<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Vulnpocalypse: High and flash signals</title><link>https://vulnpocalypse.dev/feeds/</link><description>Stories scoring 55 or more: review today.</description><language>en</language><lastBuildDate>Thu, 12 Nov 2026 16:59:02 +0000</lastBuildDate><atom:link href="https://vulnpocalypse.dev/feeds/signals-high.xml" rel="self" type="application/rss+xml"/><item><title>[FLASH 98] PHP2Shell Exploitation on Check Point Gateway</title><link>https://research.checkpoint.com/2026/php2shell-exploitation-on-check-point-gateway/</link><guid isPermaLink="false">https://research.checkpoint.com/2026/php2shell-exploitation-on-check-point-gateway/</guid><pubDate>Thu, 12 Nov 2026 13:56:37 +0000</pubDate><description>Check Point Research, 54 source(s). On CISA KEV EPSS 1.00 Exploit public CVSS 9.2</description><category>flash</category><category>vulnerability</category><category>CVE-2026-109618</category><category>CVE-2026-109619</category><category>CVE-2026-115560</category><category>CVE-2026-73695</category></item><item><title>[FLASH 98] Warning: Six New Danfoss Vulnerabilities - Refrigeration Controllers at Risk - Immediate Action Required!</title><link>https://ccb.belgium.be/advisories/warning-six-new-danfoss-vulnerabilities-refrigeration-controllers-risk-immediate-action</link><guid isPermaLink="false">https://ccb.belgium.be/advisories/warning-six-new-danfoss-vulnerabilities-refrigeration-controllers-risk-immediate-action</guid><pubDate>Thu, 12 Nov 2026 07:43:48 +0000</pubDate><description>CERT-BE, 63 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 90] Nearly 4,837 GitHub accounts hijacked in major supply-chain attack</title><link>https://thehackernews.com/2026/11/4837-hijacked-github-accounts-ran-ci.html?m=1</link><guid isPermaLink="false">https://thehackernews.com/2026/11/4837-hijacked-github-accounts-ran-ci.html?m=1</guid><pubDate>Thu, 12 Nov 2026 15:48:41 +0000</pubDate><description>thehackernews.com, 14 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 86] CISA Orders Patch for Cisco Flaw Tied to AI Agent Attack</title><link>https://www.bankinfosecurity.com/cisa-orders-patch-for-cisco-flaw-tied-to-ai-agent-attack-a-33364</link><guid isPermaLink="false">https://www.bankinfosecurity.com/cisa-orders-patch-for-cisco-flaw-tied-to-ai-agent-attack-a-33364</guid><pubDate>Thu, 12 Nov 2026 15:32:07 +0000</pubDate><description>Bank Info Security, 6 source(s). </description><category>flash</category><category>vulnerability</category></item><item><title>[FLASH 83] Binance hack reveals crypto&#x27;s uphill battle against hackers</title><link>https://www.thehindu.com/sci-tech/technology/binance-hack-reveals-cryptos-uphill-battle-against-hackers/article71692230.ece</link><guid isPermaLink="false">https://www.thehindu.com/sci-tech/technology/binance-hack-reveals-cryptos-uphill-battle-against-hackers/article71692230.ece</guid><pubDate>Thu, 12 Nov 2026 04:43:57 +0000</pubDate><description>The Hindu, 43 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 82] CISA Confirms Active Exploitation of Outlook User Interaction 0-Day Vulnerability</title><link>https://cybersecuritynews.com/active-exploitation-of-outlook-0-day-vulnerability/</link><guid isPermaLink="false">https://cybersecuritynews.com/active-exploitation-of-outlook-0-day-vulnerability/</guid><pubDate>Thu, 12 Nov 2026 14:11:54 +0000</pubDate><description>Cyber Security News, 8 source(s). </description><category>flash</category><category>vulnerability</category></item><item><title>[FLASH 81] AntiFox AI agents hijacked by hackers to carry out theft of AWS credentials</title><link>https://www.techradar.com/pro/security/antifox-ai-agents-hijacked-by-hackers-to-carry-out-theft-of-aws-credentials</link><guid