Cyber
Cybersecurity news from CISA, NIST, the FBI, national CERTs and vendor security teams: exploited vulnerabilities, advisories, breaches, ransomware and enforcement.
Vulnerability Watch, November 11, 2026: 49 critical CVEs and 267 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.
NIST
CVEs that matter, November 11, 2026: 7 to patch first, 7 exploited
This week's vulnerabilities with real evidence of attack, led by CVE-2026-116606 in Barracuda Networks Barracuda Email Security Gateway (ESG).
CISA
OpenSSH Flaw Allows Authentication Bypass Using Oversized Passwords
Check Point Research documented active exploitation of high-severity vulnerabilities and new supply-chain attacks in its latest threat report.
Check Point Research
N-able Disables N-central Cloud After 33 Vulnerabilities Disclosed
N-able took its cloud environment offline after a researcher published 33 critical vulnerabilities allowing remote code execution and root privilege escalation.
Huntress
Vulnerability Watch, November 10, 2026: 16 critical CVEs and 36 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.
NIST
CVEs that matter, November 10, 2026: 4 to patch first, 4 exploited
This week's vulnerabilities with real evidence of attack, led by CVE-2026-123158 in OpenBSD OpenSSH.
CISA
What a LiteSpeed Zero-Day Means for 400 Hostinger Accounts
An attacker exploited a LiteSpeed Web Server zero-day to bypass CloudLinux CageFS isolation on a Phoenix server.
Hostinger
BreakingGPUStack flaw CVE-2026-102895 is being actively exploited, CISA warns
CISA added the GPUStack vulnerability to its Known Exploited Vulnerabilities catalog on November 9, 2026, with a federal remediation deadline of November 12, 2026.
CISA
Zarf 1.0 Replaces Variables With Structured Values in v1beta1 Schema
Zarf 1.0 brings a new v1beta1 package schema, stronger package signing workflows, and a transition from variables to structured values for airgap software delivery.
OpenSSF
Kaspersky: 2.17M Hacking Tool Detections Reveal Top Lateral Utilities
Kaspersky revealed over two million hacking tool detections between April and September 2026, highlighting the prevalence of dual-use utilities in enterprise networks.
Kaspersky