{"title":"Enterprise software advisories","description":"Microsoft, Oracle, SAP, Atlassian and other enterprise platforms: exploited flaws, fixes and what to check.","home":"https://vulnpocalypse.dev/feeds/","items":[{"id":"https://vulnpocalypse.dev/advisories/the420in-reports-microsoft-confirms-windows-11-november-2026-update-errors/","title":"The420.in reports Microsoft confirms Windows 11 November 2026 update errors","url":"https://vulnpocalypse.dev/advisories/the420in-reports-microsoft-confirms-windows-11-november-2026-update-errors/","date":"2026-11-12","summary":"The420.in reports Microsoft says some Windows 11 PCs fail to install KB5132061; an automatic fix is due within 48 hours, so wait for it.","tags":["ecosystem","endpoint","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/the-record-reports-hijacked-accounts-sent-european-bomb-hoax-emails/","title":"The Record reports hijacked accounts sent European bomb hoax emails","url":"https://vulnpocalypse.dev/advisories/the-record-reports-hijacked-accounts-sent-european-bomb-hoax-emails/","date":"2026-11-12","summary":"The Record reports European bomb hoax emails came from hijacked accounts, with no attribution; organizations should follow local police guidance.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/the-journal-reports-tusla-ceo-says-secure-care-demand-for-girls-is-rising/","title":"The Journal reports Tusla CEO says secure care demand for girls is rising","url":"https://vulnpocalypse.dev/advisories/the-journal-reports-tusla-ceo-says-secure-care-demand-for-girls-is-rising/","date":"2026-11-12","summary":"The Journal reports the Tusla chief executive says secure care demand is rising, no cyber incident is reported, no action needed.","tags":["ecosystem","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/n0n-ransomware-socradar-dark-web-profile-claims-details-unconfirmed/","title":"n0n ransomware: SOCRadar dark web profile claims, details unconfirmed","url":"https://vulnpocalypse.dev/advisories/n0n-ransomware-socradar-dark-web-profile-claims-details-unconfirmed/","date":"2026-11-12","summary":"SOCRadar reports a dark web profile of the n0n ransomware group; the retrieved text has no details, so victims are not confirmed.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/muji-operator-reportedly-apologizes-for-data-breach-databreachesnet-says/","title":"Muji operator reportedly apologizes for data breach, DataBreaches.net says","url":"https://vulnpocalypse.dev/advisories/muji-operator-reportedly-apologizes-for-data-breach-databreachesnet-says/","date":"2026-11-12","summary":"DataBreaches.net reports that the Muji operator apologized for a data breach; details are not confirmed, so watch official notices from the company.","tags":["breach","enterprise","web"]},{"id":"https://vulnpocalypse.dev/advisories/installed-building-products-discloses-cyber-incident-in-sec-8-k/","title":"Installed Building Products discloses cyber incident in SEC 8-K","url":"https://vulnpocalypse.dev/advisories/installed-building-products-discloses-cyber-incident-in-sec-8-k/","date":"2026-11-12","summary":"SEC EDGAR headline says Installed Building Products discloses a cyber incident in an 8-K; the exhibit shows no details, so read the filing.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/hudson-rock-reports-school-bomb-threat-sender-accounts-in-infostealer-data/","title":"Hudson Rock reports school bomb threat sender accounts in infostealer data","url":"https://vulnpocalypse.dev/advisories/hudson-rock-reports-school-bomb-threat-sender-accounts-in-infostealer-data/","date":"2026-11-12","summary":"Hudson Rock reports two university accounts tied to school bomb threats appear in old infostealer data; check and reset exposed credentials.","tags":["breach","endpoint","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/cccs-canada-reports-n-able-security-advisory-av26-1143/","title":"CCCS Canada reports N-able security advisory AV26-1143","url":"https://vulnpocalypse.dev/advisories/cccs-canada-reports-n-able-security-advisory-av26-1143/","date":"2026-11-12","summary":"CCCS Canada lists an N-able security advisory, AV26-1143; details are not confirmed, so check the N-able and CCCS