<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Vulnpocalypse: Flash signals</title><link>https://vulnpocalypse.dev/feeds/</link><description>Stories scoring 75 or more: act now.</description><language>en</language><lastBuildDate>Thu, 12 Nov 2026 16:59:02 +0000</lastBuildDate><atom:link href="https://vulnpocalypse.dev/feeds/signals-flash.xml" rel="self" type="application/rss+xml"/><item><title>[FLASH 98] PHP2Shell Exploitation on Check Point Gateway</title><link>https://research.checkpoint.com/2026/php2shell-exploitation-on-check-point-gateway/</link><guid isPermaLink="false">https://research.checkpoint.com/2026/php2shell-exploitation-on-check-point-gateway/</guid><pubDate>Thu, 12 Nov 2026 13:56:37 +0000</pubDate><description>Check Point Research, 54 source(s). On CISA KEV EPSS 1.00 Exploit public CVSS 9.2</description><category>flash</category><category>vulnerability</category><category>CVE-2026-109618</category><category>CVE-2026-109619</category><category>CVE-2026-115560</category><category>CVE-2026-73695</category></item><item><title>[FLASH 98] Warning: Six New Danfoss Vulnerabilities - Refrigeration Controllers at Risk - Immediate Action Required!</title><link>https://ccb.belgium.be/advisories/warning-six-new-danfoss-vulnerabilities-refrigeration-controllers-risk-immediate-action</link><guid isPermaLink="false">https://ccb.belgium.be/advisories/warning-six-new-danfoss-vulnerabilities-refrigeration-controllers-risk-immediate-action</guid><pubDate>Thu, 12 Nov 2026 07:43:48 +0000</pubDate><description>CERT-BE, 63 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 90] Nearly 4,837 GitHub accounts hijacked in major supply-chain attack</title><link>https://thehackernews.com/2026/11/4837-hijacked-github-accounts-ran-ci.html?m=1</link><guid isPermaLink="false">https://thehackernews.com/2026/11/4837-hijacked-github-accounts-ran-ci.html?m=1</guid><pubDate>Thu, 12 Nov 2026 15:48:41 +0000</pubDate><description>thehackernews.com, 14 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 86] CISA Orders Patch for Cisco Flaw Tied to AI Agent Attack</title><link>https://www.bankinfosecurity.com/cisa-orders-patch-for-cisco-flaw-tied-to-ai-agent-attack-a-33364</link><guid isPermaLink="false">https://www.bankinfosecurity.com/cisa-orders-patch-for-cisco-flaw-tied-to-ai-agent-attack-a-33364</guid><pubDate>Thu, 12 Nov 2026 15:32:07 +0000</pubDate><description>Bank Info Security, 6 source(s). </description><category>flash</category><category>vulnerability</category></item><item><title>[FLASH 83] Binance hack reveals crypto&#x27;s uphill battle against hackers</title><link>https://www.thehindu.com/sci-tech/technology/binance-hack-reveals-cryptos-uphill-battle-against-hackers/article71692230.ece</link><guid isPermaLink="false">https://www.thehindu.com/sci-tech/technology/binance-hack-reveals-cryptos-uphill-battle-against-hackers/article71692230.ece</guid><pubDate>Thu, 12 Nov 2026 04:43:57 +0000</pubDate><description>The Hindu, 43 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 82] CISA Confirms Active Exploitation of Outlook User Interaction 0-Day Vulnerability</title><link>https://cybersecuritynews.com/active-exploitation-of-outlook-0-day-vulnerability/</link><guid isPermaLink="false">https://cybersecuritynews.com/active-exploitation-of-outlook-0-day-vulnerability/</guid><pubDate>Thu, 12 Nov 2026 14:11:54 +0000</pubDate><description>Cyber Security News, 8 source(s). </description><category>flash</category><category>vulnerability</category></item><item><title>[FLASH 81] AntiFox AI agents hijacked by hackers to carry out theft of AWS credentials</title><link>https://www.techradar.com/pro/security/antifox-ai-agents-hijacked-by-hackers-to-carry-out-theft-of-aws-credentials</link><guid isPermaLink="false">https://www.techradar.com/pro/security/antifox-ai-agents-hijacked-by-hackers-to-carry-out-theft-of-aws-credentials</guid><pubDate>Thu, 12 Nov 2026 15:35:00 +0000</pubDate><description>TechRadar security, 7 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 81] Russian hackers compromised Microsoft Exchange to steal NATO, EU emails</title><link>https://cybernews.com/security/russian-hackers-microsoft-exchange-nato-emails/</link><guid isPermaLink="false">https://cybernews.com/security/russian-hackers-microsoft-exchange-nato-emails/</guid><pubDate>Wed, 11 Nov 2026 