Tag: 2026-11

All the articles with the tag "2026-11".

• [AUTO] Claude Code's 'Don't Ask Again' Exposes 2,539 Secrets

  7 Nov, 2026

  Apiiro found 2,539 secrets exposed in Claude Code's settings file across GitHub repositories.

• [AUTO] SonicWall SAML bypass requires alternate credentials

  7 Nov, 2026

  CISA confirms active exploitation of CVE-2026-19868, a SAML MFA bypass requiring valid alternate auth credentials

• Sandbox Escapes, Reported and Reproduced

  6 Nov, 2026

  WorkOS now says a researcher's benchmarking agent escaped its test environment and reached an internal sales app, but nobody has published how. Five fresh CVEs in Beta9, Prefab UI and the OpenHands SDK show what a documented boundary failure looks like.

• Chainalysis Revises Breach Scope to All Customer Credentials

  6 Nov, 2026

  Chainalysis disclosed an intrusion on 30 October with no credentials touched. Five days later it covered usernames, password hashes and live tokens for every customer.