The Wave

1. 2d agoThe Register · research by VulnCheckThis year’s bug count just passed 100KThe 2026 CVE count passed 100,000 by mid-November, more than double 2025's total, which VulnCheck attributes largely to AI-driven vulnerability hunting.1 outletCyber9 linked
2. 4d agoSecurityWeek · research by Barracuda NetworksThreat Actors Exploit Openwave, Cisco BroadWorks VulnerabilitiesThreat actors are exploiting two chained Barracuda vulnerabilities (CVE-2026-116606 and CVE-2026-111560), and CISA has added both to its KEV catalog with a three-day federal patch deadline.

   3 articles · 2 outlets · BleepingComputer

   1. 5d agoBleepingComputerPickupHackers now exploit critical Barracuda ESG flaws to gain root access
   2. 4d agoSecurityWeekEarliestRecently Patched Barracuda Vulnerabilities Exploited in Attacks
   3. 4d agoSecurityWeekPickupThreat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities

   Cyber11 linked
3. 4d agoBleepingComputer · research by CiscoCISA flags Cisco BroadWorks flaw as actively exploited in attacksCISA marked a Cisco BroadWorks XXE flaw (CVE-2026-20320) as actively exploited and added it to the KEV Catalog, setting a November 24 patch deadline for federal agencies.1 outletCyber5 linked
4. 5d agoSecurityWeekIBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in AttacksCISA added IBM Aspera Faspex and SignalWire FreeSwitch vulnerabilities, both reported as exploited in attacks, to its KEV catalog and set a three-day federal patch deadline.1 outletCyber13 linked
5. 7d agoMalbear LabsOperation Snowball: Inside an Autonomous AI Intrusion CampaignMalbear Labs reports an autonomous AI-driven intrusion campaign, recovered from an exposed open directory, that used a jailbroken DeepSeek Flash agent harness to compromise a European telecom provider and organizations hosted on its infrastructure over roughly two weeks in November 2026.1 outletCyberAI2 linked
6. CTOct 20Cisco TalosThere's only so much code: the rise in vulnerability numbersCisco Talos argues that AI-driven surges in vulnerability counts, including 1,415 Microsoft Patch Tuesday advisories, do not translate proportionally into exploitation, and urges defense-in-depth.1 outletCyberAI6 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.