Attackers are exploiting two Barracuda flaws that chain to root on Email Security Gateway appliances, and CISA has given US federal agencies until 13 November to act. Railway's incident report puts unauthorised AI usage from keys stolen in its October breach at an estimated US$740,000, and the VCAA website was hacked during Victoria's exam period. Microsoft Research showed a model backdoor made by editing fewer than ten neurons.
Global threats
- Barracuda authorisation bypass and command injection exploited (CVE-2026-116606, CVSS 9.3; CVE-2026-111560, CVSS 8.6). Bypass needs no login, but the Admin UI must be reachable (ESG only; Barracuda revised this wording on 5 November); command injection needs administrative access and affects ESG, Load Balancer ADC, Message Archiver, WAF Control Center, WAF and Web Security Gateway; chained from an exposed Admin UI, they give root. Barracuda (update 9 November 2026 EST) reports exploitation affecting a small number of organisations. Added to CISA KEV 10 November 2026, forensic triage required, federal due date 13 November 2026. Patches: ESG BNSF-40425 (firmware 9.4.017 and later) or BNSF-40430 (earlier than 9.4.017); ADC and WAF BNADC-16586; BMA BNMA-32468; WCC BNWF-60060; WSG BNYF-24789. Restrict Admin UI to trusted internal networks. KEV references Mandiant advisories MNDT-2026-0041 and MNDT-2026-0042. Barracuda advisory; CISA KEV
- N-able N-central 2026.4 Hotfix 2 released (update to Able2Shell, 10 November 2026, US time). Build 2026.4.1.26 fixes CVE-2026-125883, CVE-2026-125881, CVE-2026-125878, CVE-2026-125879, CVE-2026-125882, CVE-2026-91000 and CVE-2026-125880; affected: versions before 2026.4.1. Hosted servers upgraded; on-premises servers stay offline until upgraded; upgrade Agents before Probes; built-in remote control temporarily disabled; a further hotfix is planned. Scanning reported, no confirmed customer compromise. Tenable FAQ; BleepingComputer; Infosecurity
- Cisco BroadWorks XXE (CVE-2026-20320, CVSS 7.5) and Openwave Webtop Media Transcoder (CVE-2026-111793) added to KEV (10 November 2026). BroadWorks: unauthenticated read of configuration files; advisory first published 19 August 2026; fixed from release RI.2026.07; no workarounds. Openwave: an authenticated attacker uploading a crafted file may obtain sensitive information; fixed in Webtop Media Transcoder 1.1.22.0 (JVN published 9 November 2026, rated Critical; developer reports observed attacks). Federal due date 24 November 2026. Cisco advisory; JVN JVNVU#93403064; Openwave advisory; SecurityWeek
- Zoom Workplace for Windows privilege escalation (CVE-2026-108186, CVSS 9.6; CVE-2026-108187, CVSS 8.1). Not reported exploited. CVE-2026-108186 (ZSB-26023) is network-reachable without authentication but requires user interaction. Affected: CVE-2026-108186, 7.1.0 to before 7.1.8; CVE-2026-108187, before 7.1.5. Fixed: 7.1.8 or later. Zoom ZSB-26023; The Hacker News
- Git recursive-clone code execution (CVE-2026-111760). Index path-length integer truncation lets a malicious repository redirect a submodule's .git to attacker hooks; requires cloning with --recurse-submodules. Fixed (10 November 2026): 2.56.1, with 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1 and 2.55.1. Git for Windows had no 2.56.1-based release as of 10 November 19:09 UTC (per The Hacker News). GitHub Blog; oss-security
- eMudhra revokes eight more intermediate CAs (7 November 2026). RSA intermediates (six TLS, two other) revoked because eMudhra cannot show compliant key handling by the script behind its October compromise; keys not shown to be weak. Mozilla Bugzilla 2083449; The Hacker News
Australian focus
- VCAA website hacked during Victoria's exam period (11 November 2026). VCAA is running a forensic investigation and says there is no indication exam papers were accessed. The attacker's claims (papers taken from a printing provider's file servers and sold to students; email details from a legal services provider) are unverified. Exams run to 18 November. ABC News
- Parks Victoria pauses new campsite bookings after Bookeasy breach (11 November 2026). Suspicious WhatsApp messages sent to customers; Parks Victoria does not use WhatsApp. Existing bookings remain valid. Parks Victoria via Mirage News
AI security
- Railway incident report: stolen AI keys, about US$740,000 unauthorised usage (10 November 2026). Build-infrastructure flaw, over-trusted build credential, misconfigured identity binding, then a decryption credential; variables decrypted in at most 1.85% of workspaces (about 100,000); linked-account tokens for 1,852 users reset. Railway will cover charges providers don't refund. Railway incident report; iTnews
- Microsoft Research "Lazarus": backdooring agents by editing fewer than ten dormant neurons. In recorded tests with a harmless marker command, seven edited neurons in Nemotron-Terminal-8B emitted it on at least 98.8% of held-out trigger runs and on no benign runs (in free generation, one setup emitted it in 0.14% of no-trigger sessions, per The Hacker News); rates measure command emission, not completed attacks; requires write access to weights; Microsoft says not seen in use (per The Hacker News). Microsoft Research; Microsoft Security Blog; The Hacker News
- AntiFox agentic pentest platform used in IIS and AWS intrusions (Arctic Wolf, 10 November 2026). Alibaba Cloud-hosted instances. One pattern: ASPX web shells, web.config credential harvesting, wide AWS enumeration, one successful GetSecretValue on a production secret. Other cases began with valid AWS credentials obtained by unknown means; one involved S3 reads, copies and deletes. BleepingComputer; The Hacker News
- Claroc: 35,578 of 37,571 online Grok app addresses found via passive DNS open without sign-in (10 November 2026). Claroc tried 43,551 addresses, of which 37,571 were still online. "Anyone with the link" was preselected in the account tested; about one in ten held business or personal data; 24 staff apps from SpaceXSI and X taken down. Claroc
- NEAR AI breached through SGLang RCE (disclosed 9 November 2026). Code ran on one TEE-hosted inference server; on 8 November the attacker could have observed requests processed on that server, including confidential ones; account details of about 100 users and data from 18 legacy agents accessed; two Cloud customers' API keys exposed in logs and revoked (company figures). NEAR AI incident report
Patch priorities
- Critical: Barracuda ESG and appliances (exploited); N-able N-central on-premises (Hotfix 2 before reconnecting).
- High: Cisco BroadWorks and Openwave (exploited); Zoom Workplace for Windows; Git on build systems.
- Watch: VCAA investigation; Bookeasy breach scope; further N-central hotfix.