notices.","tags":["ecosystem","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/cccs-canada-reports-fortinet-security-advisory-av26-1145/","title":"CCCS Canada reports Fortinet security advisory AV26-1145","url":"https://vulnpocalypse.dev/advisories/cccs-canada-reports-fortinet-security-advisory-av26-1145/","date":"2026-11-12","summary":"CCCS Canada lists Fortinet security advisory AV26-1145; details are not confirmed, so check the CCCS page and Fortinet products you run.","tags":["exploited","network-edge","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/study-of-65-hospital-cyberattacks-shows-impact-on-patient-care/","title":"Study of 65 hospital cyberattacks shows impact on patient care","url":"https://vulnpocalypse.dev/advisories/study-of-65-hospital-cyberattacks-shows-impact-on-patient-care/","date":"2026-11-12","summary":"The Health Management Academy logged 65 cyberattacks that disrupted U.S. hospital care; it urges tracking downtime, diversion and delays.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/turla-cereal-malware-hides-in-exchange-servers-to-steal-email/","title":"Turla Cereal malware hides in Exchange servers to steal email","url":"https://vulnpocalypse.dev/advisories/turla-cereal-malware-hides-in-exchange-servers-to-steal-email/","date":"2026-11-12","summary":"Russia-linked Turla uses new Cereal malware inside Exchange servers at two government bodies; hunt for ESET indicators of compromise.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/company-117-dental-insurer-claimed-by-n0n-ransomware-group-on-leak-site/","title":"Company #117 dental insurer claimed by n0n ransomware group on leak site","url":"https://vulnpocalypse.dev/advisories/company-117-dental-insurer-claimed-by-n0n-ransomware-group-on-leak-site/","date":"2026-11-12","summary":"The n0n ransomware group claims an unnamed US dental insurance firm on its leak site, per RansomLook; unconfirmed, so watch for official notices.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/airdrie-christian-academy-the-gentlemen-ransomware-group-claims-attack/","title":"Airdrie Christian Academy: The Gentlemen ransomware group claims attack","url":"https://vulnpocalypse.dev/advisories/airdrie-christian-academy-the-gentlemen-ransomware-group-claims-attack/","date":"2026-11-12","summary":"The Gentlemen ransomware group claims Airdrie Christian Academy on its leak site, per RansomLook, so watch for official notices from the school.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/vexy-ransomware-group-claims-jhamf-group-on-its-leak-site-per-ransomlook/","title":"Vexy ransomware group claims JHAMF Group on its leak site, per RansomLook","url":"https://vulnpocalypse.dev/advisories/vexy-ransomware-group-claims-jhamf-group-on-its-leak-site-per-ransomlook/","date":"2026-11-12","summary":"RansomLook reports the Vexy ransomware group listed Colombian IT firm JHAMF Group on its leak site; customers should watch for an official notice.","tags":["breach","enterprise","cloud"]},{"id":"https://vulnpocalypse.dev/advisories/coinbase-amplitude-vendor-incident/","title":"Coinbase customer contact and transaction data exposed in an incident at analytics vendor Amplitude","url":"https://vulnpocalypse.dev/advisories/coinbase-amplitude-vendor-incident/","date":"2026-11-12","summary":"An incident at analytics vendor Amplitude exposed contact and some transaction data of Coinbase customers. Coinbase says its systems and funds were not hit.","tags":["breach","crypto","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/danfoss-refrigeration-defrost-attack-france/","title":"Supermarket fridges hijacked across Europe: internet-exposed Danfoss, Copeland and Dixell controllers forced into defrost","url":"https://vulnpocalypse.dev/advisories/danfoss-refrigeration-defrost-attack-france/","date":"2026-11-12","summary":"On 11 Oct and 2 Nov 2026, attackers forced European supermarket fridges, and France's blood service, into defrost via exposed refrigeration controllers.","tags":["breach","network-edge","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/denmark-cpr-register-breach/","title":"Denmark CPR breach: 8.8 million names, addresses and CPR numbers pulled through one company's