https://vulnpocalypse.dev/feeds/Microsoft, Oracle, SAP, Atlassian and other enterprise platforms: exploited flaws, fixes and what to check.enThu, 12 Nov 2026 16:59:02 +0000https://vulnpocalypse.dev/advisories/the420in-reports-microsoft-confirms-windows-11-november-2026-update-errors/https://vulnpocalypse.dev/advisories/the420in-reports-microsoft-confirms-windows-11-november-2026-update-errors/Thu, 12 Nov 2026 12:00:00 +0000The420.in reports Microsoft says some Windows 11 PCs fail to install KB5132061; an automatic fix is due within 48 hours, so wait for it.ecosystemendpointenterprisehttps://vulnpocalypse.dev/advisories/the-record-reports-hijacked-accounts-sent-european-bomb-hoax-emails/https://vulnpocalypse.dev/advisories/the-record-reports-hijacked-accounts-sent-european-bomb-hoax-emails/Thu, 12 Nov 2026 12:00:00 +0000The Record reports European bomb hoax emails came from hijacked accounts, with no attribution; organizations should follow local police guidance.breachenterprisehttps://vulnpocalypse.dev/advisories/the-journal-reports-tusla-ceo-says-secure-care-demand-for-girls-is-rising/https://vulnpocalypse.dev/advisories/the-journal-reports-tusla-ceo-says-secure-care-demand-for-girls-is-rising/Thu, 12 Nov 2026 12:00:00 +0000The Journal reports the Tusla chief executive says secure care demand is rising, no cyber incident is reported, no action needed.ecosystementerprisehttps://vulnpocalypse.dev/advisories/n0n-ransomware-socradar-dark-web-profile-claims-details-unconfirmed/https://vulnpocalypse.dev/advisories/n0n-ransomware-socradar-dark-web-profile-claims-details-unconfirmed/Thu, 12 Nov 2026 12:00:00 +0000SOCRadar reports a dark web profile of the n0n ransomware group; the retrieved text has no details, so victims are not confirmed.breachenterprisehttps://vulnpocalypse.dev/advisories/muji-operator-reportedly-apologizes-for-data-breach-databreachesnet-says/https://vulnpocalypse.dev/advisories/muji-operator-reportedly-apologizes-for-data-breach-databreachesnet-says/Thu, 12 Nov 2026 12:00:00 +0000DataBreaches.net reports that the Muji operator apologized for a data breach; details are not confirmed, so watch official notices from the company.breachenterprisewebhttps://vulnpocalypse.dev/advisories/installed-building-products-discloses-cyber-incident-in-sec-8-k/https://vulnpocalypse.dev/advisories/installed-building-products-discloses-cyber-incident-in-sec-8-k/Thu, 12 Nov 2026 12:00:00 +0000SEC EDGAR headline says Installed Building Products discloses a cyber incident in an 8-K; the exhibit shows no details, so read the filing.breachenterprisehttps://vulnpocalypse.dev/advisories/hudson-rock-reports-school-bomb-threat-sender-accounts-in-infostealer-data/https://vulnpocalypse.dev/advisories/hudson-rock-reports-school-bomb-threat-sender-accounts-in-infostealer-data/Thu, 12 Nov 2026 12:00:00 +0000Hudson Rock reports two university accounts tied to school bomb threats appear in old infostealer data; check and reset exposed credentials.breachendpointenterprisehttps://vulnpocalypse.dev/advisories/cccs-canada-reports-n-able-security-advisory-av26-1143/https://vulnpocalypse.dev/advisories/cccs-canada-reports-n-able-security-advisory-av26-1143/Thu, 12 Nov 2026 12:00:00 +0000CCCS Canada lists an N-able security advisory, AV26-1143; details are not confirmed, so check the N-able and CCCS notices.ecosystementerprisehttps://vulnpocalypse.dev/advisories/cccs-canada-reports-fortinet-security-advisory-av26-1145/https://vulnpocalypse.dev/advisories/cccs-canada-reports-fortinet-security-advisory-av26-1145/Thu, 12 Nov 2026 12:00:00 +0000CCCS Canada lists Fortinet security advisory AV26-1145; details are not confirmed, so check the CCCS page and Fortinet products you run.exploitednetwork-edgeenterprisehttps://vulnpocalypse.dev/advisories/study-of-65-hospital-cyberattacks-shows-impact-on-patient-care/https://vulnpocalypse.dev/advisories/study-of-65-hospital-cyberattacks-shows-impact-on-patient-care/Thu, 