isPermaLink="false">https://www.techradar.com/pro/security/antifox-ai-agents-hijacked-by-hackers-to-carry-out-theft-of-aws-credentials</guid><pubDate>Thu, 12 Nov 2026 15:35:00 +0000</pubDate><description>TechRadar security, 7 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 81] Russian hackers compromised Microsoft Exchange to steal NATO, EU emails</title><link>https://cybernews.com/security/russian-hackers-microsoft-exchange-nato-emails/</link><guid isPermaLink="false">https://cybernews.com/security/russian-hackers-microsoft-exchange-nato-emails/</guid><pubDate>Wed, 11 Nov 2026 15:48:37 +0000</pubDate><description>cybernews.com, 6 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 81] CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)</title><link>https://security.paloaltonetworks.com/CVE-2026-111497</link><guid isPermaLink="false">https://security.paloaltonetworks.com/CVE-2026-111497</guid><pubDate>Mon, 09 Nov 2026 21:00:00 +0000</pubDate><description>Palo Alto PSIRT, 3 source(s). On CISA KEV EPSS 0.83 Exploit public CVSS 9.2</description><category>flash</category><category>vulnerability</category><category>CVE-2026-111497</category></item><item><title>[FLASH 80] Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign</title><link>https://www.securityweek.com/attacker-targets-60000-github-repositories-in-credential-theft-campaign/</link><guid isPermaLink="false">https://www.securityweek.com/attacker-targets-60000-github-repositories-in-credential-theft-campaign/</guid><pubDate>Thu, 12 Nov 2026 13:39:03 +0000</pubDate><description>SecurityWeek, 7 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 79] WhiteArmor gang claims responsibility for latest cyber attack on shipping giant Maersk</title><link>https://www.bitdefender.com/en-us/blog/hotforsecurity/whitearmor-gang-cyberattack-maersk</link><guid isPermaLink="false">https://www.bitdefender.com/en-us/blog/hotforsecurity/whitearmor-gang-cyberattack-maersk</guid><pubDate>Thu, 12 Nov 2026 15:12:29 +0000</pubDate><description>Graham Cluley, 6 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 79] Baker Tilly notifies clients of data breach at third-party provider</title><link>https://www.bleepingcomputer.com/news/security/baker-tilly-notifies-clients-of-data-breach-at-third-party-provider/</link><guid isPermaLink="false">https://www.bleepingcomputer.com/news/security/baker-tilly-notifies-clients-of-data-breach-at-third-party-provider/</guid><pubDate>Wed, 11 Nov 2026 23:01:31 +0000</pubDate><description>BleepingComputer, 6 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 79] Hackers Exploit Decade-Old OpenSSH Flaw to Bypass Linux Logins</title><link>https://hackread.com/hackers-exploit-old-openssh-bypass-linux-logins/</link><guid isPermaLink="false">https://hackread.com/hackers-exploit-old-openssh-bypass-linux-logins/</guid><pubDate>Wed, 11 Nov 2026 07:28:12 +0000</pubDate><description>Hackread, 20 source(s). On CISA KEV EPSS 0.19 Exploit public CVSS 8.1</description><category>flash</category><category>vulnerability</category><category>CVE-2026-123158</category></item><item><title>[FLASH 78] ARTEX: 916 Exposed AI Pentest Consoles Mapped in the U.S.