login","url":"https://vulnpocalypse.dev/advisories/denmark-cpr-register-breach/","date":"2026-11-12","summary":"Attackers used one firm's CPR access to pull names, addresses and CPR numbers of 8.8 million people in Sep 2026. A CPR number no longer proves identity.","tags":["breach","enterprise","web"]},{"id":"https://vulnpocalypse.dev/advisories/dmdc-pentagon-personnel-data-breach/","title":"Pentagon DMDC breach: SSNs of about 3 million people read from a file-sharing server for nine months","url":"https://vulnpocalypse.dev/advisories/dmdc-pentagon-personnel-data-breach/","date":"2026-11-12","summary":"A flaw in a Defense Manpower Data Center file-sharing system exposed unencrypted SSNs of about 3.05 million people with military ties, Oct 2025 to Jul 2026.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/bank-of-baroda-data-leak-2026/","title":"Bank of Baroda data leak: bank confirms employee email compromise after TripleX posts KYC and audit files","url":"https://vulnpocalypse.dev/advisories/bank-of-baroda-data-leak-2026/","date":"2026-11-12","summary":"Bank of Baroda says a compromised employee email account exposed \"certain data\" after TripleX posted files said to hold KYC and loan documents on 24 Jul 2026.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/check-point-vpn-cve-2026-50751/","title":"Check Point Remote Access VPN CVE-2026-50751: IKEv1 authentication bypass exploited since May 2026","url":"https://vulnpocalypse.dev/advisories/check-point-vpn-cve-2026-50751/","date":"2026-11-12","summary":"An IKEv1 flaw lets attackers open Check Point remote access VPN sessions with no password. Exploited since 7 May 2026. Install sk185033 or force IKEv2.","tags":["exploited","network-edge","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/beyondtrust-rs-pra-cve-2026-1731/","title":"BeyondTrust Remote Support and PRA CVE-2026-1731: pre-auth command injection exploited before disclosure and used by ransomware","url":"https://vulnpocalypse.dev/advisories/beyondtrust-rs-pra-cve-2026-1731/","date":"2026-11-12","summary":"Unauthenticated command injection in self-hosted BeyondTrust Remote Support and PRA, exploited since 31 Jan 2026. Patch to RS 25.3.2 or PRA 25.1.1 and hunt.","tags":["exploited","enterprise","network-edge"]},{"id":"https://vulnpocalypse.dev/advisories/windows-ad-rce-cve-2026-119948-per-cyber-security-news-report/","title":"Windows AD RCE CVE-2026-119948, per Cyber Security News report","url":"https://vulnpocalypse.dev/advisories/windows-ad-rce-cve-2026-119948-per-cyber-security-news-report/","date":"2026-11-11","summary":"Cyber Security News reports Microsoft patched an Active Directory RCE, CVE-2026-119948; it says to check the KB for each Windows system.","tags":["exploited","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/the-hop-transit-district-data-breach-customer-data-may-be-copied/","title":"The Hop transit district data breach: customer data may be copied","url":"https://vulnpocalypse.dev/advisories/the-hop-transit-district-data-breach-customer-data-may-be-copied/","date":"2026-11-11","summary":"Hill Country Transit District, The Hop, says customer data may have been copied after July 10 network activity; check for a mailed notice.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/synology-discloses-dsm-flaws-incl-critical-cve-2026-76954/","title":"Synology discloses DSM flaws incl. critical CVE-2026-76954","url":"https://vulnpocalypse.dev/advisories/synology-discloses-dsm-flaws-incl-critical-cve-2026-76954/","date":"2026-11-11","summary":"Synology says DSM updates fix multiple flaws, including a critical Auth API one; affected DSM owners should upgrade to the fixed builds.","tags":["exploited","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/signdrop-windows-clfs-exploit-researcher-claims-system-access-no-patch/","title":"SignDrop Windows CLFS exploit: researcher claims SYSTEM access, no patch","url":"https://vulnpocalypse.dev/advisories/signdrop-windows-clfs-exploit-researcher-claims-system-access-no-patch/","date":"2026-11-11","summary":"Cyber Security News reports a researcher claims SignDrop gives Windows SYSTEM via CLFS; no CVE or patch, so limit local code