12 Nov 2026 12:00:00 +0000The Health Management Academy logged 65 cyberattacks that disrupted U.S. hospital care; it urges tracking downtime, diversion and delays.breachenterprisehttps://vulnpocalypse.dev/advisories/turla-cereal-malware-hides-in-exchange-servers-to-steal-email/https://vulnpocalypse.dev/advisories/turla-cereal-malware-hides-in-exchange-servers-to-steal-email/Thu, 12 Nov 2026 12:00:00 +0000Russia-linked Turla uses new Cereal malware inside Exchange servers at two government bodies; hunt for ESET indicators of compromise.breachenterprisehttps://vulnpocalypse.dev/advisories/company-117-dental-insurer-claimed-by-n0n-ransomware-group-on-leak-site/https://vulnpocalypse.dev/advisories/company-117-dental-insurer-claimed-by-n0n-ransomware-group-on-leak-site/Thu, 12 Nov 2026 12:00:00 +0000The n0n ransomware group claims an unnamed US dental insurance firm on its leak site, per RansomLook; unconfirmed, so watch for official notices.breachenterprisehttps://vulnpocalypse.dev/advisories/airdrie-christian-academy-the-gentlemen-ransomware-group-claims-attack/https://vulnpocalypse.dev/advisories/airdrie-christian-academy-the-gentlemen-ransomware-group-claims-attack/Thu, 12 Nov 2026 12:00:00 +0000The Gentlemen ransomware group claims Airdrie Christian Academy on its leak site, per RansomLook, so watch for official notices from the school.breachenterprisehttps://vulnpocalypse.dev/advisories/vexy-ransomware-group-claims-jhamf-group-on-its-leak-site-per-ransomlook/https://vulnpocalypse.dev/advisories/vexy-ransomware-group-claims-jhamf-group-on-its-leak-site-per-ransomlook/Thu, 12 Nov 2026 12:00:00 +0000RansomLook reports the Vexy ransomware group listed Colombian IT firm JHAMF Group on its leak site; customers should watch for an official notice.breachenterprisecloudhttps://vulnpocalypse.dev/advisories/coinbase-amplitude-vendor-incident/https://vulnpocalypse.dev/advisories/coinbase-amplitude-vendor-incident/Thu, 12 Nov 2026 12:00:00 +0000An incident at analytics vendor Amplitude exposed contact and some transaction data of Coinbase customers. Coinbase says its systems and funds were not hit.breachcryptoenterprisehttps://vulnpocalypse.dev/advisories/danfoss-refrigeration-defrost-attack-france/https://vulnpocalypse.dev/advisories/danfoss-refrigeration-defrost-attack-france/Thu, 12 Nov 2026 12:00:00 +0000On 11 Oct and 2 Nov 2026, attackers forced European supermarket fridges, and France's blood service, into defrost via exposed refrigeration controllers.breachnetwork-edgeenterprisehttps://vulnpocalypse.dev/advisories/denmark-cpr-register-breach/https://vulnpocalypse.dev/advisories/denmark-cpr-register-breach/Thu, 12 Nov 2026 12:00:00 +0000Attackers used one firm's CPR access to pull names, addresses and CPR numbers of 8.8 million people in Sep 2026. A CPR number no longer proves identity.breachenterprisewebhttps://vulnpocalypse.dev/advisories/dmdc-pentagon-personnel-data-breach/https://vulnpocalypse.dev/advisories/dmdc-pentagon-personnel-data-breach/Thu, 12 Nov 2026 12:00:00 +0000A flaw in a Defense Manpower Data Center file-sharing system exposed unencrypted SSNs of about 3.05 million people with military ties, Oct 2025 to Jul 2026.breachenterprisehttps://vulnpocalypse.dev/advisories/bank-of-baroda-data-leak-2026/https://vulnpocalypse.dev/advisories/bank-of-baroda-data-leak-2026/Thu, 12 Nov 2026 12:00:00 +0000Bank of Baroda says a compromised employee email account exposed "certain data" after TripleX posted files said to hold KYC and loan documents on 24 Jul 2026.breachenterprisehttps://vulnpocalypse.dev/advisories/check-point-vpn-cve-2026-50751/https://vulnpocalypse.dev/advisories/check-point-vpn-cve-2026-50751/Thu, 12 Nov 2026 12:00:00 +0000An IKEv1 flaw lets attackers open Check Point remote access VPN sessions with no password. Exploited since 7 May 2026. Install sk185033 or force IKEv2.exploitednetwork-edgeenterprisehttps://vulnpocalypse.dev/advisories/beyondtrust-rs-pra-cve-2026-1731/https://vulnpocalypse.dev/advisories/beyondtrust-rs-pra-cve-2026-1731/Thu, 