{"title":"High and flash signals","description":"Stories scoring 55 or more: review today.","home":"https://vulnpocalypse.dev/feeds/","items":[{"id":"https://research.checkpoint.com/2026/php2shell-exploitation-on-check-point-gateway/","title":"[FLASH 98] PHP2Shell Exploitation on Check Point Gateway","url":"https://research.checkpoint.com/2026/php2shell-exploitation-on-check-point-gateway/","date":"2026-11-12T13:56:37","summary":"Check Point Research, 54 source(s). On CISA KEV EPSS 1.00 Exploit public CVSS 9.2","tags":["flash","vulnerability","CVE-2026-109618","CVE-2026-109619","CVE-2026-115560","CVE-2026-73695"]},{"id":"https://ccb.belgium.be/advisories/warning-six-new-danfoss-vulnerabilities-refrigeration-controllers-risk-immediate-action","title":"[FLASH 98] Warning: Six New Danfoss Vulnerabilities - Refrigeration Controllers at Risk - Immediate Action Required!","url":"https://ccb.belgium.be/advisories/warning-six-new-danfoss-vulnerabilities-refrigeration-controllers-risk-immediate-action","date":"2026-11-12T07:43:48","summary":"CERT-BE, 63 source(s). ","tags":["flash","incident"]},{"id":"https://thehackernews.com/2026/11/4837-hijacked-github-accounts-ran-ci.html?m=1","title":"[FLASH 90] Nearly 4,837 GitHub accounts hijacked in major supply-chain attack","url":"https://thehackernews.com/2026/11/4837-hijacked-github-accounts-ran-ci.html?m=1","date":"2026-11-12T15:48:41","summary":"thehackernews.com, 14 source(s). ","tags":["flash","incident"]},{"id":"https://www.bankinfosecurity.com/cisa-orders-patch-for-cisco-flaw-tied-to-ai-agent-attack-a-33364","title":"[FLASH 86] CISA Orders Patch for Cisco Flaw Tied to AI Agent Attack","url":"https://www.bankinfosecurity.com/cisa-orders-patch-for-cisco-flaw-tied-to-ai-agent-attack-a-33364","date":"2026-11-12T15:32:07","summary":"Bank Info Security, 6 source(s). ","tags":["flash","vulnerability"]},{"id":"https://www.thehindu.com/sci-tech/technology/binance-hack-reveals-cryptos-uphill-battle-against-hackers/article71692230.ece","title":"[FLASH 83] Binance hack reveals crypto's uphill battle against hackers","url":"https://www.thehindu.com/sci-tech/technology/binance-hack-reveals-cryptos-uphill-battle-against-hackers/article71692230.ece","date":"2026-11-12T04:43:57","summary":"The Hindu, 43 source(s). ","tags":["flash","incident"]},{"id":"https://cybersecuritynews.com/active-exploitation-of-outlook-0-day-vulnerability/","title":"[FLASH 82] CISA Confirms Active Exploitation of Outlook User Interaction 0-Day Vulnerability","url":"https://cybersecuritynews.com/active-exploitation-of-outlook-0-day-vulnerability/","date":"2026-11-12T14:11:54","summary":"Cyber Security News, 8 source(s). ","tags":["flash","vulnerability"]},{"id":"https://www.techradar.com/pro/security/antifox-ai-agents-hijacked-by-hackers-to-carry-out-theft-of-aws-credentials","title":"[FLASH 81] AntiFox AI agents hijacked by hackers to carry out theft of AWS credentials","url":"https://www.techradar.com/pro/security/antifox-ai-agents-hijacked-by-hackers-to-carry-out-theft-of-aws-credentials","date":"2026-11-12T15:35:00","summary":"TechRadar security, 7 source(s). ","tags":["flash","incident"]},{"id":"https://cybernews.com/security/russian-hackers-microsoft-exchange-nato-emails/","title":"[FLASH 81] Russian hackers compromised Microsoft Exchange to steal NATO, EU emails","url":"https://cybernews.com/security/russian-hackers-microsoft-exchange-nato-emails/","date":"2026-11-11T15:48:37","summary":"cybernews.com, 6 source(s). ","tags":["flash","incident"]},{"id":"https://security.paloaltonetworks.com/CVE-2026-111497","title":"[FLASH 81] CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)","url":"https://security.paloaltonetworks.com/CVE-2026-111497","date":"2026-11-09T21:00:00","summary":"Palo