execution.","tags":["exploited","endpoint","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/securityweek-reports-intel-and-amd-addressed-over-200-flaws/","title":"SecurityWeek reports Intel and AMD addressed over 200 flaws","url":"https://vulnpocalypse.dev/advisories/securityweek-reports-intel-and-amd-addressed-over-200-flaws/","date":"2026-11-11","summary":"SecurityWeek reports Intel and AMD published over 50 advisories covering over 200 flaws; check vendor advisories and apply available updates.","tags":["exploited","endpoint","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/securityweek-reports-dreeze-raises-33m-for-cloud-app-recovery/","title":"SecurityWeek reports Dreeze raises $33M for cloud app recovery","url":"https://vulnpocalypse.dev/advisories/securityweek-reports-dreeze-raises-33m-for-cloud-app-recovery/","date":"2026-11-11","summary":"SecurityWeek reports Dreeze says it raised $33 million for cloud app recovery; no flaw is reported, so no patching is needed.","tags":["ecosystem","cloud","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/ransomlook-reports-dark-project-group-claims-bear-valley-community-hospital/","title":"RansomLook reports dark project group claims Bear Valley Community Hospital","url":"https://vulnpocalypse.dev/advisories/ransomlook-reports-dark-project-group-claims-bear-valley-community-hospital/","date":"2026-11-11","summary":"RansomLook says dark project lists Bear Valley Community Hospital on its leak site; unconfirmed, so rely on official hospital notices.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/qilin-ransomware-claims-365-victims-krebs-reports-admin-clues/","title":"Qilin ransomware claims 365 victims; Krebs reports admin clues","url":"https://vulnpocalypse.dev/advisories/qilin-ransomware-claims-365-victims-krebs-reports-admin-clues/","date":"2026-11-11","summary":"Krebs reports Qilin claims 365 victims in three months and links its admin to a St. Petersburg man; unconfirmed. Review ransomware defenses.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/projectdiscovery-says-big-firms-shelve-unverified-vulnerability-findings/","title":"ProjectDiscovery says big firms shelve unverified vulnerability findings","url":"https://vulnpocalypse.dev/advisories/projectdiscovery-says-big-firms-shelve-unverified-vulnerability-findings/","date":"2026-11-11","summary":"Help Net Security reports ProjectDiscovery found nearly half of large firms close unverified findings; verify before you close them.","tags":["exploited","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/premise-health-discloses-insider-patient-data-theft-per-hipaa-journal/","title":"Premise Health discloses insider patient data theft, per HIPAA Journal","url":"https://vulnpocalypse.dev/advisories/premise-health-discloses-insider-patient-data-theft-per-hipaa-journal/","date":"2026-11-11","summary":"HIPAA Journal reports Premise Health says a former employee copied patient data; affected people should read any notice they receive and act on it.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/palo-alto-says-prisma-browser-needs-chromium-fixes-pan-sa-2026-0014/","title":"Palo Alto says Prisma Browser needs Chromium fixes (PAN-SA-2026-0014)","url":"https://vulnpocalypse.dev/advisories/palo-alto-says-prisma-browser-needs-chromium-fixes-pan-sa-2026-0014/","date":"2026-11-11","summary":"Palo Alto Networks says Prisma Browser builds below 157.19.4.39 lack Chromium fixes; it reports no exploitation. Update Prisma Browser.","tags":["exploited","enterprise","endpoint"]},{"id":"https://vulnpocalypse.dev/advisories/palo-alto-networks-discloses-cve-2026-0330-panorama-pan-os-rce-flaw/","title":"Palo Alto Networks discloses CVE-2026-0330 Panorama PAN-OS RCE flaw","url":"https://vulnpocalypse.dev/advisories/palo-alto-networks-discloses-cve-2026-0330-panorama-pan-os-rce-flaw/","date":"2026-11-11","summary":"Palo Alto Networks says CVE-2026-0330 lets an authenticated Panorama admin run code as root; upgrade to a fixed PAN-OS version.","tags":["exploited","enterprise","network-edge"]},{"id":"https://vulnpocalypse.dev/advisories/palo-alto-discloses-pan-os-information-disclosure-flaw-cve-2026-0331/","title":"Palo Alto discloses PAN-OS information disclosure flaw