Mallory News

Mallory INTELLIGENCE

Saturday, November 7, 2026

Today’s top 5

The new information that moved the needle in the last 24 hours. Correlated, deduped, and ranked.

Distilled from 181 references across 7 stories in the last 24 hours.

01

OpenSSH Releases Fix for Critical Password Bypass on musl Linux Systems Without PAM

OpenSSH released version 10.6p2 with a workaround for a critical password-authentication bypass affecting Linux systems that use musl libc without PAM for password authentication, including affected Alpine Linux installations. Attackers…

120 sources · 2h ago

Read story →

02

SonicWall SonicOS SSLVPN Flaw Exploited to Bypass SAML Authentication Controls

SonicWall reports active exploitation of **CVE-2026-19868**, a single-factor authentication vulnerability in SonicOS SSLVPN. An attacker with valid credentials for an alternate authentication method may bypass SAML authentication…

17 sources · 5h ago

Read story →

03

Claude Code Permission Files Expose 1,379 Secrets in Public GitHub Repositories

Apiiro identified 1,379 distinct secrets in 1,122 publicly accessible copies of Claude Code’s `.claude/settings.local.json` file on GitHub. Selecting “Yes, don’t ask again” can save approved shell commands verbatim as permission rules,…

9 sources · 4h ago

Read story →

04

Researchers Find White House Network IPs Offered Through 28 Residential Proxy Services

Layer3 Intel reported that 28 residential proxy services offered traffic exits through six IP addresses in AS2650, a network registered to the Executive Office of the President and serving the White House. Researchers recorded 236…

20 sources · 6h ago

Read story →

05

Censys Finds ARTEX AI Hacking Framework on 1,465 Public Hosts

Censys identified 1,465 internet-facing hosts exposing ARTEX, an LLM-driven autonomous penetration-testing framework released in July 2026. Repeated hosting configurations across approximately 650 hosts suggest cloned systems or…

11 sources · 4h ago

Read story →

Also in the last 24 hours

PhantomDOM Hijacks Microsoft 365 Sessions Through Attacker-Controlled Browsers · 1h ago

Sussex County Prosecutor’s Office Discloses Unauthorized Access to Personal Data · 4h ago

For your environment

See today’s stories cross-referenced against your own stack.

Start a trial and Mallory will surface which of these threats touch the products, vendors, and assets you actually run, ranked by your exposure, not the world’s.

Start a free trial →

See all breaking news →

Tracked continuously across advisories, PSIRTs, research, and the underground.

You're receiving this because you subscribed at www.mallory.ai/intelligence.
Reply to this email to reach the team, or unsubscribe.

Mallory · When Seconds Matter

Don't read about it. Know when it affects you.

Get it every morning

Don't read about it. Know when it affects you.

Get it every morning