Cybersecurity briefing, 2026-11-08

Attackers are exploiting a SonicWall SonicOS flaw that can bypass authentication on SSL-VPN.

• CISA widens the SSHole story to four exploited flaws
• Langflow exploitation widens Microsoft-linked credential theft
• SonicWall SSL-VPN bypass now faces reported active exploitation

Recent editions

• Saturday, November 7, 2026: GPT-6 Cyber’s exploit gains test its guardrails · 13 stories
• Friday, November 6, 2026: CISA widens the SSHole story to four exploited flaws · 19 stories
• Thursday, November 5, 2026: APT29's Plerdy tracker compromise reached hundreds of sites · 20 stories
• Wednesday, November 4, 2026: WordPress upgrade window opens a path to server code · 19 stories
• Tuesday, November 3, 2026: Node-RED attacks add persistent command backdoors · 18 stories
• Monday, November 2, 2026: Ivanti's second patch closes the chain, not prior exposure · 20 stories
• Sunday, November 1, 2026: DebugBear snippet let attackers trade through Polymarket sessions · 6 stories