https://vulnpocalypse.dev/advisories/openssh-alpine-musl-password-auth-bypass/ Vulnpocalypseen 2026-11-05 OpenSSH password bypass on Alpine and musl without PAM: locked accounts accept long passwords https://vulnpocalypse.dev/advisories/hyflock-ransomware-rust-windows-encryptor-with-build-specific-flaws-that-affect/ Vulnpocalypseen 2026-11-05 HYFLOCK ransomware: Rust Windows encryptor with build-specific flaws that affect recovery https://vulnpocalypse.dev/advisories/zyxel-gs1900-switch-zero-day-cve-2026-107441-lets-attackers-run-root-commands-be/ Vulnpocalypseen 2026-11-04 Zyxel GS1900 switch zero-day CVE-2026-107441 lets attackers run root commands before login, now patched https://vulnpocalypse.dev/advisories/suntory-data-breach/ Vulnpocalypseen 2026-11-04 Suntory says data on around 100,000 people exposed through unauthorized access to a group cloud service https://vulnpocalypse.dev/advisories/stolen-entra-id-app-credentials-and-azure-devops-identities-used-to-breach-27-or/ Vulnpocalypseen 2026-11-04 Stolen Entra ID app credentials and Azure DevOps identities used to breach 27 organizations https://vulnpocalypse.dev/advisories/sonicwall-will-not-patch-two-flaws-in-end-of-life-gms-952-and-earlier-including/ Vulnpocalypseen 2026-11-04 SonicWall will not patch two flaws in end-of-life GMS 9.5.2 and earlier, including unauthenticated file read https://vulnpocalypse.dev/advisories/sogou-input-method-update-hijack-installs-darkvigil-backdoor-update-to-1610-cve/ Vulnpocalypseen 2026-11-04 Sogou Input Method update hijack installs DarkVigil backdoor; update to 16.10 (CVE-2026-120422) https://vulnpocalypse.dev/advisories/slippynunchucks-hijacks-sogou-input-method-dns-requests-to-deploy-darkvigil-back/ Vulnpocalypseen 2026-11-04 SlippyNunchucks hijacks Sogou Input Method DNS requests to deploy DarkVigil backdoor https://vulnpocalypse.dev/advisories/residential-proxy-traffic-white-house-eop-network-as2650/ Vulnpocalypseen 2026-11-04 Residential proxy traffic seen exiting the White House (EOP) network AS2650, a threat-intel vendor reports https://vulnpocalypse.dev/advisories/nsw-health-cyber-breach/ Vulnpocalypseen 2026-11-04 NSW Health breach: dentist provider details stolen from Oral Health scheme site, police investigating https://vulnpocalypse.dev/advisories/michigan-state-university-byod-ransomware/ Vulnpocalypseen 2026-11-04 Michigan State University is investigating a cyber incident after the BYOD ransomware gang listed it on its leak site https://vulnpocalypse.dev/advisories/fake-gta-vi-download-sites-push-malware-and-crypto-scams-ahead-of-the-november-1/ Vulnpocalypseen 2026-11-04 Fake GTA VI download sites push malware and crypto scams ahead of the November 19 launch https://vulnpocalypse.dev/advisories/dreamhost-breach-file-manager-flaw-exposed-ftpsftp-logins-and-webmail-sessions/ Vulnpocalypseen 2026-11-04 DreamHost breach: File Manager flaw exposed FTP/SFTP logins and webmail sessions https://vulnpocalypse.dev/advisories/debian-and-ubuntu-apt-flaw-cve-2026-109518-lets-a-mitm-swap-verified-packages-an/ Vulnpocalypseen 2026-11-04 Debian and Ubuntu APT flaw CVE-2026-109518 lets a MitM swap verified packages and run code as root https://vulnpocalypse.dev/advisories/cryptopayment-gateway-flaw-exploited/ Vulnpocalypseen 2026-11-04 Unpatched CryptoPayment Gateway WordPress plugin exploited: unauthenticated attackers can read wallet