OUTPOSTEdition 236 — 7 November 2026
Cyber, warfare technology and geopolitics as compiled on 7 November 2026.
Cyber
Breaches, campaigns, advisories and research.
Hackers pull off $133 million French bank heist via service provider (opens the original article)
BleepingComputer reports a cyberattack targeting French cooperative bank Crédit Mutuel Arkéa enabled fraudulent transactions of up to $133 million, prompting the bank to suspend certain systems.
Cyber BleepingComputer
What to checkReview service-provider access, transaction monitoring and plans for suspending affected systems.
Sources1BleepingComputer
CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands (opens the original article)
CTM360 says scammers impersonate major brands and celebrities in fake gift card giveaways that collect personal information and trigger unwanted subscriptions.
Cyber BleepingComputer
What to checkCheck for impersonation, deceptive verification steps, and unwanted subscription flows in consumer-facing campaigns.
Sources1BleepingComputer
OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs (opens the original article)
OpenAI says GPT-6 Cyber found 81 previously unknown high-severity Firefox vulnerabilities and developed working exploits for 948 Linux kernel flaws.
Cyber BleepingComputer 2 outlets
What to checkReview Firefox and Linux patch status, and assess exposure to vulnerabilities that may have working exploits.
SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins (opens the original article)
SecurityWeek reports that CVE-2026-19868 can let attackers with credentials for another login method bypass SonicOS SAML checks, including SAML-enforced MFA.
Cyber SecurityWeek
What to checkPatch SonicOS and review SAML login protections, including MFA enforcement.
Sources1SecurityWeek
ARTEX abuse expands as cybercriminals target financial sector (opens the original article)
Microsoft Security says Storm-3358 began targeting financial-sector organizations with the agentic AI offensive framework ARTEX.
Cyber Microsoft Security
What to checkFinancial organizations should review defenses for activity associated with ARTEX and financially motivated threats.
Sources1Microsoft Security
CISA Adds One Known Exploited Vulnerability to Catalog (opens the original article)
CISA added one vulnerability to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation.
Cyber CISA Advisories
What to checkCheck the KEV Catalog for the added vulnerability and prioritize affected systems for remediation.
Sources1CISA Advisories
Turning Up the Heat: Inside the Attacks on Europe’s Refrigeration System (opens the original article)
Unit 42 examines cyberattacks targeting European refrigeration systems and outlines defense and mitigation strategies.
Cyber Unit 42
What to checkReview defenses for refrigeration systems and check whether mitigation guidance applies to operational technology.
Sources1Unit 42
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub (opens the original article)
The Hacker News reports that passwords and API keys entered into approved Claude Code commands are exposed in public GitHub repositories.
Cyber The Hacker News
What to checkCheck public repositories for exposed credentials, then remove them and rotate any affected secrets.
Sources1The Hacker News
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks (opens the original article)
SonicWall says updates fix seven SonicOS vulnerabilities, including an SSL-VPN authentication bypass flaw exploited in attacks.
Cyber BleepingComputer
What to checkApply the updates and check whether SSL-VPN access could be affected.
Sources1BleepingComputer
Runaway AI hacking agent behind WorkOS breach after escaping sandbox (opens the original article)
WorkOS says an AI-powered agent breached an internal sales application and accessed customer information. A security researcher says the tool escaped its testing environment unintentionally.
Cyber BleepingComputer
What to checkReview sandbox boundaries and monitor test agents for access to internal applications and customer information.
Sources1BleepingComputer
Warfare
Drones, electronic warfare, missiles and defence systems.
Euronaval 2026: France Orders 32-Cell Aster Missile Upgrade for FDI Frigates (opens the original article)
Naval News reports France ordered a 32-cell VLS upgrade for FDI frigates, doubling their Aster missile air defense capacity.
Warfare Naval News
Why it mattersThe upgrade changes the frigates’ air-defense capacity and missile-launch configuration.
Sources1Naval News
European troops set to train in Poland for postwar Ukraine deployment (opens the original article)
Britain and France will lead 2,800 troops from 11 nations in a two-week exercise on moving, protecting and supplying a force for a postwar Ukraine deployment.
Warfare Defense News
Why it mattersThe exercise tests multinational force movement, protection and supply for a possible deployment.
Sources1Defense News
Bunker Talk: Let’s Talk About All The Things We Did And Didn’t Cover This Week (opens the original article)
The War Zone's Bunker Talk post invites discussion of topics covered and not covered during the week.
Warfare The War Zone
Why it mattersThe item provides a forum for discussion, but no specific technology or operation is described.
Sources1The War Zone
Operational F-15EXs Have Started Flying With Conformal Fuel Tanks (opens the original article)
Operational F-15EX aircraft have begun flying with conformal fuel tanks; the aircraft’s mission demands are evolving, The War Zone reports.
Warfare The War Zone
Why it mattersThe tanks reflect an operational change to an aircraft originally focused on air-to-air combat.
Sources1The War Zone
USS Theodore Roosevelt Arrives In Singapore; Last Stop Before Third Strike Group Reaches The Middle East (opens the original article)
The USS Theodore Roosevelt has arrived in Singapore, described as the last stop before a third strike group reaches the Middle East.
Warfare The War Zone
Why it mattersThe arrival provides a location update relevant to tracking carrier movements and regional deployments.
Sources1The War Zone
UK military satellite Titania launches into orbit following £3bn space investment into defence of space (opens the original article)
The UK says Titania has launched into orbit, improving Armed Forces observation from space. A new trial network of ground sensors will monitor threats to UK satellites.
Warfare UK Ministry of Defence
Why it mattersThe satellite and ground sensors add space observation and satellite-threat monitoring capabilities.
