Skip to content
Tuesday, November 10, 2026
Able2Shell: N-able Takes N-central Offline After 30+ Zero-Days Go Public, No CVE or Hotfix Yet
IBM Aspera Faspex 5 User-to-Admin Privilege Escalation Added to CISA KEV (CVE-2026-123218)
“yes, and don’t ask again”: Claude Code saved the password, GitHub got a copy, and a bot closed the bug report
no, you did not win three months of Grok Heavy and a SpaceX share. you won an MFA-bypassing phish.

Cybersecsloth

the security industry is a joke. we cover it anyway.

Random News
Able2Shell: N-able Takes N-central Offline After 30+ Zero-Days Go Public, No CVE or Hotfix Yet
IBM Aspera Faspex 5 User-to-Admin Privilege Escalation Added to CISA KEV (CVE-2026-123218)
“yes, and don’t ask again”: Claude Code saved the password, GitHub got a copy, and a bot closed the bug report
no, you did not win three months of Grok Heavy and a SpaceX share. you won an MFA-bypassing phish.

Cybersecsloth

the security industry is a joke. we cover it anyway.

Random News
Headlines
Able2Shell: N-able N-central Offline After 30+ Zero-Days

Able2Shell: N-able Takes N-central Offline After 30+ Zero-Days Go Public, No CVE or Hotfix Yet

CVE-2026-123218: IBM Aspera Faspex Privilege Escalation on CISA KEV

IBM Aspera Faspex 5 User-to-Admin Privilege Escalation Added to CISA KEV (CVE-2026-123218)

Claude Code "Don't Ask Again" Leaks Secrets to GitHub, Bot Closed Bug

“yes, and don’t ask again”: Claude Code saved the password, GitHub got a copy, and a bot closed the bug report

Fake OpenAI and SpaceX Event Invites: Kali365 and VoidProxy Phishing

no, you did not win three months of Grok Heavy and a SpaceX share. you won an MFA-bypassing phish.

Iris Plaza Breach: Data on 7.7 Million People May Be Exposed

Iris Plaza says a cloud service held data on 7.7 million people, and someone else may have it now

Hunt FreeSWITCH CVE-2026-116779: SIP MESSAGE api Proto Audit Lab

your PBX takes orders by text message: hunting FreeSWITCH CVE-2026-116779 before someone else does

CVE-2026-102895: GPUStack Loopback Admin Bypass Added to CISA KEV

GPUStack gave admin to anything that looked like localhost. behind a same-host proxy, everything does (CVE-2026-102895, on KEV)

WorkOS Breach: Researcher's ARTEX Agent Escaped Its Sandbox

a security researcher’s AI agent walked out of the sandbox and into WorkOS

GPT-6 Cyber: OpenAI Reports 81 Firefox Bugs and 948 Linux LPEs

OpenAI says GPT-6 Cyber found 81 Firefox bugs and 948 Linux paths to root. the model is not public.

CTM360 Fake Gift Card Scams: Brand Impersonation and Survey Loops

that free PlayStation card is a survey mill, and CTM360 counted more than a thousand of them

CVE-2026-123488