Alto PSIRT, 3 source(s). On CISA KEV EPSS 0.83 Exploit public CVSS 9.2","tags":["flash","vulnerability","CVE-2026-111497"]},{"id":"https://www.securityweek.com/attacker-targets-60000-github-repositories-in-credential-theft-campaign/","title":"[FLASH 80] Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign","url":"https://www.securityweek.com/attacker-targets-60000-github-repositories-in-credential-theft-campaign/","date":"2026-11-12T13:39:03","summary":"SecurityWeek, 7 source(s). ","tags":["flash","incident"]},{"id":"https://www.bitdefender.com/en-us/blog/hotforsecurity/whitearmor-gang-cyberattack-maersk","title":"[FLASH 79] WhiteArmor gang claims responsibility for latest cyber attack on shipping giant Maersk","url":"https://www.bitdefender.com/en-us/blog/hotforsecurity/whitearmor-gang-cyberattack-maersk","date":"2026-11-12T15:12:29","summary":"Graham Cluley, 6 source(s). ","tags":["flash","incident"]},{"id":"https://www.bleepingcomputer.com/news/security/baker-tilly-notifies-clients-of-data-breach-at-third-party-provider/","title":"[FLASH 79] Baker Tilly notifies clients of data breach at third-party provider","url":"https://www.bleepingcomputer.com/news/security/baker-tilly-notifies-clients-of-data-breach-at-third-party-provider/","date":"2026-11-11T23:01:31","summary":"BleepingComputer, 6 source(s). ","tags":["flash","incident"]},{"id":"https://hackread.com/hackers-exploit-old-openssh-bypass-linux-logins/","title":"[FLASH 79] Hackers Exploit Decade-Old OpenSSH Flaw to Bypass Linux Logins","url":"https://hackread.com/hackers-exploit-old-openssh-bypass-linux-logins/","date":"2026-11-11T07:28:12","summary":"Hackread, 20 source(s). On CISA KEV EPSS 0.19 Exploit public CVSS 8.1","tags":["flash","vulnerability","CVE-2026-123158"]},{"id":"https://socradar.io/blog/artex-ai-pentest-consoles-us/","title":"[FLASH 78] ARTEX: 916 Exposed AI Pentest Consoles Mapped in the U.S.","url":"https://socradar.io/blog/artex-ai-pentest-consoles-us/","date":"2026-11-12T14:55:03","summary":"SOCRadar, 5 source(s). ","tags":["flash","incident"]},{"id":"https://www.malwarebytes.com/blog/news/2026/11/vanderbilt-restores-systems-after-cyberattack-as-hackers-claim-data-theft","title":"[FLASH 78] Vanderbilt restores systems after cyberattack as hackers claim data theft","url":"https://www.malwarebytes.com/blog/news/2026/11/vanderbilt-restores-systems-after-cyberattack-as-hackers-claim-data-theft","date":"2026-11-11T18:29:01","summary":"Malwarebytes, 9 source(s). ","tags":["flash","incident"]},{"id":"https://www.csoonline.com/article/4247578/hackers-stole-ai-credentials-to-get-740000-in-free-compute-railway-picked-up-the-bill.html","title":"[FLASH 76] Hackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill","url":"https://www.csoonline.com/article/4247578/hackers-stole-ai-credentials-to-get-740000-in-free-compute-railway-picked-up-the-bill.html","date":"2026-11-12T02:53:41","summary":"CSO Online, 6 source(s). ","tags":["flash","incident"]},{"id":"https://gbhackers.com/exploit-wordpress-core-over-240000-attack/","title":"[FLASH 76] Hackers Exploit WordPress Core RCE Vulnerability in Over 240,000 Attack Attempts","url":"https://gbhackers.com/exploit-wordpress-core-over-240000-attack/","date":"2026-11-07T08:06:17","summary":"GBHackers, 13 source(s). ","tags":["flash","vulnerability"]},{"id":"https://thehackernews.com/2026/11/critical-pre-auth-mongodb-flaw-cve-2026.html","title":"[HIGH 74] Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover","url":"https://thehackernews.com/2026/11/critical-pre-auth-mongodb-flaw-cve-2026.html","date":"2026-11-12T09:25:00","summary":"The Hacker News, 5 source(s). On CISA KEV Exploit public CVSS 