InfoSecBulletin Cybersecurity for mankind

Barracuda has confirmed active exploitation of security flaws affecting its Email Security Gateway (ESG), warning that attackers could combine two vulnerabilities to gain root access without logging in. The issues, listed as CVE-2026-116606 and CVE-2026-111560, include an authorization bypass and command injection. To exploit them, one needs access to the …

Apple, SAP, and Ivanti have published security updates that fix several flaws with messaging, Bluetooth, enterprise servers, and endpoint management systems. The disclosures show flaws that could let remote attackers get into private iMessage chats, skip security checks, run unauthorized code, alter trusted certificates, and leak sensitive data. The biggest …

A jailbroken AI has been attacking a European telecom company and 13 companies using its data center and cloud for more than two weeks. Malbear Labs named their campaign Operation Snowball. They shared their findings in research published on November 8. They found the attacker’s working directory while checking for open …