Blog
CVE-2026-58868: Critical Android Zero-Click RCE in November 2026 Bulletin — Patch Your Mobile Fleet Now
Google's November 2026 Android bulletin patches 216 CVEs including CVE-2026-58868, a Critical zero-interaction RCE in the Android Framework. Here's what enterprise IT teams in India must do now.
Read More →CVE-2026-123158 (“SSHole”): OpenSSH Authentication Bypass Exploited in Under 9 Hours — Patch Alpine Linux Now
CVE-2026-123158 (SSHole) lets attackers bypass SSH authentication on Alpine Linux. Exploited in
Read More →CVE-2026-116606 & CVE-2026-111560 (CVSS 9.3+8.6): Pre-Auth Root Exploit Chain on Barracuda ESG — Patch Six Products Now
CVE-2026-116606 (CVSS 9.3) and CVE-2026-111560 (CVSS 8.6) chain into unauthenticated root access on Barracuda ESG, WAF, ADC and four more products. Patch to build 9.4.0.030 now.
Read More →CVE-2026-19868 (CVSS 7.1): SonicWall SSLVPN SAML MFA Bypass Actively Exploited — Patch Gen 7 and Gen 8 Firewalls Now
CISA added CVE-2026-19868 to its KEV catalog on 6 November 2026. SonicWall SSLVPN SAML MFA bypass affects Gen7 and Gen8 firewalls. No workaround — patch to 7.3.4-7013 / 8.2.3-8015 now.
Read More →Crédit Mutuel Arkéa €100 Million Cyber Heist: Supply Chain Attack Puts Every Bank’s Vendor Trust on Trial
French bank Crédit Mutuel Arkéa lost €100M in a supply chain cyberattack via a trusted third-party vendor. Here’s the attack breakdown and what Indian BFSI security teams must do now.
Read More →CERT-In Alert CIAD-2026-0058: AI-Powered ‘Crafty Falcon’ Campaign Hits Indian Banks, NBFCs & Fintechs — Your SOC Action Plan
CERT-In’s Critical advisory CIAD-2026-0058 warns that AI-assisted threat actor Crafty Falcon is using PentAGI, CyberStrikeAI, and ARTEX tools to drain Indian BFSI payment APIs. Here’s your defence playbook.
Read More →CVE-2026-107441 (CVSS 8.8): Zyxel GS1900 Zero-Day Bypasses June Patch — Chinese APT Red Heron Compromised 996 Switches in 48 Countries
CVE-2026-107441 bypasses Zyxel's June patch — Chinese APT Red Heron compromised 996 GS1900 switches in 48 countries. Patch 3 firmware is the only fix. Act now.
Read More →cPGuard Update Channel Hijacked: 2,950 Linux Servers Backdoored in Supply-Chain Attack — What You Must Do Now
Attackers hijacked OpsShield’s cPGuard CDN on Nov 2, 2026, backdooring ~2,950 Linux servers and stealing SSH keys, password hashes, and billing data for 7,900 accounts. Full response checklist inside.
Read More →CVE-2026-119977 (CVSS 8.1): WordPress Core Upgrade Race Condition Enables RCE — CISA Orders Federal Patch by 6 November
CVE-2026-119977: WordPress Core TOCTOU race condition allows unauthenticated RCE during updates. CISA KEV listed, federal deadline 6 Nov 2026. Patch to 7.1.4 now.
Read More →CVE-2026-98432 (CVSS 9.8): Linux Kernel TCP Use-After-Free Enables Remote Root — Is Your Server Patched?
CVE-2026-98432, a CVSS 9.8 use-after-free in the Linux kernel TCP stack, enables unauthenticated remote root access. Patch status for RHEL, Ubuntu, Debian — plus expert mitigations for Indian enterprises.
Read More →