# cve.now: early warnings

Breaches, ransomware, malicious packages and vulnerabilities reported by newsrooms, vendors or regulators before (or without) a CVE, newest first. Each line links the warning's Markdown page. Unverified claims seen only on social media are left out.

- [SZB-da10af64ce](https://cve.now/SZB-da10af64ce.md): Railway says hackers stole customer auth secrets and ran $740,000 in fraudulent AI usage (Breach · Confirmed · Railway · 2026-11-10)
- [SZB-65bc1bddc8](https://cve.now/SZB-65bc1bddc8.md): NEAR AI reports SGLang RCE let attacker run code on an inference server (Breach · Confirmed · NEAR AI · 2026-11-10)
- [SZB-a9c61ebfa0](https://cve.now/SZB-a9c61ebfa0.md): Microsoft patches record 1,235 flaws, including exploited Outlook zero-day (Vulnerability · Confirmed · Microsoft · 2026-11-10)
- [SZB-8a90d04873](https://cve.now/SZB-8a90d04873.md): Adobe patches 110 vulnerabilities across 9 products (Vulnerability · Corroborated · Adobe · 2026-11-10)
- [SZB-f71a910c08](https://cve.now/SZB-f71a910c08.md): BleepingComputer reports critical Xen Orchestra auth bypass exploited in attacks (Vulnerability · Corroborated · Xen Orchestra · 2026-11-10)
- [SZB-db01d072ad](https://cve.now/SZB-db01d072ad.md): Attackers exploit AhsayCBS flaws to deploy sandbox-evading Python backdoor (Vulnerability · Confirmed · Ahsay · 2026-11-10)
- [SZB-fdab5e09d5](https://cve.now/SZB-fdab5e09d5.md): Apple patches iMessage flaws that expose group chat messages (Vulnerability · Corroborated · Apple · 2026-11-10)
- [SZB-40f3a46406](https://cve.now/SZB-40f3a46406.md): Barracuda warns attackers are exploiting two patched ESG root-access flaws (Vulnerability · Corroborated · Barracuda · 2026-11-10)
- [SZB-ea98c8be72](https://cve.now/SZB-ea98c8be72.md): SAP patches four CVSS 10.0 flaws in NetWeaver and Web Dispatcher (Vulnerability · Corroborated · SAP · 2026-11-10)
- [SZB-c3df970f8e](https://cve.now/SZB-c3df970f8e.md): Fireworks AI discloses breach of development machines after cloud provider hack (Breach · Confirmed · Fireworks AI · 2026-11-10)
- [SZB-4703b2a7b4](https://cve.now/SZB-4703b2a7b4.md): CISA adds four flaws in GPUStack, FreeSWITCH, OpenSSH and IBM Aspera Faspex to KEV (Vulnerability · Confirmed · Multiple vendors (GPUStack, SignalWire, OpenBSD, IBM) · 2026-11-10)
- [SZB-476799c76c](https://cve.now/SZB-476799c76c.md): Google patches Chrome XML zero-day reported as exploited in attacks (Vulnerability · Confirmed · Google · 2026-11-10)
- [SZB-197290786f](https://cve.now/SZB-197290786f.md): N-able takes N-central offline after researcher discloses 30+ alleged zero-days (Vulnerability · Corroborated · N-able · 2026-11-09)
- [SZB-e0d31900bd](https://cve.now/SZB-e0d31900bd.md): Wiz says attacker breached multiple Qubole customers' AWS accounts (Breach · Corroborated · Qubole · 2026-11-09)
- [SZB-5ab74d9eed](https://cve.now/SZB-5ab74d9eed.md): Ethersphere's bee-js and Swarm Desktop releases reported to carry wallet-stealing malware (Malicious package · Corroborated · Ethersphere · 2026-11-09)
- [SZB-ea46f00bd9](https://cve.now/SZB-ea46f00bd9.md): Web3Auth flaw exploited to drain Keplr wallets, companies say (Vulnerability · Corroborated · Web3Auth · 2026-11-09)
- [SZB-db26c70b7f](https://cve.now/SZB-db26c70b7f.md): Researchers find hundreds of public Artex AI pentest tool instances exposed online (Breach · Corroborated · Artex · 2026-11-07)
- [SZB-659381b7e7](https://cve.now/SZB-659381b7e7.md): CISA adds SonicWall SonicOS SSLVPN flaw CVE-2026-19868 to KEV catalog (Vulnerability · Confirmed · SonicWall · 2026-11-06)
- [SZB-b323ce2f22](https://cve.now/SZB-b323ce2f22.md): OpenAI says its GPT-6 Cyber model found 81 unknown Firefox flaws (Vulnerability · Corroborated · Mozilla · 2026-11-06)
- [SZB-25aea6b559](https://cve.now/SZB-25aea6b559.md): QNAP says hackers are exploiting Plex2Shell vulnerability chain on NAS devices (Vulnerability · Corroborated · QNAP · 2026-11-06)
- [SZB-0f0221e743](https://cve.now/SZB-0f0221e743.md): Microsoft Paint RCE flaw CVE-2026-83844 fixed via Store update, not Windows Update (Vulnerability · Confirmed · Microsoft · 2026-11-06)
