SECURITY_THREAT_PULSE · BOARD BRIEF

WEEK OF NOV 9, 2026

BOTTOM LINE

CISA confirmed 12 newly exploited flaws in the last 7 days and 40 in the last 30 days. 85 events are rated Act now.

TRACKED EVENTS

▲ ACT NOW85
◆ WATCH39

WHAT CHANGED THIS WEEK

  1. 01Barracuda Networks Barracuda Email Security Gateway (ESG): attackers can get in without a password. It sits at the edge of your network and faces the internet, so attackers can reach it directly. First step: If you have it, patch it today. If you cannot, block access to it from the internet until you can.
  2. 02SonicWall SonicOS SSLVPN: security flaw used in attacks. It sits at the edge of your network and faces the internet, so attackers can reach it directly. First step: If you have it, patch it today. If you cannot, block access to it from the internet until you can.
  3. 03Ivanti Connect Secure: 2 flaws used in attacks; attackers can get in without a password. It sits at the edge of your network and faces the internet, so attackers can reach it directly. First step: If you have it, patch it today. If you cannot, block access to it from the internet until you can.

BARRACUDA NETWORKS BARRACUDA EMAIL SECURITY GATEWAY (ESG): ATTACKERS CAN GET IN WITHOUT A PASSWORD · EVIDENCE LADDER

OUR POSITION

ITEMSTATUSNOTE
This week's Act now products in use[STATUS][WHICH, IF ANY]
Those systems patched or isolated[STATUS][PATCHED / TOTAL]
Signs of compromise found[STATUS][REVIEW WINDOW]
Time to patch a critical edge flaw[DAYS][TARGET]

Bracketed fields are for management to fill in before the meeting.

✕ NOT A CONCERN

Reports that AI set off a wave of attacks. AI doubled the flaws found, but the share used in attacks has not changed. Ransomware leak-site counts are criminal claims, and some are fake.

→ QUESTIONS FOR MANAGEMENT

  1. Q1How long does it take us to patch a critical internet-facing flaw?
  2. Q2Do we know every system we expose to the internet, including vendor-run ones?
  3. Q3Who decides to take a system offline if it cannot be patched?