9.5","tags":["high","vulnerability","CVE-2026-111560","CVE-2026-116606","CVE-2026-118383"]},{"id":"https://thehackernews.com/2026/11/anthropics-claude-fable-52-beats-gpt-6.html","title":"[HIGH 73] Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark","url":"https://thehackernews.com/2026/11/anthropics-claude-fable-52-beats-gpt-6.html","date":"2026-11-10T08:16:14","summary":"The Hacker News, 9 source(s). ","tags":["high","vulnerability"]},{"id":"https://arstechnica.com/security/2026/11/chainalysis-says-hackers-stole-credentials-and-tokens-for-all-of-its-customers/","title":"[HIGH 71] Chainalysis says hackers stole credentials and tokens for all of its customers","url":"https://arstechnica.com/security/2026/11/chainalysis-says-hackers-stole-credentials-and-tokens-for-all-of-its-customers/","date":"2026-11-09T12:04:53","summary":"arstechnica.com, 10 source(s). ","tags":["high","incident"]},{"id":"https://the420.in/digicert-reports-data-breach-exposing-enterprise-customer-details-and-identity-documents/","title":"[HIGH 70] DigiCert Reports Data Breach Exposing Enterprise Customer Details and Identity Documents","url":"https://the420.in/digicert-reports-data-breach-exposing-enterprise-customer-details-and-identity-documents/","date":"2026-11-08T18:29:16","summary":"The420.in, 8 source(s). ","tags":["high","incident"]},{"id":"https://www.indiatoday.in/technology/news/story/cert-in-warns-android-users-to-update-phones-over-critical-security-flaws-3033751-2026-11-06?utm_source=rss","title":"[HIGH 69] CERT-In warns Android users to update phones over critical security flaws","url":"https://www.indiatoday.in/technology/news/story/cert-in-warns-android-users-to-update-phones-over-critical-security-flaws-3033751-2026-11-06?utm_source=rss","date":"2026-11-06T11:09:28","summary":"India Today, 6 source(s). ","tags":["high","incident"]},{"id":"https://ciso.economictimes.indiatimes.com/news/vulnerabilities-exploits/sap-patches-critical-icm2shell-proxygate-vulnerabilities/135729733","title":"[HIGH 68] SAP patches critical ICM2SHELL, ProxyGate vulnerabilities","url":"https://ciso.economictimes.indiatimes.com/news/vulnerabilities-exploits/sap-patches-critical-icm2shell-proxygate-vulnerabilities/135729733","date":"2026-11-12T02:32:00","summary":"ETCISO, 5 source(s). ","tags":["high","vulnerability"]},{"id":"https://www.thestar.com.my/tech/tech-news/2026/11/09/italy039s-meloni-blames-pro-russian-hackers-for-leak-of-foreign-minister039s-data-on-the-dark-web","title":"[HIGH 68] Italy Meloni blames pro - Russian hackers for leak of foreign minister data on the dark web","url":"https://www.thestar.com.my/tech/tech-news/2026/11/09/italy039s-meloni-blames-pro-russian-hackers-for-leak-of-foreign-minister039s-data-on-the-dark-web","date":"2026-11-10T03:00:00","summary":"thestar.com.my, 5 source(s). ","tags":["high","incident"]},{"id":"https://techcrunch.com/2026/11/12/cyberattack-on-fireworks-ai-allowed-hackers-to-access-notion-customers-chat-transcripts/","title":"[HIGH 65] Cyberattack on Fireworks AI allowed hackers to access Notion customers\u2019 chat transcripts","url":"https://techcrunch.com/2026/11/12/cyberattack-on-fireworks-ai-allowed-hackers-to-access-notion-customers-chat-transcripts/","date":"2026-11-12T15:02:28","summary":"TechCrunch, 9 source(s). ","tags":["high","incident"]},{"id":"https://www.helpnetsecurity.com/2026/11/11/git-project-security-updates/","title":"[HIGH 65] Git fixes six vulnerabilities, including code execution during recursive clones","url":"https://www.helpnetsecurity.com/2026/11/11/git-project-security-updates/","date":"2026-11-11T14:26:12","summary":"Help Net Security, 4 source(s). ","tags":["high","vulnerability"]},{"id":"https://www.infosecurity-magazine.com/news/fortinet-sql-server-cryptominer/","title":"[HIGH 64] Weak Passwords Expose SQL Servers to Cryptominer