This Week in Cybersecurity
Trusted access was the common thread this week. Attackers used compromised Qubole AWS credentials to assume cross-account IAM roles and steal data from more than a dozen customer environments. Railway said attackers escaped its build system and took customer secrets, then ran up about $740,000 in unauthorized AI usage. Fireworks AI widened its October disclosure to customer datasets, incomplete model weights and Notion AI chats.
AI infrastructure remained a favourite target. An SGLang RCE flaw gave an attacker code execution on a NEAR AI inference server, and forks of the open source Artex pen-test framework keep showing up in real intrusions.
It was also Patch Tuesday, with an exploited Outlook zero-day among roughly 1,100 fixes. Chrome 157 closed its eighth exploited zero-day of the year, Xen Orchestra and Barracuda ESG flaws are under active exploitation, and SAP shipped four CVSS 10.0 fixes.
Top Stories
Over a Dozen Organizations Hit in Qubole Supply Chain Attack
Per Wiz and Sentra, attackers used compromised Qubole AWS credentials to assume customers' cross-account IAM roles and steal S3 data, secrets and keys. Review the trust policies on any third-party role in your AWS accounts, require external IDs, and alert on AssumeRole calls from vendor principals outside their normal patterns.
Full story → · Cloud environment breaches →
Railway Breach Leads to $740,000 in Fraudulent AI Charges
Railway says attackers escaped its build system and stole customer secrets for up to 100,000 workspaces. Rotate any credentials stored on the platform, and set hard spend limits and alerts on AI provider keys so a leaked key can't quietly run up a bill.
Fireworks AI Breach Widens to Customer Datasets, Model Weights and Notion AI Chats
The October incident also exposed billing data, secrets, datasets and incomplete model weights. Notion reports that under 1% of workspaces were affected. If you fine-tune or host models with a third party, inventory what data and credentials you've handed over.
November 2026 Patch Tuesday: Exploited Outlook Zero-Day Among 1,094 Flaws
Microsoft's release fixes roughly 1,100 CVEs, 63 of them critical, including the actively exploited Outlook zero-day CVE-2026-124194. Prioritize Outlook clients and internet-facing systems first. Also this week, Chrome 157 fixes the exploited XML zero-day CVE-2026-125350 (update to 157.0.8103.50).
Critical Xen Orchestra Auth Bypass Flaw Exploited to Hijack VM Servers
Vates confirms active exploitation of an authentication bypass (VSA-2026-062) that gives admin access and can lead to XCP-ng host takeover. Patch now, and keep management consoles off the internet.
Security Corner
10 new advisories published to the Security Advisories section this week, led by critical issues in web plugins, embedded devices and AI infrastructure.
CVE-2026-102895 — GPUStack Improper Authentication (Critical) Improper authentication in a self-hosted GPU cluster manager. If you run GPUStack, apply the vendor fix and restrict network access. Full advisory →
CVE-2026-119506 — Frontend Admin by DynamiApps Privilege Escalation (Critical, CVSS 9.1) A privilege escalation flaw in a WordPress plugin. Update it or remove it. Full advisory →
CVE-2026-124585 — Chengdu Feiyuxing VW2100 and VEC10GP OS Command Injection (Critical, CVSS 9.9) Command injection in networked devices. Keep management interfaces off untrusted networks. Full advisory →
CVE-2026-124560 — D-Link DIR-878 HNAP Heap Buffer Overflow (Critical, CVSS 9.8) Heap overflow in the router's HNAP handler. Consider replacing devices that no longer receive firmware updates. Full advisory →
Also this week:
- CVE-2026-107331 — IBM DataStage on Cloud Pak for Data absolute path traversal (Critical) →
- CVE-2026-115646 — Hitachi HiRDB Server partial string comparison flaw (Critical) →
- CVE-2026-123807 — Signal K Server path traversal via v2 Resources API (Critical) →
- CVE-2026-115339 — Progress WS_FTP Server unauthenticated denial of service (High) →
- CVE-2026-124581 — itsourcecode Airline Reservation System 1.0 SQL injection (High) →
- CVE-2026-111793 — Openwave Messaging WebTop media transcoder flaw →
Quick Takes
- SGLang RCE Breaches NEAR AI: Code execution on an inference server exposed data from 18 agents, about 100 Private Chat users and two API keys. Read more →
- Artex Forks Weaponized: Forks of the open source AI pen-test framework and 45 similar tools still run credential attacks and cloud breaches at machine speed. Read more →
- Barracuda ESG Exploited for Root: CVE-2026-116606 and CVE-2026-111560 let attackers run commands as root on Email Security Gateway appliances. Read more →
- SAP Fixes Four CVSS 10.0 Bugs: ICM2SHELL and PROXYGATE headline 35 fixes across NetWeaver, Web Dispatcher and Gateway. Read more →
- Turla's "Cereal" Toolset: ESET says Turla hid in Exchange transport processes at government bodies in Romania and Kazakhstan. Read more →
- Nitori Reports Up to 37.6M Records Exposed: Unauthorized access was detected on Nov 6; passwords and card data were reportedly not affected. Read more →
- France Blames Iran-Linked Group for Supermarket Refrigeration Attacks: Attribution points to Shahid Kaveh. Read more →
- FinCEN Cuts Off MEXC Exchange: The action cites sanctions evasion. Read more →
- Ransomware Recovery Is Now a Client Retention Metric: How fast you restore is becoming what customers judge you on. Read more →
- SBOMs and AI-BOMs: Allan Friedman on where software transparency is heading. Read more →
- GRC Agent Governance Skills: Governing AI agents as a compliance discipline. Read more →
- Anthropic Publishes Cyber Benchmarks: Claude Fable 5.2 and Mythos 5.2 results. Read more →
- Microsoft Paint RCE Revised: CVE-2026-83844 details updated. Read more →
Upcoming
Audit vendor access first. List every third-party IAM role in your AWS accounts, confirm external IDs are enforced, and review CloudTrail for unusual AssumeRole activity. If you use Railway or Fireworks AI, rotate stored secrets and API keys and cap spend on AI provider accounts. Roll out the November Microsoft updates, starting with Outlook, and update Chrome to 157.0.8103.50. Patch Xen Orchestra and Barracuda ESG immediately and take their management interfaces off the internet. SAP shops should apply the November fixes to NetWeaver, Web Dispatcher and Gateway. Check any SGLang or GPUStack deployments for exposure. We'll follow the Qubole victim count and the Railway fallout in next week's digest.
CosmicBytez Labs — IT & Cybersecurity Intelligence Hub