Comparing 9 November 2026 with the previous day 8 November 2026.
The report confirms active exploitation of CVE-2026-123158, allowing attackers to log into Linux accounts with password authentication disabled, going beyond a pure patch reminder.
The report shows that state actors are deliberately sabotaging OT and cooling systems in Europe, increasing the strategic relevance of OT security beyond classic IT patching.
The report shows that state-backed actors are deliberately attacking OT and cooling systems, and France attributes this to Iran's Revolutionary Guard,an indication of growing cyber-warfare risks for European infrastructure.
The NCSC assessment frames AI as a long-term enabler of cyber intrusion and thus provides a strategic planning basis through 2028.
The report shows that Iranian state-backed actors are not only stealing data but can cause physical damage and fires through networked refrigeration systems , a direct OT/IoT risk beyond classic critical infrastructure.
The report shows that the patched OpenSSH flaw is already being actively exploited by botnets and crypto miners, increasing priority for exposed SSH services.
The BSI advisory aggregates several Windows vulnerabilities without listing specific CVE IDs, so the actual patch level can only be determined via the Microsoft security bulletins.
The BSI advisory describes a privilege escalation in Microsoft Entra Device Registration but provides no CVE ID, CVSS score, or exploitation details.
No changes in this category.
No changes in this category.
The case shows that Russian sabotage against logistics and infrastructure targets is physically arriving in the DACH region and is no longer confined to Ukrainian territory.
The report shows that state-sponsored iPhone attacks in the DACH region specifically target government officials, underscoring the threat situation for exposed executives outside classic government environments as well.