and Gh0st RAT","url":"https://www.infosecurity-magazine.com/news/fortinet-sql-server-cryptominer/","date":"2026-11-12T16:00:00","summary":"Infosecurity Magazine, 4 source(s). ","tags":["high","campaign"]},{"id":"https://gbhackers.com/critical-mongodb-use-after-free-vulnerability/","title":"[HIGH 62] Critical MongoDB Use-After-Free Vulnerability Allows Remote Code Execution Without Authentication","url":"https://gbhackers.com/critical-mongodb-use-after-free-vulnerability/","date":"2026-11-12T12:24:27","summary":"GBHackers, 3 source(s). ","tags":["high","vulnerability"]},{"id":"https://www.securityweek.com/hackers-target-n-central-zero-days-as-n-able-rushes-patches/","title":"[HIGH 62] Hackers Target N-central Zero-Days as N-able Rushes Patches","url":"https://www.securityweek.com/hackers-target-n-central-zero-days-as-n-able-rushes-patches/","date":"2026-11-12T09:39:55","summary":"SecurityWeek, 4 source(s). ","tags":["high","vulnerability"]},{"id":"https://www.darkreading.com/mobile-security/apt29-watering-holes-target-mobile-users","title":"[HIGH 61] APT29's Watering Holes Target Thousands of Mobile Users","url":"https://www.darkreading.com/mobile-security/apt29-watering-holes-target-mobile-users","date":"2026-11-05T20:05:39","summary":"Dark Reading, 5 source(s). ","tags":["high","campaign"]},{"id":"https://databreaches.net/2026/11/11/ca-york-university-breach-exposes-19-years-of-student-health-and-financial-data/","title":"[HIGH 60] Ca: York University Breach Exposes 19 Years of Student Health and Financial Data","url":"https://databreaches.net/2026/11/11/ca-york-university-breach-exposes-19-years-of-student-health-and-financial-data/","date":"2026-11-11T15:21:34","summary":"DataBreaches.net, 8 source(s). ","tags":["high","incident"]},{"id":"https://www.freepressjournal.in/tech/openai-launches-gpt-6-cyber-new-ai-model-designed-to-detect-software-vulnerabilities-test-security-risks-help-fix-flaws","title":"[HIGH 58] OpenAI Launches GPT - 6 Cyber , New AI Model Designed To Detect Software Vulnerabilities , Test Security Risks & Help Fix Flaws","url":"https://www.freepressjournal.in/tech/openai-launches-gpt-6-cyber-new-ai-model-designed-to-detect-software-vulnerabilities-test-security-risks-help-fix-flaws","date":"2026-11-06T06:30:00","summary":"freepressjournal.in, 5 source(s). ","tags":["high","vulnerability"]},{"id":"https://securityaffairs.com/202740/data-breach/iris-ohyama-data-breach-may-expose-personal-information-of-7-7-million-people.html","title":"[HIGH 57] Iris Ohyama data breach may expose personal information of 7.7 million people","url":"https://securityaffairs.com/202740/data-breach/iris-ohyama-data-breach-may-expose-personal-information-of-7-7-million-people.html","date":"2026-11-10T06:28:06","summary":"Security Affairs, 4 source(s). ","tags":["high","incident"]},{"id":"https://www.securityweek.com/recently-patched-barracuda-vulnerabilities-exploited-in-attacks/","title":"[HIGH 56] Recently Patched Barracuda Vulnerabilities Exploited in Attacks","url":"https://www.securityweek.com/recently-patched-barracuda-vulnerabilities-exploited-in-attacks/","date":"2026-11-11T07:53:51","summary":"SecurityWeek, 3 source(s). ","tags":["high","vulnerability"]},{"id":"https://www.csoonline.com/article/4246479/sonicwall-releases-patches-for-7-flaws-in-its-firewalls-most-involving-unauthenticated-access.html","title":"[HIGH 56] SonicWall releases patches for 7 flaws in its firewalls, most involving unauthenticated access","url":"https://www.csoonline.com/article/4246479/sonicwall-releases-patches-for-7-flaws-in-its-firewalls-most-involving-unauthenticated-access.html","date":"2026-11-10T02:36:14","summary":"CSO Online, 11 source(s). On CISA KEV","tags":["high","vulnerability","CVE-2026-19868"]}]}