https://www.pk-sharma.com/briefing/dr-web-poisoned-github-security-tools-2000-pcs-what-dr-web-says P.K. Sharma en 2026-11-07T18:31:22Z Dr.Web says poisoned GitHub security tools now target defenders; 2,000+ PCs infected, no victim split stated https://www.pk-sharma.com/briefing/push-security-fake-openai-spacex-anthropic-event-pages-kali365-voidproxy-what-push-says P.K. Sharma en 2026-11-07T18:31:17Z Push says fake OpenAI, SpaceX and Anthropic event pages phish work logins by device code and by proxy https://www.pk-sharma.com/briefing/ibm-api-connect-208-cve-records-47-critical-54-no-login-fixed-12-1-1-3-10-0-8-13-what-ibm-says P.K. Sharma en 2026-11-07T16:52:56Z IBM API Connect gets 208 CVE records in a day, 47 critical and 54 needing no login: what IBM says https://www.pk-sharma.com/briefing/claude-code-dont-ask-again-settings-local-json-secrets-on-github-what-apiiro-says P.K. Sharma en 2026-11-07T16:46:40Z Apiiro says Claude Code's "don't ask again" left real secrets in 1,122 public settings files on GitHub https://www.pk-sharma.com/briefing/norad-grants-portal-breach-27-accounts-20614-users-what-norad-says P.K. Sharma en 2026-11-07T16:44:24Z Norad says 27 abused logins opened its Grants Portal and may have exposed 20,614 users' names and emails https://www.pk-sharma.com/briefing/check-point-ten-exposed-artex-consoles-crime-on-autopilot-deepseek-flash-most-used-what-check-point-says P.K. Sharma en 2026-11-07T12:13:27Z Check Point says ten leaky ARTEX consoles show crime on autopilot, with DeepSeek Flash the most used model https://www.pk-sharma.com/briefing/chatgpt-lockdown-mode-bypass-chat-history-exfiltration-phishing-malware-what-check-point-says P.K. Sharma en 2026-11-07T12:10:08Z Check Point says a ChatGPT HTML preview popup got past Lockdown Mode, with zero clicks in ChatGPT Classic https://www.pk-sharma.com/briefing/microsoft-storm-3358-artex-financial-sector-cambodia-cluster-what-microsoft-says P.K. Sharma en 2026-11-07T10:59:24Z Microsoft says a Cambodia based cluster took ARTEX to finance; its query and table disagree on one address https://www.pk-sharma.com/briefing/workos-update-researcher-artex-agent-escaped-sandbox-four-gaps-weak-dev-credential-what-workos-says P.K. Sharma en 2026-11-07T10:58:48Z WorkOS says a researcher's ARTEX agent escaped its sandbox and got in through four ordinary gaps https://www.pk-sharma.com/briefing/sonicwall-sonicos-ssl-vpn-saml-mfa-bypass-cve-2026-19868-exploited-what-sonicwall-says P.K. Sharma en 2026-11-07T10:52:17Z SonicWall says valid logins for another method can skip SAML MFA on SonicOS SSL-VPN; CISA lists it exploited https://www.pk-sharma.com/briefing/eu-charges-tiktok-digital-services-act-addictive-design P.K. Sharma en 2026-11-06T17:16:23Z EU Formally Charges TikTok Under Digital Services Act Over Algorithmic Harm https://www.pk-sharma.com/briefing/bank-phishing-fake-account-suspended-cloaking-evasion P.K. Sharma en 2026-11-06T17:09:55Z Bank Phishing Networks Deploy Fake Account Suspended Notices to Evade Takedowns https://www.pk-sharma.com/briefing/veeam-software-appliance-amd-epyc-fips-kernel-panic P.K. Sharma en 2026-11-06T17:02:18Z Veeam warns Software Appliance fails to boot on AMD EPYC hosts https://www.pk-sharma.com/briefing/beget-cloud-hosting-wiper-attack-vps-backups-destroyed P.K. Sharma en 2026-11-06T14:40:11Z Destructive wiper attack on Russian host Beget destroys cloud VPS and disk backups https://www.pk-sharma.com/briefing/russia-us-block-un-autonomous-weapons-treaty-geneva P.K. Sharma en 2026-11-06T14:27:04Z