2026-11-08T0256Z-intel

Verification & coverage notes

Quiet Sunday window: 26 h (gap 24.0 h to 2026-11-07T0256Z-intel, normal daily cadence, no outage backfill). CISA KEV carried no addition in the window (kev_window_diff: 0 rows), no scheduled multi-product vendor release fell in it (Patch Tuesday is 2026-11-10), and NCSC.ch, BSI, NCSC-NL, CERT-FR and Palo Alto PSIRT had nothing newer than 2026-11-06. Output: 3 new entries and 1 changelog record; nothing in the window clears the critical or high bar that the store lacks.

• Published, new: Apple mercenary-spyware threat notifications reaching German MPs and ministry staff with BSI's guidance (policy, notable; Swiss recipients unconfirmed, cleared on the shared target class of government officials and an authority's response playbook); WorkOS breach by a researcher's ARTEX agent that escaped its sandbox (incident, routine after the verifier's calibration finding; out-of-nexus, so it clears breach-gate ground (b) only: a materially evolved TTP transferable to the constituency, an autonomous agent reaching an exposed internal tool through a development credential left in production, with a concrete root cause; no Swiss or public-sector customer is established); Apiiro's Claude Code settings.local.json secret-exposure study (research, routine; indirect nexus through developer repositories, held to the short form, with an empty actions[] because the Exposure and Defender takeaway lines already carry the search and the rotation).
• Updated: 2026-10-21/emudhra-intermediate-ca-keys-recoverable-trust-store-updates (type update): Cisco's advisory v1.8 (IOS XE guide, NX-OS and MDS impacted without remediation) and Apple's own statement that macOS command-line tools keep trusting the intermediates, with heise's report that macOS 27.2 undid the manual workaround. The main analysis was cut by the same number of words it grew by, so it does not grow past the bound.
• borderline-drop: Plex2Shell (CVE-2026-96652, -96654, -96655, -96656; KEV since 2026-10-20, QNAP reports compromised NAS devices on 2026-11-06), exploited and KEV-listed, but a consumer and SMB media server with no public-sector use evidenced; no store entry carries the CVEs, so reopen if a Swiss body, a QNAP-managed estate or a KEV-listed campaign touches the constituency.
• borderline-drop: Windows Paint CVE-2026-83844 (MSRC revisions 2026-11-06 and 2026-11-07, CVSS cut to 7.0, fix only through the Store), unexploited, local with user interaction, a patch-cycle item; the Store-only delivery path is a vulnerability-management footnote.
• borderline-drop: Amazon Babelfish for PostgreSQL CVE-2026-119923 (CVSS 4.0 9.3, pre-auth TDS handshake), niche, VPC-internal by default, no exploitation, AWS-managed fix.
• borderline-drop: UgCS CVE-2026-59104 (drone ground-control server accepts empty credentials), niche product, only the finder's write-up, no Swiss use evidenced.
• borderline-drop: Metasploit modules for NetScaler CVE-2026-88771 and GitLab CVE-2026-97229 (Rapid7 wrap-up 2026-11-06), exploit-maturity delta on entries that already say exploited, KEV-listed and public proof of concept; no reader decision changes (the Cisco ESA module of 2026-11-07 carried a new second CVE and a detection caveat, these do not).
• borderline-drop: Hunt.io's capture of the PAN-OS PHP2Shell and Fragnesia toolkit (second capture, AI platform, GlobalProtect cookie-forging tool, persistence said to survive reboots and firmware updates); the entry already tells readers a hotfix does not evict an attacker and carries the persistence checks; Hunt's 12.x-only calibration is the one refinement and does not change who patches. Recoverable if the audit disagrees.
• borderline-drop: refrigeration controllers, BfV and GAZ Hybrid investigating, Interior Ministry has no attribution, NZZ doubts the NoName057(16) claim, investigative status with no technical or Swiss delta; the entry already says responsibility is not established.
• borderline-drop: Chainalysis intrusion (names, usernames, password hashes and live tokens of all users exposed, KYT accounts reached, products restored 2026-11-07 with trusted-IP allowlisting and resets); vendor to law-enforcement customers but no Swiss or public-sector customer is established and no mechanism beyond a vendor-stated on-path attack; reopen if a Swiss authority is named or a technique is published.
• borderline-drop: DigiCert validation-archive exposure (Bugzilla report 2084460), Crédit Mutuel Arkéa EUR 118 million transfers via a provider platform, Brenner Base Tunnel company BBT SE, the EFK audit EFK-26182 of the BACS Cyber Security Hub (no obligation changes, no recommendation), Layer3 residential-proxy exits on a US government network, XLab cwpdoor on Control Web Panel, OpenAI GPT-6 Cyber, Recorded Future's October CVE landscape (periodic vendor digest, nearly everything already in the store); each fails the relevance or actionability gate or the incident floor on today's facts.
• Single-source: 2026-11-08/workos-artex-agent-escaped-sandbox-internal-tool-breach (single-source-victim: WorkOS's own bulletins, the researcher's claim validated by a forensics firm WorkOS retained); 2026-11-08/claude-code-dont-ask-again-secrets-in-settings-local-json (single-source: Apiiro's measurement, with Anthropic's documentation confirming only the mechanism).
• Backlog: the ChimeraZ forum-sale claim against the Belgian rescue zone Hainaut-Est (ZOHE) stays held; S4 re-searched in French, Dutch and English and found no zone statement and no Belgian press, expiry 2026-11-17 unchanged. No row changed state, so nothing was appended to it.
• Apple entry: no source lists the 99 countries; a search for a Swiss authority or parliament statement on 2026-11-08 found none.
• Contradiction: BSI's framing of the Apple notifications. BSI's public page says to treat the device as possibly compromised and to consider replacing it where the risk is rated high; The Record, relaying the digital minister on BSI's letter to the members of 2026-10-30, says recipients were told to assume infection and replace immediately. The entry follows BSI's public page and states both in its sourcing note.
• Contradiction: the date Apple began blocking the eMudhra intermediates. The incident tracker and BleepingComputer say 2026-10-22; Apple's own page says 2026-10-19 (intermediates) and 2026-10-23 (the G3 root). The eMudhra entry now uses Apple's dates.
• Reader credit: the belden-psirt extract fell through to the metered jina reader and a url call on api.github.com ran past 120 s and finished through it; both are recorded in the source notes (use WebFetch on github.com/advisories for GitHub advisory listings).
• Watchlist: none configured, sweeps are a no-op.
• Candidate sources: android-security-bulletin, parlament-ch-odata (OData service for Curia Vista motions, the policy watch's route to the Swiss parliament) and apiiro-research; S3 also proposed layer3-intel and S1 spip-security-blog, not added (their items fell below the gate). efk-ch is productive and a promotion candidate once it meets the three-run bar.
• Coverage gaps: connectwise-trust-center (403 on every transport, status-page substitute shows no new security incident); ico-uk (403 on every transport, WebSearch found no in-window notice); sygnia (403 on every transport); rbb24-recherche (stale cached listing); proofpoint and mandiant-gtig (no dated in-window listing readable; the labs were swept through feeds and per-post reads).
• Next audit: the fortinet-psirt and cisa-advisories feeds no longer answer (their working routes are in the source notes); chrome-releases is read with extract and WebFetch only.