12 Nov 2026 12:00:00 +0000Unauthenticated command injection in self-hosted BeyondTrust Remote Support and PRA, exploited since 31 Jan 2026. Patch to RS 25.3.2 or PRA 25.1.1 and hunt.exploitedenterprisenetwork-edgehttps://vulnpocalypse.dev/advisories/windows-ad-rce-cve-2026-119948-per-cyber-security-news-report/https://vulnpocalypse.dev/advisories/windows-ad-rce-cve-2026-119948-per-cyber-security-news-report/Wed, 11 Nov 2026 12:00:00 +0000Cyber Security News reports Microsoft patched an Active Directory RCE, CVE-2026-119948; it says to check the KB for each Windows system.exploitedenterprisehttps://vulnpocalypse.dev/advisories/the-hop-transit-district-data-breach-customer-data-may-be-copied/https://vulnpocalypse.dev/advisories/the-hop-transit-district-data-breach-customer-data-may-be-copied/Wed, 11 Nov 2026 12:00:00 +0000Hill Country Transit District, The Hop, says customer data may have been copied after July 10 network activity; check for a mailed notice.breachenterprisehttps://vulnpocalypse.dev/advisories/synology-discloses-dsm-flaws-incl-critical-cve-2026-76954/https://vulnpocalypse.dev/advisories/synology-discloses-dsm-flaws-incl-critical-cve-2026-76954/Wed, 11 Nov 2026 12:00:00 +0000Synology says DSM updates fix multiple flaws, including a critical Auth API one; affected DSM owners should upgrade to the fixed builds.exploitedenterprisehttps://vulnpocalypse.dev/advisories/signdrop-windows-clfs-exploit-researcher-claims-system-access-no-patch/https://vulnpocalypse.dev/advisories/signdrop-windows-clfs-exploit-researcher-claims-system-access-no-patch/Wed, 11 Nov 2026 12:00:00 +0000Cyber Security News reports a researcher claims SignDrop gives Windows SYSTEM via CLFS; no CVE or patch, so limit local code execution.exploitedendpointenterprisehttps://vulnpocalypse.dev/advisories/securityweek-reports-intel-and-amd-addressed-over-200-flaws/https://vulnpocalypse.dev/advisories/securityweek-reports-intel-and-amd-addressed-over-200-flaws/Wed, 11 Nov 2026 12:00:00 +0000SecurityWeek reports Intel and AMD published over 50 advisories covering over 200 flaws; check vendor advisories and apply available updates.exploitedendpointenterprisehttps://vulnpocalypse.dev/advisories/securityweek-reports-dreeze-raises-33m-for-cloud-app-recovery/https://vulnpocalypse.dev/advisories/securityweek-reports-dreeze-raises-33m-for-cloud-app-recovery/Wed, 11 Nov 2026 12:00:00 +0000SecurityWeek reports Dreeze says it raised $33 million for cloud app recovery; no flaw is reported, so no patching is needed.ecosystemcloudenterprisehttps://vulnpocalypse.dev/advisories/ransomlook-reports-dark-project-group-claims-bear-valley-community-hospital/https://vulnpocalypse.dev/advisories/ransomlook-reports-dark-project-group-claims-bear-valley-community-hospital/Wed, 11 Nov 2026 12:00:00 +0000RansomLook says dark project lists Bear Valley Community Hospital on its leak site; unconfirmed, so rely on official hospital notices.breachenterprisehttps://vulnpocalypse.dev/advisories/qilin-ransomware-claims-365-victims-krebs-reports-admin-clues/https://vulnpocalypse.dev/advisories/qilin-ransomware-claims-365-victims-krebs-reports-admin-clues/Wed, 11 Nov 2026 12:00:00 +0000Krebs reports Qilin claims 365 victims in three months and links its admin to a St. Petersburg man; unconfirmed. Review ransomware defenses.breachenterprisehttps://vulnpocalypse.dev/advisories/projectdiscovery-says-big-firms-shelve-unverified-vulnerability-findings/https://vulnpocalypse.dev/advisories/projectdiscovery-says-big-firms-shelve-unverified-vulnerability-findings/Wed, 11 Nov 2026 12:00:00 +0000Help Net Security reports ProjectDiscovery found nearly half of large firms close unverified findings; verify before you close them.exploitedenterprisehttps://vulnpocalypse.dev/advisories/premise-health-discloses-insider-patient-data-theft-per-hipaa-journal/https://vulnpocalypse.dev/advisories/premise-health-discloses-insider-patient-data-theft-per-hipaa-journal/Wed, 