Cybersecurity briefing, 2026-11-13

GPUStack managers running versions before 2.2.0 are exposed to an authentication bypass.

• GPUStack's localhost spoofing skips authentication on exposed managers
• ScreenConnect malware spreads through technicians’ support sessions
• GitHub account hijacks put CI secrets at risk
• Cairn scales tailored intrusions across 19 organizations
• Quay signing flaw lets attackers mint registry-wide tokens
• XWEB EVO configuration flaw exploited within 100 minutes
• Fireworks AI breach reaches customer billing and model assets
• PHP2Shell chain leaves Check Point gateways with root footholds
• eMudhra revokes eight more CAs after key-transfer failure
• GSocket keeps Linux server access alive after patching
• Silent Lynx used one rail account to reach government files
• N-able N-central returns online with remote control paused
• PHP and Node.js runtime flaws put every app at risk
• Apache HTTP/2 code-execution claim remains disputed
• Maersk confirms legacy-system theft as WhiteArmor’s haul remains unverified
• Poisoned coding agents can misuse their granted tools
• SilentAir hijacks Asian carriers to intercept calls and texts
• Ivanti Endpoint Manager SQL flaw puts Core at code-execution risk
• Citrix flaws threaten NetScaler services and access
• Microsoft 365 outage hit email and security visibility

Recent editions

• Thursday, November 12, 2026: ScreenConnect malware spreads through technicians’ support sessions · 20 stories
• Wednesday, November 11, 2026: Apple patches pairing flaws, but Brotli remains elsewhere · 20 stories
• Tuesday, November 10, 2026: N-able N-central returns online with remote control paused · 20 stories
• Monday, November 9, 2026: SAP NetWeaver flaw fuels webshell planting and searches · 19 stories
• Sunday, November 8, 2026: CISA widens the SSHole story to four exploited flaws · 3 stories
• Saturday, November 7, 2026: GPT-6 Cyber’s exploit gains test its guardrails · 13 stories
• Friday, November 6, 2026: CISA widens the SSHole story to four exploited flaws · 19 stories