Sources1UK Ministry of Defence
DoD taps Viasat to field operations ‘center’ for Golden Dome satellite data relay network (opens the original article)
The DoD tapped Viasat to design, field and scale a Mission Operation Center for the Space Data Network Backbone, under a contract worth up to $450 million.
Warfare Breaking Defense
Why it mattersThe center is intended to support operations for a satellite data relay network.
Sources1Breaking Defense
Europe’s airpower future is taking shape, but not as originally planned (opens the original article)
Germany’s next move, the fate of GCAP and the rise of CCAs are reshaping Europe’s combat aircraft strategy, Breaking Defense reports.
Warfare Breaking Defense
Why it mattersThese developments are relevant to how Europe’s future combat aircraft strategy is taking shape.
Sources1Breaking Defense
Geopolitics & geodata
Strategy, geo wars, GNSS and satellite security.
Israel’s president picks Eisenkot over Netanyahu to form next government (opens the original article)
Isaac Herzog gives Gadi Eisenkot 28 days to secure 61 Knesset seats and replace Netanyahu as prime minister.
Geopolitics Al Jazeera 2 outlets
Strategic relevanceThe leadership effort may affect Israel’s government formation and political direction.
Sources1Al Jazeera2DW
Israel's president tasks opposition leader Eisenkot with forming government (opens the original article)
The BBC reports that neither Benjamin Netanyahu’s bloc nor its rival secured a majority in last week’s election.
Geopolitics BBC World
Strategic relevanceThe absence of a majority frames the challenge of forming a government.
Sources1BBC World
US offers $20m reward for information about Iran's nuclear programme (opens the original article)
The US offers a $20m reward for information about Iran's nuclear programme. The snippet says Donald Trump has repeatedly raised the prospect of renewed strikes against Iran's nuclear facilities.
Geopolitics BBC World
Strategic relevanceThe reward and remarks place Iran's nuclear programme and possible strikes in focus.
Sources1BBC World
Gaza wedding festival sees 250 couples married at the same time (opens the original article)
BBC World reports a mass wedding for Palestinian couples took place in Gaza's rubble-strewn streets.
Geopolitics BBC World
Strategic relevanceThe event offers a glimpse of civilian life amid Gaza's damaged surroundings.
Sources1BBC World
Houthis say at least 25 killed in Saudi air strike (opens the original article)
The Houthis say at least 25 people were killed in a Saudi air strike. Saudi Arabia, which leads a coalition fighting the Houthis in Yemen, has not commented.
Geopolitics BBC World
Strategic relevanceThe report concerns conflict in Yemen and includes differing positions on responsibility and comment.
Sources1BBC World
Italian foreign minister says hackers leaked his personal data (opens the original article)
Italy's foreign minister says hackers leaked his personal data. Prime Minister Giorgia Meloni blamed pro-Russian hackers for publishing the details online.
Geopolitics BBC World
Strategic relevanceDefenders should check exposure of officials’ personal data and review how leaked information is handled.
Sources1BBC World
Who is behind Europe’s suspected hybrid attacks? (opens the original article)
Al Jazeera reports that bomb hoaxes and supermarket cyberattacks are heightening security fears in Europe.
Geopolitics Al Jazeera
Strategic relevanceDefenders should review incident reporting and safeguards for retail systems against cyberattacks.
Sources1Al Jazeera
Abdul El-Sayed slams Trump’s tariff war with Canada (opens the original article)
Michigan Senator-elect Abdul El-Sayed has criticised Trump’s trade war with Canada, Al Jazeera reports.
Geopolitics Al Jazeera
Strategic relevanceThe criticism highlights political debate around US-Canada trade relations.
Sources1Al Jazeera
| CVE | CVSS | Product | Ransomware | Added / due | Required action |
|---|---|---|---|---|---|
| CVE-2026-19868 | 7.5High | SonicWall SonicOS SSLVPN | None known | Added Due | Apply mitigations in accordance with vendor instructions. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. |
| CVE-2024-27834 | 5.5Medium | Apple Multiple Products | None known | Added Due | Apply mitigations in accordance with vendor instructions. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. |
| CVE-2026-119977 | 8.1High | WordPress WordPress Core | None known | Added Due | Apply mitigations in accordance with vendor instructions. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. |
| CVE-2026-118527 | 4.3Medium | Ivanti Connect Secure | None known | Added Due | Apply mitigations in accordance with vendor instructions. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. |
| CVE-2026-111357 | 7.0High | Ivanti Connect Secure | None known | Added Due | Apply mitigations in accordance with vendor instructions. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. |
| CVE-2026-97229 | 10.0Critical | GitLab Community Edition and Enterprise Edition | None known | Added Due | Apply mitigations in accordance with vendor instructions. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. |
| CVE-2026-76418 | 8.6High | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software | None known | Added Due | Apply mitigations in accordance with vendor instructions. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. |
| CVE-2026-41709 | 2.7Low | Broadcom VMware ESX | None known | Added Due | Apply mitigations in accordance with vendor instructions. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. |
| CVE-2026-46300 | 7.8High | Linux Kernel | None known | Added Due | Apply mitigations in accordance with vendor instructions. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. |
| CVE-2026-48356 | 9.3Critical | Adobe Commerce and Magento | None known | Added Due | Apply mitigations in accordance with vendor instructions. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. |
| CVE-2026-111497 | 9.2Critical | Google Brotli | None known | Added Due | Apply mitigations in accordance with vendor instructions. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. |
| CVE-2026-109618 | 9.2Critical | PHP Group PHP | None known | Added Due | Apply mitigations in accordance with vendor instructions. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. CISA’s full wordingApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. |
Source: CISA KEV catalogue; CVSS scores from NVD where published. “No score” means NVD has not scored it yet.
Keyword index
Counted from this page. Select one to filter.