I explain cybersecurity news, active attacks, privacy, surveillance technology, vulnerabilities, and OSINT in plain English, then give my independent analysis.
North AmericaEuropeMiddle EastEast AsiaOceaniaCurrent entries from CISA’s official Known Exploited Vulnerabilities catalog. These are confirmed weaknesses attackers have used, not simulated attack-map traffic.
GPUStack Improper Authentication Vulnerability
GPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml.OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability
OpenBSD OpenSSH on Linux contains an unexpected status code or return value vulnerability that could allow for authentication bypass.SignalWire FreeSwitch Code Injection Vulnerability
SignalWire FreeSwitch contains a code injection vulnerability that permits configuration and credential disclosure, arbitrary call control, and command execution.IBM Aspera Faspex Incorrect Authorization Vulnerability
IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an authenticated user to craft a specific message to bypass authorization, causing privilege escalations.SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).Apple Multiple Products Improper Authentication Vulnerability
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.“Live” means the feed updates from current public reporting. It does not identify every attack or prove the physical location of an attacker.
Each section answers a different question. Start with the one that sounds most useful to you.
Read the daily blog for verified facts, technical context, and independent opinion.
BLOG & ANALYSIS 02Understand important security updates and which ones matter first.
PATCH TUESDAY 03Use trusted public tools to research threats, breaches, and exposure.
OSINT TOOLS 04Learn common cybersecurity terms without technical jargon.
LEARN CYBERNovember 10, 2026 · Critical Infrastructure
France has formally attributed the October sabotage of refrigeration controllers at about 700 French sites to the Shahid Kaveh cyber unit, which it says operates under Iran's Islamic Revolutionary Guard Corps. Authorities report major food losses, at least 15 fires, and related targeting of food facilities and small hydroelectric installations.
READ THE FULL POST & OPINION