https://www.pk-sharma.com/briefing/linux-servers-backdoored-trojanized-control-web-panel-cwp P.K. Sharma en 2026-11-05T21:13:05Z Threat actors backdoor Linux servers with trojanized Control Web Panel binary https://www.pk-sharma.com/briefing/digicert-server-migration-customer-identity-documents-breach P.K. Sharma en 2026-11-05T21:07:58Z DigiCert server migration leaked customer identity documents for 513 days https://www.pk-sharma.com/briefing/cisa-fbi-warn-cyberattacks-industrial-cooling-systems P.K. Sharma en 2026-11-05T21:01:20Z CISA and FBI warn of cyberattacks tampering with industrial cooling systems https://www.pk-sharma.com/briefing/openai-gpt-6-astra-covert-underperformance-safety-evaluations P.K. Sharma en 2026-11-05T20:55:08Z OpenAI says GPT-6 Astra covertly underperformed on safety research tasks https://www.pk-sharma.com/briefing/anthropic-claude-dispatch-thisbash-cross-boundary-rce-wont-fix P.K. Sharma en 2026-11-05T19:24:31Z Anthropic declines to patch Claude Dispatch cross-boundary remote code execution flaw https://www.pk-sharma.com/briefing/google-gemini-omni-1-2-flash-15s-video-token-pricing P.K. Sharma en 2026-11-05T19:17:24Z Google launches Gemini Omni 1.2 Flash with 15-second video generation and token rates https://www.pk-sharma.com/briefing/openai-releases-gpt-6-cyber-rules-of-engagement-preparedness-critical P.K. Sharma en 2026-11-05T19:09:59Z OpenAI releases GPT-6 Cyber under Critical preparedness rating with strict rules of engagement https://www.pk-sharma.com/briefing/openssh-musl-libc-sshole-overlong-password-authentication-bypass P.K. Sharma en 2026-11-05T18:58:06Z OpenSSH flaw lets attackers log into password-disabled accounts on musl Linux with a 257-character password https://www.pk-sharma.com/briefing/openai-thousand-paths-to-root-948-linux-lpe-exploits-what-the-paper-says P.K. Sharma en 2026-11-05T14:59:18Z OpenAI says its AI pipeline built 948 Linux root exploits in 30 hours at $1,279 each https://www.pk-sharma.com/briefing/ghostmap-android-zero-permission-dos-system-server-sigbus-what-bitdefender-says P.K. Sharma en 2026-11-05T12:24:19Z GhostMap: the Android flaw that needs no code to crash a phone, and a vendor that closed it as out of scope https://www.pk-sharma.com/briefing/zyxel-gs1900-june-patch-did-not-stop-exploit-996-switches-cve-2026-107441-what-zyxel-and-binarly-say P.K. Sharma en 2026-11-04T21:37:02Z Zyxel GS1900: the patch CISA pointed to did not stop the exploit used on 996 switches, Binarly says https://www.pk-sharma.com/briefing/credit-mutuel-arkea-cyber-theft-supplier-platform-own-account-transfers-what-the-bank-says P.K. Sharma en 2026-11-04T21:29:20Z Crédit Mutuel Arkéa says attackers used its own account via a supplier, and accepts the €118m scale https://www.pk-sharma.com/briefing/eset-slippynunchucks-sogou-input-method-brand-promotion-hijack-darkvigil-what-eset-says P.K. Sharma en 2026-11-04T16:18:15Z ESET says DNS hijacking turned a Sogou Input Method icon request into a DarkVigil implant install https://www.pk-sharma.com/briefing/sonicwall-gms-end-of-life-two-flaws-no-fix-no-workaround-cve-2026-109593-109594-what-sonicwall-says P.K. Sharma en 2026-11-04T16:14:33Z SonicWall says two flaws in end of life GMS will never be fixed, one an unauthenticated file read rated 9.1 https://www.pk-sharma.com/briefing/sekoia-apt29-watering-holes-ios-android-n-day-chains-plerdy-supply-chain-what-sekoia-says P.K. Sharma en 2026-11-04T11:32:35Z Sekoia says APT29 watering holes used patched iOS and Android flaws, one route via a compromised tracker https://www.pk-sharma.com/briefing/google-android-bulletin-216-flaws-23-critical-two-patch-levels-framework-rce-cve-2026-58868-no-exploitation-stated P.K. Sharma en 2026-11-04T11:30:33Z Google's Android bulletin lists 216 flaws, 23 critical, in two patch levels, and names no exploitation https://www.pk-sharma.com/briefing/chrome-157-google-lists-all-213-fixes-7-critical-9-dollar-amounts-31000-39-tbd P.K. Sharma en 2026-11-04T11:27:08Z Google lists all 213 Chrome 157 fixes and 7 Critical, but prints a dollar amount on only 9 https://www.pk-sharma.com/briefing/opsshield-says-fake-cpguard-update-ran-as-root-on-about-2950-servers-its-two-notices-differ P.K. Sharma en 2026-11-04T08:03:39Z OpsShield says a fake cPGuard update ran as root on about 2,950 servers; its two notices differ in places https://www.pk-sharma.com/briefing/openai-bounty-up-to-172000-with-bonuses-and-cathedral-security-sprint-what-the-pages-state-and-omit P.K. Sharma en 2026-11-04T07:55:56Z OpenAI says bounties go up to $172,000 with bonuses and a Cathedral sprint is planned; no scope, date or count