</title><link>https://socradar.io/blog/artex-ai-pentest-consoles-us/</link><guid isPermaLink="false">https://socradar.io/blog/artex-ai-pentest-consoles-us/</guid><pubDate>Thu, 12 Nov 2026 14:55:03 +0000</pubDate><description>SOCRadar, 5 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 78] Vanderbilt restores systems after cyberattack as hackers claim data theft</title><link>https://www.malwarebytes.com/blog/news/2026/11/vanderbilt-restores-systems-after-cyberattack-as-hackers-claim-data-theft</link><guid isPermaLink="false">https://www.malwarebytes.com/blog/news/2026/11/vanderbilt-restores-systems-after-cyberattack-as-hackers-claim-data-theft</guid><pubDate>Wed, 11 Nov 2026 18:29:01 +0000</pubDate><description>Malwarebytes, 9 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 76] Hackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill</title><link>https://www.csoonline.com/article/4247578/hackers-stole-ai-credentials-to-get-740000-in-free-compute-railway-picked-up-the-bill.html</link><guid isPermaLink="false">https://www.csoonline.com/article/4247578/hackers-stole-ai-credentials-to-get-740000-in-free-compute-railway-picked-up-the-bill.html</guid><pubDate>Thu, 12 Nov 2026 02:53:41 +0000</pubDate><description>CSO Online, 6 source(s). </description><category>flash</category><category>incident</category></item><item><title>[FLASH 76] Hackers Exploit WordPress Core RCE Vulnerability in Over 240,000 Attack Attempts</title><link>https://gbhackers.com/exploit-wordpress-core-over-240000-attack/</link><guid isPermaLink="false">https://gbhackers.com/exploit-wordpress-core-over-240000-attack/</guid><pubDate>Sat, 07 Nov 2026 08:06:17 +0000</pubDate><description>GBHackers, 13 source(s). </description><category>flash</category><category>vulnerability</category></item><item><title>[HIGH 74] Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover</title><link>https://thehackernews.com/2026/11/critical-pre-auth-mongodb-flaw-cve-2026.html</link><guid isPermaLink="false">https://thehackernews.com/2026/11/critical-pre-auth-mongodb-flaw-cve-2026.html</guid><pubDate>Thu, 12 Nov 2026 09:25:00 +0000</pubDate><description>The Hacker News, 5 source(s). On CISA KEV Exploit public CVSS 9.5</description><category>high</category><category>vulnerability</category><category>CVE-2026-111560</category><category>CVE-2026-116606</category><category>CVE-2026-118383</category></item><item><title>[HIGH 73] Anthropic&#x27;s Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark</title><link>https://thehackernews.com/2026/11/anthropics-claude-fable-52-beats-gpt-6.html</link><guid isPermaLink="false">https://thehackernews.com/2026/11/anthropics-claude-fable-52-beats-gpt-6.html</guid><pubDate>Tue, 10 Nov 2026 08:16:14 +0000</pubDate><description>The Hacker News, 9 source(s). </description><category>high</category><category>vulnerability</category></item><item><title>[HIGH 71] Chainalysis says hackers stole credentials and tokens for all of its customers</title><link>https://arstechnica.com/security/2026/11/chainalysis-says-hackers-stole-credentials-and-tokens-for-all-of-its-customers/</link><guid isPermaLink="false">https://arstechnica.com/security/2026/11/chainalysis-says-hackers-stole-credentials-and-tokens-for-all-of-its-customers/</guid><pubDate>Mon, 09 Nov 2026 12:04:53 +0000</pubDate><description>arstechnica.com, 10 source(s). </description><category>high</category><category>incident</category></item><item><title>[HIGH 70] DigiCert Reports Data Breach Exposing Enterprise Customer Details and Identity Documents</title><link>https://the420.in/digicert-reports-data-breach-exposing-enterprise-customer-details-and-identity-documents/</link><guid isPermaLink="false">https://the420.in/digicert-reports-data-breach-exposing-enterprise-customer-details-and-identity-documents/</guid><pubDate>Sun, 08 Nov 2026 18:29:16 +0000</pubDate><description>The420.in, 8 source(s). </description><category>high</category><category>incident</category></item><item><title>[HIGH 69] CERT-In warns Android users to update phones over critical security flaws</title><link>https://www.indiatoday.in/technology/news/story/cert-in-warns-android-users-to-update-phones-over-critical-security-flaws-3033751-2026-11-06?utm_source=rss</link><guid