- [SZB-fe91205ead](https://cve.now/SZB-fe91205ead.md): Phishing campaign reportedly steals Microsoft and Google account credentials (Breach · Corroborated · Microsoft · 2026-11-05)
- [SZB-238e596fa7](https://cve.now/SZB-238e596fa7.md): mSeven Software warns mSecure users after cyberattack reportedly exposed customer database (Breach · Confirmed · mSeven Software · 2026-11-05)
- [SZB-f2f032fedb](https://cve.now/SZB-f2f032fedb.md): OpenSSH flaw reportedly allows login to password-disabled musl-based Linux accounts (Vulnerability · Confirmed · OpenSSH · 2026-11-05)
- [SZB-97fd8de188](https://cve.now/SZB-97fd8de188.md): Trojanized CWP web server reportedly spreads CWPdoor Linux backdoor (Breach · Corroborated · Control Web Panel · 2026-11-05)
- [SZB-58fbd93471](https://cve.now/SZB-58fbd93471.md): DigiCert warns of breach exposing customer data and identity documents (Breach · Confirmed · DigiCert · 2026-11-05)
- [SZB-e57f3ab75f](https://cve.now/SZB-e57f3ab75f.md): CISA warns attackers are exploiting a patched high-severity WordPress flaw (Vulnerability · Corroborated · WordPress · 2026-11-05)
- [SZB-fefdc7390e](https://cve.now/SZB-fefdc7390e.md): Anthropic declines to fix Claude Dispatch flaw enabling remote command execution (Vulnerability · Corroborated · Anthropic · 2026-11-05)
- [SZB-9fb3d806b5](https://cve.now/SZB-9fb3d806b5.md): CERT-In flags backdoored ARTEX exposing 62 consoles to root access (Malicious package · Corroborated · ARTEX · 2026-11-05)
- [SZB-646da66be3](https://cve.now/SZB-646da66be3.md): CISA adds Apple authentication flaw CVE-2024-27834 to KEV catalog (Vulnerability · Confirmed · Apple · 2026-11-05)
- [SZB-c7e59b0d46](https://cve.now/SZB-c7e59b0d46.md): OpenAI reports 948 Linux kernel privilege escalation flaws found by AI pipeline (Vulnerability · Corroborated · OpenAI · 2026-11-05)
- [SZB-4f5cab3822](https://cve.now/SZB-4f5cab3822.md): Zyxel patches zero-day exploited to hack nearly 1,000 GS1900 switches (Vulnerability · Confirmed · Zyxel · 2026-11-04)
- [SZB-6be53914c8](https://cve.now/SZB-6be53914c8.md): SonicWall says it will not patch two end-of-life GMS flaws, one rated CVSS 9.1 (Vulnerability · Confirmed · SonicWall · 2026-11-04)
- [SZB-f4b7ff866c](https://cve.now/SZB-f4b7ff866c.md): Plerdy SEO Tracker reportedly used in APT29-linked iOS and Android watering hole campaign (Malicious package · Corroborated · Plerdy · 2026-11-04)
- [SZB-b785d96740](https://cve.now/SZB-b785d96740.md): Cyberattack reportedly wipes Beget cloud data and disrupts hundreds of sites (Security outage · Corroborated · Beget · 2026-11-04)
- [SZB-76a2041c5e](https://cve.now/SZB-76a2041c5e.md): Google patches critical Android flaw CVE-2026-58868 allowing remote code execution (Vulnerability · Confirmed · Google · 2026-11-04)
- [SZB-b191afc8db](https://cve.now/SZB-b191afc8db.md): WorkOS says attacker accessed contact records and customer communication summaries (Breach · Confirmed · WorkOS · 2026-11-03)
- [SZB-6f72a161a5](https://cve.now/SZB-6f72a161a5.md): Xsolis reports phishing-linked breach affecting nine health systems (Breach · Confirmed · Xsolis · 2026-11-03)
- [SZB-49acf98068](https://cve.now/SZB-49acf98068.md): Chainstack reports unauthorized access to parts of its infrastructure (Breach · Confirmed · Chainstack · 2026-11-03)
- [SZB-cd29ee2e79](https://cve.now/SZB-cd29ee2e79.md): DreamHost says hackers accessed its systems and customer session data for three months (Breach · Confirmed · DreamHost · 2026-11-03)
- [SZB-626b3ee2d0](https://cve.now/SZB-626b3ee2d0.md): CISA advisory reports SQL command flaws in Subnet Solutions PowerSYSTEM Center (Vulnerability · Confirmed · Subnet Solutions · 2026-11-03)
- [SZB-61849a44e4](https://cve.now/SZB-61849a44e4.md): OPSSHIELD says attacker hijacked cPGuard update channel to backdoor Linux servers (Malicious package · Corroborated · OPSSHIELD · 2026-11-03)
- [SZB-1ac4bc8960](https://cve.now/SZB-1ac4bc8960.md): Barracuda warns customers to patch two flaws enabling root command execution (Vulnerability · Confirmed · Barracuda · 2026-11-03)