11 Nov 2026 12:00:00 +0000HIPAA Journal reports Premise Health says a former employee copied patient data; affected people should read any notice they receive and act on it.breachenterprisehttps://vulnpocalypse.dev/advisories/palo-alto-says-prisma-browser-needs-chromium-fixes-pan-sa-2026-0014/https://vulnpocalypse.dev/advisories/palo-alto-says-prisma-browser-needs-chromium-fixes-pan-sa-2026-0014/Wed, 11 Nov 2026 12:00:00 +0000Palo Alto Networks says Prisma Browser builds below 157.19.4.39 lack Chromium fixes; it reports no exploitation. Update Prisma Browser.exploitedenterpriseendpointhttps://vulnpocalypse.dev/advisories/palo-alto-networks-discloses-cve-2026-0330-panorama-pan-os-rce-flaw/https://vulnpocalypse.dev/advisories/palo-alto-networks-discloses-cve-2026-0330-panorama-pan-os-rce-flaw/Wed, 11 Nov 2026 12:00:00 +0000Palo Alto Networks says CVE-2026-0330 lets an authenticated Panorama admin run code as root; upgrade to a fixed PAN-OS version.exploitedenterprisenetwork-edgehttps://vulnpocalypse.dev/advisories/palo-alto-discloses-pan-os-information-disclosure-flaw-cve-2026-0331/https://vulnpocalypse.dev/advisories/palo-alto-discloses-pan-os-information-disclosure-flaw-cve-2026-0331/Wed, 11 Nov 2026 12:00:00 +0000Palo Alto Networks says PAN-OS flaw CVE-2026-0331 can leak firewall and session data to unauthenticated attackers; upgrade to a fixed build.exploitednetwork-edgeenterprisehttps://vulnpocalypse.dev/advisories/palo-alto-discloses-pan-os-buffer-overflow-cve-2026-0326/https://vulnpocalypse.dev/advisories/palo-alto-discloses-pan-os-buffer-overflow-cve-2026-0326/Wed, 11 Nov 2026 12:00:00 +0000Palo Alto Networks says PAN-OS CVE-2026-0326 is a buffer overflow in SCTP, DNS proxy or OSPFv3 handling, so upgrade to a fixed version.exploitednetwork-edgeenterprisehttps://vulnpocalypse.dev/advisories/kaspersky-reports-citrus-ransomware-using-vless-tunnels-and-sn00py/https://vulnpocalypse.dev/advisories/kaspersky-reports-citrus-ransomware-using-vless-tunnels-and-sn00py/Wed, 11 Nov 2026 12:00:00 +0000Kaspersky reports Citrus ransomware group uses VLESS tunnels and Sn00py; review contractor VPN and RDP access and GHOST machine accounts.breachenterpriseendpointhttps://vulnpocalypse.dev/advisories/iverify-reports-leaked-darksword-and-coruna-kits-hit-employee-iphones/https://vulnpocalypse.dev/advisories/iverify-reports-leaked-darksword-and-coruna-kits-hit-employee-iphones/Wed, 11 Nov 2026 12:00:00 +0000Help Net Security reports iVerify says leaked DarkSword and Coruna kits infect employee iPhones; check iOS versions and work access.exploitedendpointenterprisehttps://vulnpocalypse.dev/advisories/ians-reports-france-blames-iran-for-supermarket-cyberattack-iran-denies/https://vulnpocalypse.dev/advisories/ians-reports-france-blames-iran-for-supermarket-cyberattack-iran-denies/Wed, 11 Nov 2026 12:00:00 +0000IANS reports France says Iran's IRGC hit supermarket refrigeration systems; Iran denies it. Technical details not confirmed. Await official details.ecosystementerprisehttps://vulnpocalypse.dev/advisories/hkcert-reports-multiple-mongodb-vulnerabilities-vendor-fixes-advised/https://vulnpocalypse.dev/advisories/hkcert-reports-multiple-mongodb-vulnerabilities-vendor-fixes-advised/Wed, 11 Nov 2026 12:00:00 +0000HKCERT reports multiple MongoDB vulnerabilities rated medium risk; check MongoDB's security alerts page and apply vendor fixes.exploitedenterprisehttps://vulnpocalypse.dev/advisories/hkcert-reports-multiple-fortinet-product-vulnerabilities-medium-risk/https://vulnpocalypse.dev/advisories/hkcert-reports-multiple-fortinet-product-vulnerabilities-medium-risk/Wed, 11 Nov 2026 12:00:00 +0000HKCERT reports multiple Fortinet product vulnerabilities rated medium risk; check the Fortinet PSIRT advisories and apply vendor