credentials in cleartext https://vulnpocalypse.dev/advisories/critical-rails-active-storage-flaw-lets-crafted-imagemagick-uploads-write-server/ Vulnpocalypseen 2026-11-04 Critical Rails Active Storage flaw lets crafted ImageMagick uploads write server files https://vulnpocalypse.dev/advisories/beget-hosting-cyberattack-wipes-cloud-data-vps-and-kubernetes-backups-lost/ Vulnpocalypseen 2026-11-04 Beget hosting cyberattack wipes cloud data, VPS and Kubernetes backups lost https://vulnpocalypse.dev/advisories/apt29-watering-hole-campaign-serves-n-day-ios-and-android-exploits-via-hacked-si/ Vulnpocalypseen 2026-11-04 APT29 watering hole campaign serves n-day iOS and Android exploits via hacked sites and Plerdy https://vulnpocalypse.dev/advisories/amadeus-incident-exposes-booking-data-at-singapore-airlines-cathay-pacific-japan/ Vulnpocalypseen 2026-11-04 Amadeus incident exposes booking data at Singapore Airlines, Cathay Pacific, Japan Airlines and other Asian https://vulnpocalypse.dev/advisories/workos-artex-ai-breach/ Vulnpocalypseen 2026-11-03 WorkOS says an attacker used the ARTEX AI agent to breach an internal sales app https://vulnpocalypse.dev/advisories/node-red-cve-2026-58115/ Vulnpocalypseen 2026-11-03 Critical Node-RED flaw CVE-2026-58115 exploited in the wild to run code on exposed instances https://vulnpocalypse.dev/advisories/ncsc-warns-ai-powered-ransomware-is-highly-likely-to-hit-uk-critical-infrastruct/ Vulnpocalypseen 2026-11-03 NCSC warns AI-powered ransomware is highly likely to hit UK critical infrastructure by 2028 https://vulnpocalypse.dev/advisories/gorbag-apt-winrar-exploit/ Vulnpocalypseen 2026-11-03 Russia-aligned Gorbag hackers exploit a WinRAR flaw to drop BeautyStealer on Ukrainian courts and city councils https://vulnpocalypse.dev/advisories/fake-software-downloads-deliver-trojanized-inno-installers-that-monetize-windows/ Vulnpocalypseen 2026-11-03 Fake software downloads deliver trojanized Inno installers that monetize Windows PCs https://vulnpocalypse.dev/advisories/cpguard-update-channel-hijacked-to-backdoor-linux-hosting-servers-and-steal-cred/ Vulnpocalypseen 2026-11-03 cPGuard update channel hijacked to backdoor Linux hosting servers and steal credentials https://vulnpocalypse.dev/advisories/cloudflare-launches-zero-wire-a-public-hub-for-triaging-critical-internet-vulner/ Vulnpocalypseen 2026-11-03 Cloudflare launches Zero Wire, a public hub for triaging critical Internet vulnerabilities https://vulnpocalypse.dev/advisories/chrome-157-fixes-213-security-bugs-7-rated-critical-in-desktop-and-android-build/ Vulnpocalypseen 2026-11-03 Chrome 157 fixes 213 security bugs, 7 rated critical, in desktop and Android builds https://vulnpocalypse.dev/advisories/cert-in-gets-access-to-anthropics-claude-mythos-to-test-vulnerabilities-after-ro/ Vulnpocalypseen 2026-11-03 CERT-In gets access to Anthropic's Claude Mythos to test vulnerabilities after rogue AI agent intrusions https://vulnpocalypse.dev/advisories/barracuda-email-security-gateway-root-access-flaws/ Vulnpocalypseen 2026-11-03 Barracuda warns of critical flaws that chain to root access on Email Security Gateway and other appliances https://vulnpocalypse.dev/advisories/3am-ransomware-encrypts-37-machines-in-uk-school-estate-in-suspected-ai-assisted/ Vulnpocalypseen 2026-11-03 3AM ransomware encrypts 37 machines in UK school estate in suspected AI-assisted attack