SAP patches ICM2SHELL and PROXYGATE maximum severity flaws
2026-11-10T13:23:22Z•c8e0d59fefc2be24831f68d9bd3baa2a338500e0f6790bea8f0a1fc45f5803ed
CVE-2026-123158Barracuda-ESGChromeIranian-threat-actorsMicrosoft-ExchangeOpenSSHRussian-threat-actorsSAPTurlaactive-exploitationcloud-securitycredential-theftcyberespionagedata-breachdestructive-malwarenation-statepersistenceransomwareremote-code-executionroot-accesssupply-chainvulnerability-managementzero-day
What happened
A cybersecurity news digest covering critical software vulnerabilities, active exploitation, zero-days, ransomware, data breaches, cyberespionage, destructive attacks, and cloud supply-chain incidents. Notable developments include active exploitation of Barracuda ESG and OpenSSH flaws, an exploited Chrome zero-day, Turla espionage against government Exchange servers, ransomware and data theft at Vanderbilt University, and disruptive or destructive attacks attributed to state-backed groups.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- c8e0d59fefc2be24831f68d9bd3baa2a338500e0f6790bea8f0a1fc45f5803ed
- Enrichment time
- 2026-11-10T13:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.