Daily DefSec Brief·Nov 4, 2026·5m

Stolen Entra app secrets, cPGuard update hijack, Binance fake interview | Cyber Security News Nov 4

Show notes

1. Stolen Entra app secrets hit MSPs and customers - https://www.todyl.com/blog/stolen-app-credentials-real-access-an-actor-is-signing-into-entra-id-and-azure-devops-as-your-workloads

2. cPGuard's update channel pushed a backdoor - https://opsshield.com/notice/cpguard-update-channel-compromise.html

3. Update: open Node-RED editors are being exploited - CVE-2026-58115 - https://cert-portal.siemens.com/productcert/html/ssa-834709.html

4. WS_FTP fixes a 10.0 admin-credential leak - CVE-2026-84295, CVE-2026-90868 - https://cyber.gc.ca/en/alerts-advisories/progress-software-security-advisory-av26-1116

5. Barracuda fixes a flaw chain that reaches root - CVE-2026-116606, CVE-2026-111560 - https://trust.barracuda.com/security/pre-authentication-authorization-bypass-command-injection

6. Update: Linux TCP flaw fixed, Ubuntu still open - CVE-2026-98432 - https://access.redhat.com/security/vulnerabilities/RHSB-2026-016

7. Zyxel GS1900 switches get a command-execution fix - CVE-2026-107441, CVE-2026-76955 - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-gs1900-series-switches-11-03-2026

8. Chrome 157 ships 213 security fixes - CVE-2026-121156 - http://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html

9. Android's November patch fixes a no-tap code flaw - CVE-2026-58868 - https://source.android.com/docs/security/bulletin/2026/2026-11-01

10. Forged antd-img-crop commit planted a stealer - https://safedep.io/blog/antd-img-crop-forged-commit-overlord-stealer

11. Network appliance flaws stay unpatched over a year - https://www.microsoft.com/en-us/security/blog/2026/11/02/exploited-vulnerabilities-common-data-driven-analysis-real-world-attacks/

12. Defense firm pays $13M over cyber claims - https://www.justice.gov/opa/pr/defense-and-aerospace-contractors-ilc-dover-and-ilc-astrospace-agree-pay-13m-resolve

13. Fake job interview opened Binance's wallets - https://www.binance.com/en/blog/community/3229153443759566763

← Previous

Synology NAS ransomware, stolen keys running up $100K AI bills | Cyber Security News Nov 3

Thirteen stories for defenders. Every version number and every fix in this episode was checked against the vendor's advisory or the CVE record before it aired. Today's question: What got your team to give network appliances a named patch owner? Reply in the comments or at [email protected] . 1. Stolen Entra app secrets hit MSPs and customers - https://www.todyl.com/blog/stolen-app-credentials-real-access-an-actor-is-signing-into-entra-id-and-azure-devops-as-your-workloads 2. cPGuard's update channel pushed a backdoor - https://opsshield.com/notice/cpguard-update-channel-compromise.html 3. Update: open Node-RED editors are being exploited - CVE-2026-58115 - https://cert-portal.siemens.com/productcert/html/ssa-834709.html 4. WS_FTP fixes a 10.0 admin-credential leak - CVE-2026-84295, CVE-2026-90868 - https://cyber.gc.ca/en/alerts-advisories/progress-software-security-advisory-av26-1116 5. Barracuda fixes a flaw chain that reaches root - CVE-2026-116606, CVE-2026-111560 - https://trust.barracuda.com/security/pre-authentication-authorization-bypass-command-injection 6. Update: Linux TCP flaw fixed, Ubuntu still open - CVE-2026-98432 - https://access.redhat.com/security/vulnerabilities/RHSB-2026-016 7. Zyxel GS1900 switches get a command-execution fix - CVE-2026-107441, CVE-2026-76955 - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-gs1900-series-switches-11-03-2026 8. Chrome 157 ships 213 security fixes - CVE-2026-121156 - http://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html 9. Android's November patch fixes a no-tap code flaw - CVE-2026-58868 - https://source.android.com/docs/security/bulletin/2026/2026-11-01 10. Forged antd-img-crop commit planted a stealer - https://safedep.io/blog/antd-img-crop-forged-commit-overlord-stealer 11. Network appliance flaws stay unpatched over a year - https://www.microsoft.com/en-us/security/blog/2026/11/02/exploited-vulnerabilities-common-data-driven-analysis-real-world-attacks/ 12. Defense firm pays $13M over cyber claims - https://www.justice.gov/opa/pr/defense-and-aerospace-contractors-ilc-dover-and-ilc-astrospace-agree-pay-13m-resolve 13. Fake job interview opened Binance's wallets - https://www.binance.com/en/blog/community/3229153443759566763