PyPI makes release attestations easier to find with new security tab
2026-11-09T14:51:41Z•2fb11d4bd569af41a08356e8a2a78ab7387720939a4ab1283027e0321761a60d
CVE-2026-123158CVE-2026-19868AI agent securityMFA bypassOpenSSHPyPISSL-VPNSonicWallactive exploitationbusiness email compromisecredential theftdeepfake fraudfinancial theftinfostealerremote accesssoftware provenancesupply chain compromise
What happened
Help Net Security reports active exploitation of authentication and remote-access vulnerabilities, including SonicWall SSL-VPN MFA bypass CVE-2026-19868 and an OpenSSH flaw CVE-2026-123158 enabling passwordless access on some musl-based systems. Coverage also highlights major financial fraud campaigns using deepfakes and service-provider compromise, rapid credential abuse following infostealer infections, AI-agent security risks, and PyPI release attestations.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 2fb11d4bd569af41a08356e8a2a78ab7387720939a4ab1283027e0321761a60d
- Enrichment time
- 2026-11-09T14:51:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.