Cyber news for UK businesses, Saturday 7 November 2026
A quiet weekend, so this one is short. Most of today’s items are about devices and servers that sit on the internet. Check yours.
Zyxel switch fix did not close the hole
Researchers at Binarly found that Zyxel GS1900 switches on the earlier Patch 2 firmware are still open to the exploit attackers used, reports The Hacker News. Zyxel has released Patch 3 for 10 models. GreyNoise earlier reported data taken from 996 of these switches, and 564 still used factory-default passwords. Check your model, install Patch 3 and change any default password. Our full Zyxel write-up has the checklist.
SonicWall says a SonicOS flaw is being exploited
SonicWall says CVE-2026-19868 is being exploited, and CISA added it to its Known Exploited Vulnerabilities list on 6 November, according to a Canadian Cyber Centre advisory. SonicOS versions before 7.3.4-7013 and before 8.2.2-8015 are affected. If you run a SonicWall firewall, ask your IT provider which version it is on today.
Barracuda email gateway flaws can be chained
Two patched flaws in Barracuda’s Email Security Gateway can be chained to run commands as root with no login, says The Hacker News. Patches came out on Monday. No public report ties either flaw to an attack yet. Update to version 9.4.0.030 or later, and keep the admin page off the open internet.
Backdoor found in Control Web Panel
Researchers at XLab found a backdoor hidden in the web server of Control Web Panel, a hosting control panel, and its commands do not appear in access logs, reports The Hacker News. Installing it needs root access. If you run the panel, use XLab’s checks and change all panel credentials if you find it.
Long passwords can bypass SSH on some Alpine Linux servers
OpenSSH released 10.6p2 after a flaw let attackers log in to accounts with no password on some Alpine Linux servers, according to The Hacker News. No attacks had been reported when it was published. Update, restart sshd, or turn off password logins.
Cyber news: what to do next
If any of that is on your network and you are unsure, run our free web vulnerability scan, or read how patch management should work. Yesterday’s cyber news roundup is here too.