Russia and US move to block legally binding UN treaty on autonomous weapons https://www.pk-sharma.com/briefing/metamask-validator-reward-routing-diversion-security-incident P.K. Sharma en 2026-11-06T14:19:01Z MetaMask discloses staking infrastructure intrusion diverting execution-layer rewards https://www.pk-sharma.com/briefing/ahold-delhaize-estimates-quarterly-toll-october-cyberattack P.K. Sharma en 2026-11-06T14:09:24Z Ahold Delhaize estimates cyberattack will erase up to €250 million in fourth quarter sales https://www.pk-sharma.com/briefing/microsoft-paint-rce-cve-2026-83844-store-only-patching-gap P.K. Sharma en 2026-11-06T14:03:06Z Microsoft Store patch for Paint RCE CVE-2026-83844 bypasses Windows Update https://www.pk-sharma.com/briefing/censys-artex-offensive-ai-agent-global-infrastructure-sprawl P.K. Sharma en 2026-11-06T13:55:06Z Censys detects 1,465 exposed ARTEX autonomous AI offensive consoles across global internet https://www.pk-sharma.com/briefing/uk-ministers-seek-statutory-powers-investigate-autonomous-ai-agents P.K. Sharma en 2026-11-06T13:22:25Z UK ministers seek statutory powers to investigate autonomous AI agents let off the leash https://www.pk-sharma.com/briefing/openssh-sshole-cve-2026-123158-exploited-in-the-wild-honeypots P.K. Sharma en 2026-11-06T13:16:05Z OpenSSH sshole flaw exploited in the wild within nine hours as honeypot yields root access https://www.pk-sharma.com/briefing/dlink-warns-unpatched-zero-days-dgs3130-stackable-switches P.K. Sharma en 2026-11-06T13:10:23Z D-Link warns of multiple unpatched zero-days in enterprise DGS-3130 stackable managed switches https://www.pk-sharma.com/briefing/chainalysis-all-user-credentials-tokens-exposed-kyt-reactor-offline P.K. Sharma en 2026-11-06T13:03:13Z Chainalysis confirms universal credential exposure and shuts down compliance services following agentic… https://www.pk-sharma.com/briefing/truffle-security-1-4-million-secrets-revocation-program P.K. Sharma en 2026-11-06T10:47:27Z Truffle Security launches revocation program for 1.4 million live exposed secrets https://www.pk-sharma.com/briefing/microsoft-threat-actors-agentic-ai-cloud-secrets-exfiltration P.K. Sharma en 2026-11-06T10:40:09Z Microsoft warns threat actors weaponize agentic AI to breach cloud secrets in five minutes https://www.pk-sharma.com/briefing/layer3-intel-residential-proxies-white-house-network-as2650 P.K. Sharma en 2026-11-06T10:32:09Z Layer3 Intel detects 28 residential proxy networks exiting from White House AS2650 https://www.pk-sharma.com/briefing/cert-in-warns-crafty-falcon-ai-agent-financial-attacks P.K. Sharma en 2026-11-06T10:24:24Z CERT-In warns of CRAFTY FALCON AI financial attacks siphoning payment APIs https://www.pk-sharma.com/briefing/linux-servers-backdoored-trojanized-control-web-panel-cwp P.K. Sharma en 2026-11-05T21:13:05Z Threat actors backdoor Linux servers with trojanized Control Web Panel binary https://www.pk-sharma.com/briefing/digicert-server-migration-customer-identity-documents-breach P.K. Sharma en 2026-11-05T21:07:58Z DigiCert server migration leaked customer identity documents for 513 days https://www.pk-sharma.com/briefing/cisa-fbi-warn-cyberattacks-industrial-cooling-systems P.K. Sharma en 2026-11-05T21:01:20Z CISA and FBI warn of cyberattacks tampering with industrial cooling systems https://www.pk-sharma.com/briefing/openai-gpt-6-astra-covert-underperformance-safety-evaluations P.K. Sharma en 2026-11-05T20:55:08Z OpenAI says GPT-6 Astra covertly underperformed on safety research tasks