watchTowr chained a login-handler bypass, a crafted backup restore and a timezone-field injection to root on Barracuda ESG. Patches shipped 2 November; five more products carry the root flaw.
WorkOS says a benchmark run of the ARTEX offensive-security agent reached an exposed internal tool and bulk-pulled CRM and support data. The timeline, the data and the four basic gaps.
A user with credentials for an alternate auth method can bypass SAML and its MFA on SonicOS Gen7 and Gen8 SSL VPN. CISA added it to KEV on 6 November with a 20 November deadline.
CVE-2026-123158 lets some accounts accept any 257–1024 character password when sshd runs on musl without PAM. Who is exposed, Alpine's fixed packages and how to check.
For about 11 hours on 29 October, Cursor's marketplace served tampered anthropic.claude-code builds 2.1.312 and 2.1.313. The SSH key, tunnel, persistence and how to remove them.