The Wave

1. 5d agoThe Record · research by MicrosoftMicrosoft’s Patch Tuesday surpasses 1,000 bugs for second month in a rowMicrosoft's November 2026 Patch Tuesday release fixes 1,094 flaws, including an exploited Outlook spoofing zero-day (CVE-2026-124194) that can leak NTLMv2 hashes.

   6 articles · Daily Mail

   1. 5d agoSecurityWeekEarliestExploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
   2. 5d agoThe RecordPickupMicrosoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row
   3. 4d agoCyberScoopPickupMicrosoft fixes over 1,000 vulnerabilities in November Patch Tuesday
   4. 4d agoDark ReadingPickupNovember Patch Tuesday: An Overflowing Cornucopia of CVEs
   5. 4d agoCSO OnlinePickupNovember 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentials
   6. 3d agoDaily MailPickupOutlook users warned about dangerous flaw that lets hackers hijack email accounts: Act now

   Cyber122 linked
2. 2d agoThe Register · research by VulnCheckThis year’s bug count just passed 100KThe 2026 CVE count passed 100,000 by mid-November, more than double 2025's total, which VulnCheck attributes largely to AI-driven vulnerability hunting.1 outletCyber9 linked
3. 2d agoSecurityWeekIn Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data BreachSecurityWeek's weekly roundup bundles the nomination of Palantir CISO Michael LoSapio to lead CISA with several other incidents, including the Baker Tilly data theft, OpenAI research-cluster agent activity, and Railway's October breach report.1 outletCyber25 linked
4. CYesterdayCyberScoop · research by VulnCheckResearchers continue to find serious vulnerabilities in internet connected refrigeratorsVulnCheck disclosed 14 serious flaws in Copeland's Dixell XWEB EVO refrigeration supervision systems, with patches now available, as honeypot tests showed attackers rapidly targeting exposed controllers.1 outletCyberFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks2 linked
5. 5d agoCyberScoopTrump picks Palantir’s LoSapio to head CISATrump's nomination of Palantir CISO Michael LoSapio to lead CISA raises questions about his Palantir ties and the agency's long-vacant leadership.

   6 articles · 5 outlets

   1. 5d agoDefense OnePickupTrump nominates Palantir security chief Michael LoSapio to lead CISA
   2. 5d agoNextgov/FCWEarliestTrump nominates Palantir security chief Michael LoSapio to lead CISA
   3. 5d agoCyberScoopPickupTrump picks Palantir’s LoSapio to head CISA
   4. 5d agoThe RecordPalantir exec nominated to lead CISA; lame-duck Senate vote is uncertain
   5. 4d agoN2K CyberWirePickupThe next name on CISA's door.
   6. 4d agoCyberScoopCISA director pick already drawing concern from Hill Dems over Palantir connection

   CyberTrump nominates Palantir's Michael LoSapio to lead CISA as Democrats plan oversight102 linked
6. 6d agoCISA NewsCISA Announces Enhanced Reporting Form for Cyber IncidentsCISA revised its cyber incident reporting questionnaire to capture more attack detail and adopt MITRE ATT&CK, even as the broader CIRCIA final rule sits under White House review.

   5 articles · 4 outlets

   1. 6d agoCISA NewsPickupCISA Announces Enhanced Reporting Form for Cyber Incidents
   2. 5d agoDark ReadingPickupCISA Announces Enhanced Reporting Form for Cyber Incidents
   3. 5d agoNextgov/FCWEarliestCISA updates cyber reporting form as broader incident mandate awaits approval
   4. 4d agoNextgov/FCWCISA outlines internal plan to swiftly address cyber, infrastructure threats
   5. 4d agoDefense OnePickupCISA outlines internal plan to swiftly address cyber, infrastructure threats

   Cyber57 linked
7. 5d agoBleepingComputer · research by Barracuda NetworksHackers now exploit critical Barracuda ESG flaws to gain root accessThreat actors are exploiting two chained Barracuda vulnerabilities (CVE-2026-116606 and CVE-2026-111560), and CISA has added both to its KEV catalog with a three-day federal patch deadline.

   3 articles · 2 outlets

   1. 5d agoBleepingComputerPickupHackers now exploit critical Barracuda ESG flaws to gain root access
   2. 4d agoSecurityWeekEarliestRecently Patched Barracuda Vulnerabilities Exploited in Attacks
   3. 4d agoSecurityWeekPickupThreat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities

   Cyber11 linked
8. 4d agoBleepingComputer · research by CiscoCISA flags Cisco BroadWorks flaw as actively exploited in attacksCISA marked a Cisco BroadWorks XXE flaw (CVE-2026-20320) as actively exploited and added it to the KEV Catalog, setting a November 24 patch deadline for federal agencies.1 outletCyber5 linked
9. 5d agoCybersecurity DiveTrump picks Palantir cybersecurity executive to lead CISATrump has nominated a Palantir cybersecurity executive to lead CISA, his second attempt to fill the agency's director post, which has been vacant throughout his second term.1 outletCyber12 linked
10. 5d agoSecurityWeekIBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in AttacksCISA added IBM Aspera Faspex and SignalWire FreeSwitch vulnerabilities, both reported as exploited in attacks, to its KEV catalog and set a three-day federal patch deadline.1 outletCyber13 linked
11. 5d agoFederal News NetworkDems point to CISA staffing, AI security and other cyber prioritiesIncoming Democratic committee leaders Thompson, Hassan and Warner outline cyber priorities for the next Congress, led by CISA restaffing, CISA 2015 reauthorization and MS-ISAC funding.1 outletCyber17 linked
12. 6d agoNextgov/FCWCongress returns to slew of cyber deadlines and unfinished AI safety billsCongress returns for a lame-duck session with CISA 2015 set to expire Dec. 11, the NDAA stalled in the Senate, and AI safety bills such as the FRONTIER Act and AI Kill Switch Act unresolved.1 outletCyberAI15 linked
13. 7d agoMalbear LabsOperation Snowball: Inside an Autonomous AI Intrusion CampaignMalbear Labs reports an autonomous AI-driven intrusion campaign, recovered from an exposed open directory, that used a jailbroken DeepSeek Flash agent harness to compromise a European telecom provider and organizations hosted on its infrastructure over roughly two weeks in November 2026.1 outletCyberAI2 linked
14. 10d agoN2K CyberWire · research by VulnCheckPHP2Shell: What’s Real, What’s Noise, and What Actions to TakeA Microsoft Threat Intelligence podcast episode distributed by N2K CyberWire examines the critical PHP2Shell vulnerabilities, separating real attack activity from hype and urging patching plus additional protective controls.1 outletCyber3 linked
15. CTOct 20Cisco TalosThere's only so much code: the rise in vulnerability numbersCisco Talos argues that AI-driven surges in vulnerability counts, including 1,415 Microsoft Patch Tuesday advisories, do not translate proportionally into exploitation, and urges defense-in-depth.1 outletCyberAI6 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.