Outlook zero-day, Barracuda gateway exploited, Xen Orchestra bypass | Cyber Security News Nov 11
Show notes
Attackers are using an Outlook flaw that leaks NTLM hashes, Barracuda's email gateway root chain and a login bypass in Xen Orchestra. Plus N-central's hotfix, four maximum-severity SAP flaws, Turla's Exchange toolset, a Git recursive-clone fix, and 35,578 Grok-built apps left open to anyone. Every version number and every fix in this episode was checked against the vendor's own advisory before it aired. Today's question: How do you find the apps your staff build with AI tools? Reply in the comments or at [email protected].
1. Exploited Outlook flaw leaks NTLM hashes - CVE-2026-124194 - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124194
2. Update: Barracuda gateway flaws now exploited - CVE-2026-116606, CVE-2026-111560 - https://trust.barracuda.com/security/pre-authentication-authorization-bypass-command-injection
3. Exploited Xen Orchestra flaw gives attackers admin - https://docs.vates.tech/security-advisories/advisories/2026/vates-sa-2026-062/
4. Update: N-central hotfix fixes seven CVEs - CVE-2026-125883, CVE-2026-125878, CVE-2026-125879 (+ 4 more) - https://status.n-able.com/2026/11/10/n-central-2026-4-hf2-release-notes/
5. SAP fixes four 10.0 flaws that need no login - CVE-2026-76964, CVE-2026-120017, CVE-2026-89103 (+ 1 more) - https://support.sap.com/en/my-support/knowledge-base/security-notes-news/november-2026.html
6. Turla runs its spying from inside Exchange servers - https://www.welivesecurity.com/en/eset-research/exchange-for-breakfast-turlas-cereal-tricks-are-not-for-kids/
7. Git fixes code execution on a recursive clone - CVE-2026-111760 - https://github.com/git/git/security/advisories/GHSA-vp2w-7xxj-jvxr
8. New ESXi implant hands attackers every VM - https://www.recordedfuture.com/blog/ghostframe-esxi-implant-settra-ransomware
9. Public iOS escape reads other apps' data - https://github.com/forcequitOS/worse_query
10. AWS MCP server's denylist missed some API names - CVE-2026-125271 - https://aws.amazon.com/security/security-bulletins/rss/2026-176-aws/
11. Ten edited neurons turn an AI agent rogue - https://www.microsoft.com/en-us/security/blog/2026/11/10/detecting-sleeper-agents-hiding-in-ai-model-neurons/
12. 35,578 of 37,571 Grok-built apps open to anyone - https://blog.claroc.io/ghostshares-grok-build-apps/
← Previous
Able2Shell N-central zero-days, Chrome zero-day, FreeSWITCH exploited | Cyber Security News Nov 10
Next →
ScreenConnect MSP attack, new N-central exploits, GitHub secret stealer | Cyber Security News Nov 12