CVE-2026-0331","url":"https://vulnpocalypse.dev/advisories/palo-alto-discloses-pan-os-information-disclosure-flaw-cve-2026-0331/","date":"2026-11-11","summary":"Palo Alto Networks says PAN-OS flaw CVE-2026-0331 can leak firewall and session data to unauthenticated attackers; upgrade to a fixed build.","tags":["exploited","network-edge","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/palo-alto-discloses-pan-os-buffer-overflow-cve-2026-0326/","title":"Palo Alto discloses PAN-OS buffer overflow CVE-2026-0326","url":"https://vulnpocalypse.dev/advisories/palo-alto-discloses-pan-os-buffer-overflow-cve-2026-0326/","date":"2026-11-11","summary":"Palo Alto Networks says PAN-OS CVE-2026-0326 is a buffer overflow in SCTP, DNS proxy or OSPFv3 handling, so upgrade to a fixed version.","tags":["exploited","network-edge","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/kaspersky-reports-citrus-ransomware-using-vless-tunnels-and-sn00py/","title":"Kaspersky reports Citrus ransomware using VLESS tunnels and Sn00py","url":"https://vulnpocalypse.dev/advisories/kaspersky-reports-citrus-ransomware-using-vless-tunnels-and-sn00py/","date":"2026-11-11","summary":"Kaspersky reports Citrus ransomware group uses VLESS tunnels and Sn00py; review contractor VPN and RDP access and GHOST machine accounts.","tags":["breach","enterprise","endpoint"]},{"id":"https://vulnpocalypse.dev/advisories/iverify-reports-leaked-darksword-and-coruna-kits-hit-employee-iphones/","title":"iVerify reports leaked DarkSword and Coruna kits hit employee iPhones","url":"https://vulnpocalypse.dev/advisories/iverify-reports-leaked-darksword-and-coruna-kits-hit-employee-iphones/","date":"2026-11-11","summary":"Help Net Security reports iVerify says leaked DarkSword and Coruna kits infect employee iPhones; check iOS versions and work access.","tags":["exploited","endpoint","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/ians-reports-france-blames-iran-for-supermarket-cyberattack-iran-denies/","title":"IANS reports France blames Iran for supermarket cyberattack; Iran denies","url":"https://vulnpocalypse.dev/advisories/ians-reports-france-blames-iran-for-supermarket-cyberattack-iran-denies/","date":"2026-11-11","summary":"IANS reports France says Iran's IRGC hit supermarket refrigeration systems; Iran denies it. Technical details not confirmed. Await official details.","tags":["ecosystem","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/hkcert-reports-multiple-mongodb-vulnerabilities-vendor-fixes-advised/","title":"HKCERT reports multiple MongoDB vulnerabilities, vendor fixes advised","url":"https://vulnpocalypse.dev/advisories/hkcert-reports-multiple-mongodb-vulnerabilities-vendor-fixes-advised/","date":"2026-11-11","summary":"HKCERT reports multiple MongoDB vulnerabilities rated medium risk; check MongoDB's security alerts page and apply vendor fixes.","tags":["exploited","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/hkcert-reports-multiple-fortinet-product-vulnerabilities-medium-risk/","title":"HKCERT reports multiple Fortinet product vulnerabilities (medium risk)","url":"https://vulnpocalypse.dev/advisories/hkcert-reports-multiple-fortinet-product-vulnerabilities-medium-risk/","date":"2026-11-11","summary":"HKCERT reports multiple Fortinet product vulnerabilities rated medium risk; check the Fortinet PSIRT advisories and apply vendor fixes.","tags":["exploited","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/hkcert-reports-adobe-november-2026-security-update-for-nine-products/","title":"HKCERT reports Adobe November 2026 security update for nine products","url":"https://vulnpocalypse.dev/advisories/hkcert-reports-adobe-november-2026-security-update-for-nine-products/","date":"2026-11-11","summary":"HKCERT reports Adobe released its November 2026 monthly update covering nine products rated Medium; apply the vendor fixes.","tags":["exploited","endpoint","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/help-net-security-reports-enisa-45-of-surveyed-eu-it-providers-patch-slowly/","title":"Help Net Security reports ENISA: 45% of surveyed EU IT providers patch slowly","url":"https://vulnpocalypse.dev/advisories/help-net-security-reports-enisa-45-of-surveyed-eu-it-providers-patch-slowly/","date":"2026-11-11","summary":"Help