Cybersecurity Headlines — November 12, 2026
- Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches — Internet
- EU cyber scores look healthy, but 45% of surveyed IT providers take months to patch — Help Net Security
- Reduce alert fatigue by customizing threat detection features in Amazon GuardDuty — Amazon.com
- U.S. CISA adds IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack flaws to its Known Exploited Vulnerabilities catalog — Securityaffairs.com
- Flashpoint launches threat investigation AI agents to automate security work — SiliconANGLE News
- Sega newsletter data breach sees 2.2 million email addresses exposed — TechRadar
- Urgent warning to Gmail users about new hacking threat exposing private messages: Act now — Dailymail.com
- SAP patches ICM2SHELL and PROXYGATE maximum severity flaws — BleepingComputer
From the Trenches
As a cybersecurity practitioner, I’m seeing a familiar pattern emerging - many organizations are being exploited by known vulnerabilities that could’ve been patched months ago. The recent case of Cisco BroadWorks and Openwave flaws actively being exploited despite available patches is a stark reminder of how quickly attackers move once they find an entry point.
This highlights the importance of timely patching and regular vulnerability assessments. It’s not just about having the latest security tools, but also about staying on top of the ever-evolving threat landscape. I’ve seen too many cases where organizations have been caught off guard by exploits that could’ve been prevented with a simple patch or update.
The fact that 45% of surveyed IT providers take months to patch vulnerabilities is particularly concerning. This not only puts their own systems at risk but also exposes their customers and partners to potential attacks. It’s time for organizations to prioritize patching and vulnerability management, and to hold themselves accountable for staying up-to-date with the latest security patches.
🔧 Patch Priority: Cisco BroadWorks due to its widespread use in business communications systems and the high likelihood of exploitation by threat actors.
Compiled daily. Stay patched, stay vigilant.