Infosec bits for 2026 week 45

Anele Siwela | Nov. 6, 2026, 3:01 p.m.

Cybersecurity News:

UK meat industry hit by cyber-attack which targeted European supermarket freezers [Liv McMahon, Chris Vallance, BBC]

OpenSSH Flaw Could Let Attackers Bypass Password Authentication on Alpine Linux Servers [Guru Baran, Cybersecurity News]

Attacker abuses Microsoft Entra ID to target downstream MSP clients [David Jones, Cybersecurity Dive]

NCSC Warns AI Could Accelerate Ransomware Attacks on Critical Infrastructure [Guru Baran, Cybersecurity News]

Cybersecurity customers want more from MSPs than a 24 by 7 SOC: Barracuda [Kumar Gandharv, Crnasia]

Node.js Schedules High-Severity Security Fixes for 22.x, 24.x, and 26.x Release Lines [Guru Baran, cybersecuritynews]

Vulnerabilities and Patches:

Cloudflare Launches Zero Wire to Track Critical CVEs, Active Exploits, and Security Fixes [Tushar Subhra Dutta, Cybersecurity News]

Critical Barracuda Security Flaws Could Let Hackers Bypass Authentication and Gain Root Access [Tushar Subhra Dutta, Cybersecurity News]

Chainalysis warns all users hit in cyber breach involving ‘agentic’ techniques [Alexander Martin, The record]

The PHP2Shell Vulnerability Heralds Cybersecurity Hell [Dina Genkina, Spectrum]

Alpine Linux Rebuilds GitLab Server From Scratch After Attempted Exploitation of CVSS 10.0 Vulnerability [Finance Biggo, Finance Biggo]

Cyberattacks and Breaches:

ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories [Ravie Lakshmanan, The hacker news]

Harvard Flunks Cybersecurity As Massive Breach Exposes 851,000 Users [Aaron Leong, Hot hardware]

Ransomware Gangs Claim 30% More Victims, but Researchers Warn Some Breaches May Be Fake [Tushar Subhra Dutta, Cybersecurity News]