.K. Sharma en 2026-11-13T07:31:56Z EfficientIP says 5 keypresses on a fake Zillow page start a NetSupport RAT install; it confirms no victims https://www.pk-sharma.com/briefing/google-says-gemini-4-hydrogen-beats-argon-51-to-50-on-one-index-its-model-card-prints-no-cyber-figure P.K. Sharma en 2026-11-13T07:31:16Z Google says Gemini 4 Hydrogen beats Argon 51 to 50 on one index; its model card prints no cyber figure https://www.pk-sharma.com/briefing/postgresql-says-18-7-fixes-52-cves-32-rated-8-8-and-14-25-is-the-last-postgresql-14-release P.K. Sharma en 2026-11-13T07:30:27Z PostgreSQL says 18.7 fixes 52 CVEs, 32 of them rated 8.8, and 14.25 is the last PostgreSQL 14 release https://www.pk-sharma.com/briefing/fbi-flash-says-facestealer-relies-on-genuine-stolen-video-none-of-its-6-stages-names-super-intelligence P.K. Sharma en 2026-11-13T07:24:32Z FBI FLASH says FaceStealer relies on genuine stolen video: none of its 6 stages names super intelligence https://www.pk-sharma.com/briefing/doj-says-it-can-seize-or-restrain-over-1-2-billion-of-2-7-billion-frozen-after-binance-theft-what-doj-says P.K. Sharma en 2026-11-13T07:23:23Z DOJ says it can seize or restrain over $1.2 billion of the $2.7 billion frozen after the Binance theft https://www.pk-sharma.com/briefing/corelight-says-pinned-mcp-server-ran-15-dependency-sets-in-five-weeks-what-corelight-says P.K. Sharma en 2026-11-13T07:21:20Z Corelight says a pinned MCP server ran 15 dependency sets in five weeks; 23 of its 69 packages changed https://www.pk-sharma.com/briefing/nvidia-gives-no-reason-for-jensen-huang-resignation-4-days-after-its-board-said-it-had-confidence-what-nvidia-says P.K. Sharma en 2026-11-12T22:04:26Z Nvidia gives no reason for Jensen Huang's resignation, 4 days after its board said it had confidence in him