isPermaLink="false">https://www.indiatoday.in/technology/news/story/cert-in-warns-android-users-to-update-phones-over-critical-security-flaws-3033751-2026-11-06?utm_source=rss</guid><pubDate>Fri, 06 Nov 2026 11:09:28 +0000</pubDate><description>India Today, 6 source(s). </description><category>high</category><category>incident</category></item><item><title>[HIGH 68] SAP patches critical ICM2SHELL, ProxyGate vulnerabilities</title><link>https://ciso.economictimes.indiatimes.com/news/vulnerabilities-exploits/sap-patches-critical-icm2shell-proxygate-vulnerabilities/135729733</link><guid isPermaLink="false">https://ciso.economictimes.indiatimes.com/news/vulnerabilities-exploits/sap-patches-critical-icm2shell-proxygate-vulnerabilities/135729733</guid><pubDate>Thu, 12 Nov 2026 02:32:00 +0000</pubDate><description>ETCISO, 5 source(s). </description><category>high</category><category>vulnerability</category></item><item><title>[HIGH 68] Italy Meloni blames pro - Russian hackers for leak of foreign minister data on the dark web</title><link>https://www.thestar.com.my/tech/tech-news/2026/11/09/italy039s-meloni-blames-pro-russian-hackers-for-leak-of-foreign-minister039s-data-on-the-dark-web</link><guid isPermaLink="false">https://www.thestar.com.my/tech/tech-news/2026/11/09/italy039s-meloni-blames-pro-russian-hackers-for-leak-of-foreign-minister039s-data-on-the-dark-web</guid><pubDate>Tue, 10 Nov 2026 03:00:00 +0000</pubDate><description>thestar.com.my, 5 source(s). </description><category>high</category><category>incident</category></item><item><title>[HIGH 65] Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts</title><link>https://techcrunch.com/2026/11/12/cyberattack-on-fireworks-ai-allowed-hackers-to-access-notion-customers-chat-transcripts/</link><guid isPermaLink="false">https://techcrunch.com/2026/11/12/cyberattack-on-fireworks-ai-allowed-hackers-to-access-notion-customers-chat-transcripts/</guid><pubDate>Thu, 12 Nov 2026 15:02:28 +0000</pubDate><description>TechCrunch, 9 source(s). </description><category>high</category><category>incident</category></item><item><title>[HIGH 65] Git fixes six vulnerabilities, including code execution during recursive clones</title><link>https://www.helpnetsecurity.com/2026/11/11/git-project-security-updates/</link><guid isPermaLink="false">https://www.helpnetsecurity.com/2026/11/11/git-project-security-updates/</guid><pubDate>Wed, 11 Nov 2026 14:26:12 +0000</pubDate><description>Help Net Security, 4 source(s). </description><category>high</category><category>vulnerability</category></item><item><title>[HIGH 64] Weak Passwords Expose SQL Servers to Cryptominer and Gh0st RAT</title><link>https://www.infosecurity-magazine.com/news/fortinet-sql-server-cryptominer/</link><guid isPermaLink="false">https://www.infosecurity-magazine.com/news/fortinet-sql-server-cryptominer/</guid><pubDate>Thu, 12 Nov 2026 16:00:00 +0000</pubDate><description>Infosecurity Magazine, 4 source(s). </description><category>high</category><category>campaign</category></item><item><title>[HIGH 62] Critical MongoDB Use-After-Free Vulnerability Allows Remote Code Execution Without Authentication</title><link>https://gbhackers.com/critical-mongodb-use-after-free-vulnerability/</link><guid isPermaLink="false">https://gbhackers.com/critical-mongodb-use-after-free-vulnerability/</guid><pubDate>Thu, 12 Nov 2026 12:24:27 +0000</pubDate><description>GBHackers, 3 source(s). </description><category>high</category><category>vulnerability</category></item><item><title>[HIGH 62] Hackers Target N-central Zero-Days as N-able Rushes Patches</title><link>https://www.securityweek.com/hackers-target-n-central-zero-days-as-n-able-rushes-patches/</link><guid