Able2Shell N-central zero-days, Chrome zero-day, FreeSWITCH exploited | Cyber Security News Nov 10
Show notes
N-able took hosted N-central offline after a researcher published what he says are 33 unpatched flaws with exploit code, and Chrome fixed a zero-day that attackers are already using. Also: an attacker using Qubole's AWS account to get into its customers' accounts, exploited flaws in IBM Aspera Faspex, FreeSWITCH and GPUStack, a web host breached through its own MCP server, and a default admin login that let researchers start cars. Every version number and every fix in this episode was checked against the vendor's own advisory before it aired. Today's question: What's on your checklist when you stop using a vendor? Reply in the comments or at [email protected].
1. N-able pulls N-central offline over 33 zero-days - Do: Keep N-central offline until N-able's fix - https://www.huntress.com/blog/n-able-disables-cloud-services-following-disclosure-of-able2shell-exploit-chains
2. Chrome fixes its eighth exploited zero-day of 2026 - CVE-2026-125350 - Fixed: 157.0.8103.50/.51; Extended Stable 156.0.8078.96 - Do: Push the Chrome update and force the restart - https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html
3. Attacker used Qubole's AWS trust to rob customers - Do: Delete IAM roles that trust vendors you've left - https://www.wiz.io/blog/qubole-cross-account-access-abused-in-the-wild
4. IBM Aspera Faspex privilege flaw exploited - CVE-2026-123218 - Fixed: 5.0.19 PL1 - federal due 2026-11-12 - Do: Patch IBM Aspera Faspex - https://www.ibm.com/support/pages/node/7295921
5. FreeSWITCH flaw exploited with one SIP message - CVE-2026-116779 - Fixed: 1.11.3 - federal due 2026-11-12 - Do: Upgrade FreeSWITCH on your phone system - https://github.com/signalwire/freeswitch/security/advisories/GHSA-mg63-h38w-8p9p
6. GPUStack admin takeover flaw exploited - CVE-2026-102895 - Fixed: 2.2.0 - federal due 2026-11-12 - Do: Upgrade GPUStack and delete unknown admin keys - https://github.com/gpustack/gpustack/security/advisories/GHSA-gj9m-f8ph-pmhr
7. Web host breached through its own MCP server - Do: Test your MCP server like your public API - https://therecord.media/cyberattack-germany-ai-mittwald
8. Default admin login let researchers start cars - Do: Remove the default admin console from ForgeRock IDM - https://samcurry.net/forgerock
← Previous
SSHole attacks on Alpine, SonicWall MFA bypass, AI agent breaches WorkOS | Cyber Security News Nov 9
Next →
Outlook zero-day, Barracuda gateway exploited, Xen Orchestra bypass | Cyber Security News Nov 11