Net Security reports ENISA's 2026 assessment says 45% of surveyed EU IT service providers took over three months to patch; check supplier SLAs.","tags":["supply-chain","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/deadlock-ransomware-group-claims-attack-on-kadick-per-ransomlook/","title":"Deadlock ransomware group claims attack on Kadick, per RansomLook","url":"https://vulnpocalypse.dev/advisories/deadlock-ransomware-group-claims-attack-on-kadick-per-ransomlook/","date":"2026-11-11","summary":"RansomLook reports the deadlock ransomware group lists Kadick on its leak site; the claim is unconfirmed, so watch for an official statement.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/databreachesnet-reports-rural-hospital-cyber-incident-with-17-days-of-access/","title":"DataBreaches.net reports rural hospital cyber incident with 17 days of access","url":"https://vulnpocalypse.dev/advisories/databreachesnet-reports-rural-hospital-cyber-incident-with-17-days-of-access/","date":"2026-11-11","summary":"DataBreaches.net reports a rural hospital cyber incident with 17 days of unseen access; details are unconfirmed, so monitor for official updates.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/databreachesnet-reports-cyberattack-on-fullerton-health-server/","title":"DataBreaches.net reports cyberattack on Fullerton Health server","url":"https://vulnpocalypse.dev/advisories/databreachesnet-reports-cyberattack-on-fullerton-health-server/","date":"2026-11-11","summary":"DataBreaches.net reports a Fullerton Health server was hit by a cyberattack affecting migrant workers' data; details are unconfirmed, so monitor official","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/databreachesnet-reports-26-million-cyber-heist-in-a-new-jersey-town/","title":"DataBreaches.net reports $26 million cyber heist in a New Jersey town","url":"https://vulnpocalypse.dev/advisories/databreachesnet-reports-26-million-cyber-heist-in-a-new-jersey-town/","date":"2026-11-11","summary":"DataBreaches.net reports a $26 million cyber heist in a small New Jersey town; details are unconfirmed, so monitor official statements from the town.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/dark-project-ransomware-group-claims-attack-on-mtmo-gold-refinery-dmcc/","title":"Dark Project ransomware group claims attack on MTM&O Gold Refinery DMCC","url":"https://vulnpocalypse.dev/advisories/dark-project-ransomware-group-claims-attack-on-mtmo-gold-refinery-dmcc/","date":"2026-11-11","summary":"RansomLook reports the dark project group claims MTM&O Gold Refinery DMCC on its leak site; no victim response is confirmed, so monitor.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/curious-worm-ransomware-group-claims-attack-on-atlashpcom/","title":"Curious Worm ransomware group claims attack on atlashp.com","url":"https://vulnpocalypse.dev/advisories/curious-worm-ransomware-group-claims-attack-on-atlashpcom/","date":"2026-11-11","summary":"RansomLook reports the curious worm ransomware group claimed atlashp.com on its leak site; no confirmation was found in the sources, so monitor.","tags":["breach","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/cloudsek-reports-exposed-silent-lynx-server-tied-to-central-asia-espionage/","title":"CloudSEK reports exposed Silent Lynx server tied to Central Asia espionage","url":"https://vulnpocalypse.dev/advisories/cloudsek-reports-exposed-silent-lynx-server-tied-to-central-asia-espionage/","date":"2026-11-11","summary":"CloudSEK reports an exposed Silent Lynx server tied to Central Asia espionage; defenders there can check logs for the listed IP address.","tags":["ai-tools","enterprise","ai-tools"]},{"id":"https://vulnpocalypse.dev/advisories/cisco-broadworks-cve-2026-20320-and-openwave-flaw-added-to-cisa-kev/","title":"Cisco BroadWorks CVE-2026-20320 and Openwave flaw added to CISA KEV","url":"https://vulnpocalypse.dev/advisories/cisco-broadworks-cve-2026-20320-and-openwave-flaw-added-to-cisa-kev/","date":"2026-11-11","summary":"CISA added exploited Cisco BroadWorks and Openwave flaws to its KEV list; patch now, federal deadline is November 24, 2026.","tags":["exploited","enterprise"]}]}