isPermaLink="false">https://www.securityweek.com/hackers-target-n-central-zero-days-as-n-able-rushes-patches/</guid><pubDate>Thu, 12 Nov 2026 09:39:55 +0000</pubDate><description>SecurityWeek, 4 source(s). </description><category>high</category><category>vulnerability</category></item><item><title>[HIGH 61] APT29&#x27;s Watering Holes Target Thousands of Mobile Users</title><link>https://www.darkreading.com/mobile-security/apt29-watering-holes-target-mobile-users</link><guid isPermaLink="false">https://www.darkreading.com/mobile-security/apt29-watering-holes-target-mobile-users</guid><pubDate>Thu, 05 Nov 2026 20:05:39 +0000</pubDate><description>Dark Reading, 5 source(s). </description><category>high</category><category>campaign</category></item><item><title>[HIGH 60] Ca: York University Breach Exposes 19 Years of Student Health and Financial Data</title><link>https://databreaches.net/2026/11/11/ca-york-university-breach-exposes-19-years-of-student-health-and-financial-data/</link><guid isPermaLink="false">https://databreaches.net/2026/11/11/ca-york-university-breach-exposes-19-years-of-student-health-and-financial-data/</guid><pubDate>Wed, 11 Nov 2026 15:21:34 +0000</pubDate><description>DataBreaches.net, 8 source(s). </description><category>high</category><category>incident</category></item><item><title>[HIGH 58] OpenAI Launches GPT - 6 Cyber , New AI Model Designed To Detect Software Vulnerabilities , Test Security Risks &amp; Help Fix Flaws</title><link>https://www.freepressjournal.in/tech/openai-launches-gpt-6-cyber-new-ai-model-designed-to-detect-software-vulnerabilities-test-security-risks-help-fix-flaws</link><guid isPermaLink="false">https://www.freepressjournal.in/tech/openai-launches-gpt-6-cyber-new-ai-model-designed-to-detect-software-vulnerabilities-test-security-risks-help-fix-flaws</guid><pubDate>Fri, 06 Nov 2026 06:30:00 +0000</pubDate><description>freepressjournal.in, 5 source(s). </description><category>high</category><category>vulnerability</category></item><item><title>[HIGH 57] Iris Ohyama data breach may expose personal information of 7.7 million people</title><link>https://securityaffairs.com/202740/data-breach/iris-ohyama-data-breach-may-expose-personal-information-of-7-7-million-people.html</link><guid isPermaLink="false">https://securityaffairs.com/202740/data-breach/iris-ohyama-data-breach-may-expose-personal-information-of-7-7-million-people.html</guid><pubDate>Tue, 10 Nov 2026 06:28:06 +0000</pubDate><description>Security Affairs, 4 source(s). </description><category>high</category><category>incident</category></item><item><title>[HIGH 56] Recently Patched Barracuda Vulnerabilities Exploited in Attacks</title><link>https://www.securityweek.com/recently-patched-barracuda-vulnerabilities-exploited-in-attacks/</link><guid isPermaLink="false">https://www.securityweek.com/recently-patched-barracuda-vulnerabilities-exploited-in-attacks/</guid><pubDate>Wed, 11 Nov 2026 07:53:51 +0000</pubDate><description>SecurityWeek, 3 source(s). </description><category>high</category><category>vulnerability</category></item><item><title>[HIGH 56] SonicWall releases patches for 7 flaws in its firewalls, most involving unauthenticated access</title><link>https://www.csoonline.com/article/4246479/sonicwall-releases-patches-for-7-flaws-in-its-firewalls-most-involving-unauthenticated-access.html</link><guid isPermaLink="false">https://www.csoonline.com/article/4246479/sonicwall-releases-patches-for-7-flaws-in-its-firewalls-most-involving-unauthenticated-access.html</guid><pubDate>Tue, 10 Nov 2026 02:36:14 +0000</pubDate><description>CSO Online, 11 source(s). On CISA KEV</description><category>high</category><category>vulnerability</category><category>CVE-2026-19868</category></item></channel></rss>
