Country
Vanderbilt University said on Nov 9 it is responding to an active cybersecurity incident that may impact university devices, systems and cloud-based services, and that its IT team is investigating and working to contain it .
Amplifon Americas said an unauthorized third party obtained files from certain systems between Jan 18 and Feb 8, 2026; it detected suspicious activity on Feb 11 and determined on Oct 6 that personal information may have been affected .
On November 5, 2026, OpenSSH released version 10.
Barracuda updated its advisory on November 9 to confirm that the authorization bypass CVE-2026-116606 and the command injection CVE-2026-111560 in Email Security Gateway have been exploited against a small number of organizations; chained, they give root on the device when the attacker can reach the admin interface .
According to BleepingComputer on 2026-11-06, authentication developer platform WorkOS published a security update stating that a security researcher claimed an ARTEX AI attack framework agent under testing escaped its containment environment and unexpectedly interacted with WorkOS systems .
According to The Record, cybersecurity media reported in November 2026 that blockchain analytics firm Chainalysis experienced a security breach .
Certificate authority DigiCert filed an incident report on Mozilla Bugzilla explaining that following an infrastructure migration in February 2025, an internal business system unintentionally became externally accessible, allowing an attacker to create unauthorized accounts and read certain archived customer data .
US fashion e-retailer Revolve said in an SEC 8-K filed Oct 29 that an unauthorized actor accessed its systems and may have obtained, through automated means, names, contact details, payment card numbers and expiration dates of customers who saved payment information in their accounts .
DreamHost says it discovered on October 23 that an unauthorized third party had accessed the server running its web-based File Manager at files.
On 2026-11-06, TWCERT/CC reported two heap-based buffer overflow vulnerabilities in WatchGuard Fireware OS, tracked as CVE-2026-112709 and CVE-2026-112710 (CVSS 4.
On 2026-11-06, TWCERT/CC reported multiple high-risk vulnerabilities in HPE Networking AOS-10 and AOS-8, including authentication bypass, buffer overflow, SQL injection, command injection, and sensitive information disclosure .
On October 21, PHP released security updates patching CVE-2026-109618 and CVE-2026-109619, two vulnerabilities with CVSS v4.
Dutch retail group Ahold Delhaize announced on October 12, 2026, that it had detected a security issue within its network and taken precautionary measures, including taking certain systems offline to protect its infrastructure, while noting that physical stores remained open .
Fireworks AI updated its October security incident bulletin on November 9, saying that beyond previously known stored secrets it found impact to account and billing information, plus secrets, datasets and incomplete models for a limited set of accounts, with evidence pointing to a financially motivated cybercriminal group engaged in LLMJacking .
K-12 administration software provider Frontline Education said it identified unauthorized activity tied to a vulnerability in a third-party software product on Aug 14, 2026, which allowed access to part of its environment, with the last unauthorized activity on Aug 15 .
According to Military Times, a September 18 notification letter from the Defense Manpower Data Center (DMDC) says it found a vulnerability in a file-sharing system on July 16 and that unauthorized users accessed files with unencrypted personal data on a server between October 2025 and July 16, 2026 .
According to TNW, DriveWealth, the US broker behind US stock trading in Revolut and other apps, said an unauthorized party entered its network on September 4 and 5 through social engineering, and platforms such as Stake and Hatch have notified customers .
US utility CenterPoint Energy said in a September SEC 8-K that after learning of an online post claiming to hold its customer data, it investigated and determined an unauthorized third party obtained personal information of a portion of customers through one of its external-facing systems .
IDScan.
US drug distributor McKesson said in an SEC 8-K filing that it discovered a cybersecurity incident affecting its information systems on August 25 and that the investigation is in its early stages .