- [SZB-f01d9b6350](https://cve.now/SZB-f01d9b6350.md): Frontline Education data breach reportedly affects over 1.3 million people (Breach · Confirmed · Frontline Education · 2026-11-03)
- [SZB-9dcda68ffb](https://cve.now/SZB-9dcda68ffb.md): ESET reports Gorbag hackers exploit WinRAR flaw to deploy info-stealing malware (Vulnerability · Corroborated · RARLAB · 2026-11-03)
- [SZB-b9ba4e436f](https://cve.now/SZB-b9ba4e436f.md): Siemens IoT2050 Advanced flaw CVE-2026-58115 reportedly exploited in the wild (Vulnerability · Confirmed · Siemens · 2026-11-03)
- [SZB-d80473442c](https://cve.now/SZB-d80473442c.md): Attackers reportedly target unpatched CryptoPayment Gateway plugin flaw CVE-2026-81648 (Vulnerability · Confirmed · CryptoPayment Gateway · 2026-11-03)
- [SZB-dffcdbc311](https://cve.now/SZB-dffcdbc311.md): Germany says lawmakers' iPhones may have been hacked with spyware (Possible breach · Corroborated · Apple · 2026-11-02)
- [SZB-b728804dc9](https://cve.now/SZB-b728804dc9.md): Abrigo takes Sageworks risk app offline after irregular activity (Security outage · Corroborated · Abrigo · 2026-11-02)
- [SZB-7a8b5fe3b6](https://cve.now/SZB-7a8b5fe3b6.md): Google says Videostrong backdoored Android TV boxes in 1.3M-device botnet (Malicious package · Corroborated · Videostrong · 2026-11-02)
- [SZB-c7aa11a23f](https://cve.now/SZB-c7aa11a23f.md): BTCPay Server maintainer warns of hot wallet thefts on outdated instances (Breach · Confirmed · BTCPay Server · 2026-11-02)
- [SZB-9ad81aaa3b](https://cve.now/SZB-9ad81aaa3b.md): Microsoft fixes bug that blocked Smart App Control activation after October update (Security outage · Corroborated · Microsoft · 2026-11-02)
- [SZB-0bed561f10](https://cve.now/SZB-0bed561f10.md): IBM discloses two critical Langflow flaws allowing unauthenticated code execution (Vulnerability · Corroborated · Langflow · 2026-11-02)
- [SZB-ca48ede9d9](https://cve.now/SZB-ca48ede9d9.md): BleepingComputer reports over 1,000 exposed GitLab servers unpatched against an exploited RCE flaw (Vulnerability · Corroborated · GitLab · 2026-11-02)
- [SZB-3a668ff545](https://cve.now/SZB-3a668ff545.md): DebugBear says DNS records were hijacked via its domain registrar (Breach · Corroborated · DebugBear · 2026-11-02)
- [SZB-b401b3c6fd](https://cve.now/SZB-b401b3c6fd.md): Synology NAS users reportedly targeted again by C3RB3R ransomware (Ransomware · Corroborated · Synology · 2026-11-01)
- [SZB-2a829245c5](https://cve.now/SZB-2a829245c5.md): Alpine Linux reports attempted GitLab exploit and possible compromise (Attempted attack · Corroborated · Alpine Linux · 2026-11-01)
- [SZB-0a64a5d1f9](https://cve.now/SZB-0a64a5d1f9.md): Drupal warns of critical Commerce Core access bypass exploited in the wild (Vulnerability · Corroborated · Drupal · 2026-11-01)
- [SZB-2884815801](https://cve.now/SZB-2884815801.md): Japan Airlines says Amadeus passenger system breach exposed about 92,000 customers (Breach · Confirmed · Amadeus · 2026-10-31)
- [SZB-a4df36c045](https://cve.now/SZB-a4df36c045.md): Northflank warns breach led to unauthorized use of customers' AI API keys (Breach · Corroborated · Northflank · 2026-10-31)
- [SZB-34aa303ce5](https://cve.now/SZB-34aa303ce5.md): BleepingComputer reports public exploit for patched Android flaw CVE-2026-58882 (Vulnerability · Confirmed · Google · 2026-10-31)
- [SZB-7d756337c8](https://cve.now/SZB-7d756337c8.md): Chainalysis confirms intrusion exposing non-sensitive customer data (Breach · Confirmed · Chainalysis · 2026-10-31)
- [SZB-7b2beadb7b](https://cve.now/SZB-7b2beadb7b.md): Malicious Claude Code extension distributed in Cursor supply chain attack (Malicious package · Corroborated · Cursor · 2026-10-31)
- [SZB-31aa1da420](https://cve.now/SZB-31aa1da420.md): CISA adds two Ivanti Connect Secure flaws to KEV after active exploitation (Vulnerability · Confirmed · Ivanti · 2026-10-31)
- [SZB-950a334ee6](https://cve.now/SZB-950a334ee6.md): Anthropic researchers report exploit for critical Linux kernel MPTCP flaw (Vulnerability · Confirmed · Linux kernel · 2026-10-30)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/early-warnings
Site guide for agents: https://cve.now/llms.txt