fixes.exploitedenterprisehttps://vulnpocalypse.dev/advisories/hkcert-reports-adobe-november-2026-security-update-for-nine-products/https://vulnpocalypse.dev/advisories/hkcert-reports-adobe-november-2026-security-update-for-nine-products/Wed, 11 Nov 2026 12:00:00 +0000HKCERT reports Adobe released its November 2026 monthly update covering nine products rated Medium; apply the vendor fixes.exploitedendpointenterprisehttps://vulnpocalypse.dev/advisories/help-net-security-reports-enisa-45-of-surveyed-eu-it-providers-patch-slowly/https://vulnpocalypse.dev/advisories/help-net-security-reports-enisa-45-of-surveyed-eu-it-providers-patch-slowly/Wed, 11 Nov 2026 12:00:00 +0000Help Net Security reports ENISA's 2026 assessment says 45% of surveyed EU IT service providers took over three months to patch; check supplier SLAs.supply-chainenterprisehttps://vulnpocalypse.dev/advisories/deadlock-ransomware-group-claims-attack-on-kadick-per-ransomlook/https://vulnpocalypse.dev/advisories/deadlock-ransomware-group-claims-attack-on-kadick-per-ransomlook/Wed, 11 Nov 2026 12:00:00 +0000RansomLook reports the deadlock ransomware group lists Kadick on its leak site; the claim is unconfirmed, so watch for an official statement.breachenterprisehttps://vulnpocalypse.dev/advisories/databreachesnet-reports-rural-hospital-cyber-incident-with-17-days-of-access/https://vulnpocalypse.dev/advisories/databreachesnet-reports-rural-hospital-cyber-incident-with-17-days-of-access/Wed, 11 Nov 2026 12:00:00 +0000DataBreaches.net reports a rural hospital cyber incident with 17 days of unseen access; details are unconfirmed, so monitor for official updates.breachenterprisehttps://vulnpocalypse.dev/advisories/databreachesnet-reports-cyberattack-on-fullerton-health-server/https://vulnpocalypse.dev/advisories/databreachesnet-reports-cyberattack-on-fullerton-health-server/Wed, 11 Nov 2026 12:00:00 +0000DataBreaches.net reports a Fullerton Health server was hit by a cyberattack affecting migrant workers' data; details are unconfirmed, so monitor officialbreachenterprisehttps://vulnpocalypse.dev/advisories/databreachesnet-reports-26-million-cyber-heist-in-a-new-jersey-town/https://vulnpocalypse.dev/advisories/databreachesnet-reports-26-million-cyber-heist-in-a-new-jersey-town/Wed, 11 Nov 2026 12:00:00 +0000DataBreaches.net reports a $26 million cyber heist in a small New Jersey town; details are unconfirmed, so monitor official statements from the town.breachenterprisehttps://vulnpocalypse.dev/advisories/dark-project-ransomware-group-claims-attack-on-mtmo-gold-refinery-dmcc/https://vulnpocalypse.dev/advisories/dark-project-ransomware-group-claims-attack-on-mtmo-gold-refinery-dmcc/Wed, 11 Nov 2026 12:00:00 +0000RansomLook reports the dark project group claims MTM&O Gold Refinery DMCC on its leak site; no victim response is confirmed, so monitor.breachenterprisehttps://vulnpocalypse.dev/advisories/curious-worm-ransomware-group-claims-attack-on-atlashpcom/https://vulnpocalypse.dev/advisories/curious-worm-ransomware-group-claims-attack-on-atlashpcom/Wed, 11 Nov 2026 12:00:00 +0000RansomLook reports the curious worm ransomware group claimed atlashp.com on its leak site; no confirmation was found in the sources, so monitor.breachenterprisehttps://vulnpocalypse.dev/advisories/cloudsek-reports-exposed-silent-lynx-server-tied-to-central-asia-espionage/https://vulnpocalypse.dev/advisories/cloudsek-reports-exposed-silent-lynx-server-tied-to-central-asia-espionage/Wed, 11 Nov 2026 12:00:00 +0000CloudSEK reports an exposed Silent Lynx server tied to Central Asia espionage; defenders there can check logs for the listed IP address.ai-toolsenterpriseai-toolshttps://vulnpocalypse.dev/advisories/cisco-broadworks-cve-2026-20320-and-openwave-flaw-added-to-cisa-kev/https://vulnpocalypse.dev/advisories/cisco-broadworks-cve-2026-20320-and-openwave-flaw-added-to-cisa-kev/Wed, 11 Nov 2026 12:00:00 +0000CISA added exploited Cisco BroadWorks and Openwave flaws to its KEV list; patch now, federal deadline is November 24, 2026.exploitedenterprise