15:48:37 +0000</pubDate><description>cybernews.com, 6 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 81] CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)</title><link>https://security.paloaltonetworks.com/CVE-2026-111497</link><guid isPermaLink="false">https://security.paloaltonetworks.com/CVE-2026-111497</guid><pubDate>Mon, 09 Nov 2026 21:00:00 +0000</pubDate><description>Palo Alto PSIRT, 3 source(s). On CISA KEV EPSS 0.83 Exploit public CVSS 9.2</description><category>flash</category><category>vulnerability</category><category>CVE-2026-111497</category></item><item><title>[FLASH 80] Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign</title><link>https://www.securityweek.com/attacker-targets-60000-github-repositories-in-credential-theft-campaign/</link><guid isPermaLink="false">https://www.securityweek.com/attacker-targets-60000-github-repositories-in-credential-theft-campaign/</guid><pubDate>Thu, 12 Nov 2026 13:39:03 +0000</pubDate><description>SecurityWeek, 7 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 79] WhiteArmor gang claims responsibility for latest cyber attack on shipping giant Maersk</title><link>https://www.bitdefender.com/en-us/blog/hotforsecurity/whitearmor-gang-cyberattack-maersk</link><guid isPermaLink="false">https://www.bitdefender.com/en-us/blog/hotforsecurity/whitearmor-gang-cyberattack-maersk</guid><pubDate>Thu, 12 Nov 2026 15:12:29 +0000</pubDate><description>Graham Cluley, 6 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 79] Baker Tilly notifies clients of data breach at third-party provider</title><link>https://www.bleepingcomputer.com/news/security/baker-tilly-notifies-clients-of-data-breach-at-third-party-provider/</link><guid isPermaLink="false">https://www.bleepingcomputer.com/news/security/baker-tilly-notifies-clients-of-data-breach-at-third-party-provider/</guid><pubDate>Wed, 11 Nov 2026 23:01:31 +0000</pubDate><description>BleepingComputer, 6 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 79] Hackers Exploit Decade-Old OpenSSH Flaw to Bypass Linux Logins</title><link>https://hackread.com/hackers-exploit-old-openssh-bypass-linux-logins/</link><guid isPermaLink="false">https://hackread.com/hackers-exploit-old-openssh-bypass-linux-logins/</guid><pubDate>Wed, 11 Nov 2026 07:28:12 +0000</pubDate><description>Hackread, 20 source(s). On CISA KEV EPSS 0.19 Exploit public CVSS 8.1</description><category>flash</category><category>vulnerability</category><category>CVE-2026-123158</category></item><item><title>[FLASH 78] ARTEX: 916 Exposed AI Pentest Consoles Mapped in the U.S.</title><link>https://socradar.io/blog/artex-ai-pentest-consoles-us/</link><guid isPermaLink="false">https://socradar.io/blog/artex-ai-pentest-consoles-us/</guid><pubDate>Thu, 12 Nov 2026 14:55:03 +0000</pubDate><description>SOCRadar, 5 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 78] Vanderbilt restores systems after cyberattack as hackers claim data theft</title><link>https://www.malwarebytes.com/blog/news/2026/11/vanderbilt-restores-systems-after-cyberattack-as-hackers-claim-data-theft</link><guid isPermaLink="false">https://www.malwarebytes.com/blog/news/2026/11/vanderbilt-restores-systems-after-cyberattack-as-hackers-claim-data-theft</guid><pubDate>Wed, 11 Nov 2026 18:29:01 +0000</pubDate><description>Malwarebytes, 9 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 76] Hackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill</title><link>https://www.csoonline.com/article/4247578/hackers-stole-ai-credentials-to-get-740000-in-free-compute-railway-picked-up-the-bill.html</link><guid isPermaLink="false">https://www.csoonline.com/article/4247578/hackers-stole-ai-credentials-to-get-740000-in-free-compute-railway-picked-up-the-bill.html</guid><pubDate>Thu, 12 Nov 2026 02:53:41 +0000</pubDate><description>CSO Online, 6 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 76] Hackers Exploit WordPress Core RCE Vulnerability in Over 240,000 Attack Attempts</title><link>https://gbhackers.com/exploit-wordpress-core-over-240000-attack/</link><guid isPermaLink="false">https://gbhackers.com/exploit-wordpress-core-over-240000-attack/</guid><pubDate>Sat, 07 Nov 2026 08:06:17 +0000</pubDate><description>GBHackers, 13 source(s). </description><category>flash</category><category>vulnerability</category></item></channel></rss>
