Cybersecurity briefing, 2026-11-07

An Alpine OpenSSH flaw reached root on a honeypot less than nine hours after disclosure.

• OpenSSH flaw reaches root before daemon restart
• Plex2Shell puts QNAP NAS storage at risk
• SonicWall SSL-VPN flaw exploited to bypass MFA
• FBI and CISA warn refrigeration attacks could threaten food safety
• WordPress upgrade window opens a path to server code
• Trojanized CWP server spreads a Linux backdoor
• Copeland XWEB attacks reach British food suppliers
• Agentic tools steal Azure Key Vault data from GitHub secrets
• DigiCert archive access exposed customer records and IDs
• InfaticaSDK proxy exits blur White House traffic attribution
• Barracuda flaws make reachable admin interfaces a root path
• GPT-6 Cyber’s exploit gains test its guardrails
• Chainalysis role labels sharpen the target for reset scams
• Rails upload flaw can expose secrets beyond the server

Recent editions

• Friday, November 6, 2026: GPT-6 Cyber’s exploit gains test its guardrails · 19 stories
• Thursday, November 5, 2026: APT29's Plerdy tracker compromise reached hundreds of sites · 20 stories
• Wednesday, November 4, 2026: WordPress upgrade window opens a path to server code · 19 stories
• Tuesday, November 3, 2026: Node-RED attacks add persistent command backdoors · 18 stories
• Monday, November 2, 2026: Ivanti's second patch closes the chain, not prior exposure · 20 stories
• Sunday, November 1, 2026: DebugBear snippet let attackers trade through Polymarket sessions · 6 stories
• Saturday, October 31, 2026: PAN-OS PHP2Shell chain stole Active Directory credentials · 16 stories