Sun 8 Nov · updated 15:30 UTC
Today in security
Today’s briefing
07:00 UTC edition
SonicWall releases fixes for exploited SAML bypass flaw
SonicWall has released fixes for a SonicOS flaw that could let attackers with alternative login credentials bypass SAML checks and potentially defeat SAML-enforced multi-factor authentication. The vulnerability was already added to CISA's Known Exploited Vulnerabilities catalogue, the lead development in Saturday's edition; SecurityWeek cited potential exploitation, but did not confirm attacks. QNAP also warned that attackers may have compromised network-attached storage devices through a chain of Plex Media Server flaws previously described as actively exploited.
Known exploited6
CISA KEV entries named in the last 48 hours of coverage, by federal deadline
- In CISA KEV
SonicWall SonicOS SSLVPNCVE-2026-19868
Federal deadline 20 Nov · In CISA KEV since 6 Nov
Not scored0.6% EPSS5 articles
- In CISA KEV
WordPress CoreCVE-2026-119977
Federal deadline passed 6 Nov · In CISA KEV since 3 Nov
8.1High1.2% EPSS4 articles
- In CISA KEV
Plex Media ServerCVE-2026-96652
Federal deadline passed 3 Nov · In CISA KEV since 20 Oct
5.3Medium12% EPSS6 articles
- In CISA KEV
Plex Media ServerCVE-2026-96655
Federal deadline passed 3 Nov · In CISA KEV since 20 Oct
5.3Medium11% EPSS6 articles
Show 2 more · federal deadlines passed
- In CISA KEV
Plex Media ServerCVE-2026-96654
Federal deadline passed 23 Oct · In CISA KEV since 20 Oct
6.9Medium1.9% EPSS7 articles
- In CISA KEV
Plex Media ServerCVE-2026-96656
Federal deadline passed 23 Oct · In CISA KEV since 20 Oct
8.6High1.8% EPSS7 articles
Latest news8
The last 24 hours, newest first; stories about known exploited CVEs are above
Latest story at 14:24 UTC.
- 14:24 UTC. Security Affairs rounds up global malware research and threats. 1 outlet.
- 13:48 UTC. APT29 watering hole attacks target mobile users. 1 outlet.
- 12:14 UTC. Brava Security Launches With $15 Million in Seed Funding. 1 outlet.
- 10:25 UTC. Attackers steal up to €118 million from French bank Arkéa. 1 outlet.
- 06:45 UTC. Web3Auth security incident hits Keplr wallets made with Google login. 1 outlet.
- 20:46 UTC. Gnosis Pay data breach links card holders' homes to crypto wallets. 1 outlet.
- 19:56 UTC. Hunt.io traces ARTEX tools to breaches at South Korean banks. 1 outlet.
- 16:45 UTC. Technical University of Munich data breach exposes TUM passwords. 1 outlet.
- CVE not in KEV
- Other story
- Size: outlets on the story
- Stories an hour
Show as tableHide table
| Time (UTC) | Story | Outlets | Type |
|---|---|---|---|
| 14:24 | Security Affairs rounds up global malware research and threats | 1 | Other |
| 13:48 | APT29 watering hole attacks target mobile users | 1 | Other |
| 12:14 | Brava Security Launches With $15 Million in Seed Funding | 1 | Other |
| 10:25 | Attackers steal up to €118 million from French bank Arkéa | 1 | Other |
| 06:45 | Web3Auth security incident hits Keplr wallets made with Google login | 1 | Other |
| 20:46 | Gnosis Pay data breach links card holders' homes to crypto wallets | 1 | Other |
| 19:56 | Hunt.io traces ARTEX tools to breaches at South Korean banks | 1 | Other |
| 16:45 | Technical University of Munich data breach exposes TUM passwords | 1 | Other |
- Security Affairs rounds up global malware research and threats
Security Affairs’ Malware Newsletter Round 122, published by Pierluigi Paganini on 8 November 2026, presents a curated collection of malware-focused articles and research from the international threat landscape. The…
Security Affairs
- APT29 watering hole attacks target mobile users
Security Affairs published its 603rd weekly newsletter on 8 November 2026, bringing together cybersecurity stories and links to international coverage. The roundup spans cybercrime, malware, hacking, intelligence and…
Security Affairs
- Brava Security Launches With $15 Million in Seed Funding
Brava Security has emerged from stealth with $15 million in seed funding, led by F2 Venture Capital and Pitango VC, with participation from several angel investors, SecurityWeek reports. The Tel Aviv-based startup,…
SecurityWeek
- Attackers steal up to €118 million from French bank Arkéa
Crédit Mutuel Arkéa disclosed that a cyberattack leveraged a service provider to move fraudulent transfers from the bank’s own account to other financial institutions, with the bank indicating that customer assets were…
Security Affairs
- Web3Auth security incident hits Keplr wallets made with Google login
Keplr says a vulnerability in Web3Auth's infrastructure exposed private keys of some Google and Apple login wallets. Web3Auth is moving funds out of exposed wallets before the attacker can, so some balances show empty…
CyberSIXT
- Gnosis Pay data breach links card holders' homes to crypto wallets
Gnosis Pay says attackers reached the legacy system behind its own-brand cards on November 3. One customer's breach email lists home address, full card number with CVV and every linked wallet; the company says exposed…
CyberSIXT
- Hunt.io traces ARTEX tools to breaches at South Korean banks
Hunt[.]io has traced ARTEX, an open‑source AI hacking framework, to a campaign in which seven South Korean financial institutions suffered data breaches between late September and early October 2026. The intrusions…
Security Affairs
- Technical University of Munich data breach exposes TUM passwords
Attackers stole the central login passwords of everyone registered with TUM's myTUM portal and used a system administrator's to attack its campus management system, TUMonline. Accounts with multi-factor authentication…
CyberSIXT
