2026-11-08T1309Z-audit
One pipeline fire, in full · audit run of 2026-11-08 · sub-agent allocation and telemetry, per-iteration verification verdicts and findings, source-list edits, coverage gaps, bridge invocations, and the run's own verification & coverage notes: what was published, what was dropped at the borderline or judged not relevant (and why), single-source carve-outs, and contradictions. Rendered from runs/2026-11-08/2026-11-08T1309Z-audit.md.
Run telemetry
2026-11-08T1309Z-audit
audit
prompt v4.24
publish ok
Claude Opus 5.5
(claude-opus-5-5)
main agent
G1
Claude Sonnet 5.5
(claude-sonnet-5-5)
- Items returned
- 15
- Duration
- 36m 14s
- Tool calls
- 8 WebFetch10 WebSearch150 bridge
- Cited sources
- 0 of 46 in slice
G2
Claude Sonnet 5.5
(claude-sonnet-5-5)
- Items returned
- 8
- Duration
- 32m 36s
- Tool calls
- 3 WebFetch24 WebSearch170 bridge
- Cited sources
- 0 of 44 in slice
G3
Claude Sonnet 5.5
(claude-sonnet-5-5)
- Items returned
- 3
- Duration
- 20m 07s
- Tool calls
- 2 WebFetch10 WebSearch110 bridge
- Cited sources
- 0 of 44 in slice
truth-TA
Claude Sonnet 5.5
(claude-sonnet-5-5)
- Items returned
- 0
- Duration
- 24m 08s
- Tool calls
- not reported
- Cited sources
- none
truth-TB
Claude Sonnet 5.5
(claude-sonnet-5-5)
- Items returned
- 0
- Duration
- 23m 29s
- Tool calls
- not reported
- Cited sources
- none
truth-TC
Claude Sonnet 5.5
(claude-sonnet-5-5)
- Items returned
- 0
- Duration
- 27m 29s
- Tool calls
- not reported
- Cited sources
- none
truth-TD
Claude Sonnet 5.5
(claude-sonnet-5-5)
- Items returned
- 0
- Duration
- 31m 08s
- Tool calls
- not reported
- Cited sources
- none
truth-TE
Claude Sonnet 5.5
(claude-sonnet-5-5)
- Items returned
- 0
- Duration
- 32m 54s
- Tool calls
- not reported
- Cited sources
- none
Verification
✓ double-CLEAN · Sonnet 5.5 ×2 #? NEEDS_FIXES · Sonnet 5.5 · t=5 e=4 a=9 #? NEEDS_FIXES · Sonnet 5.5 · t=5 e=0 a=7 #? NEEDS_FIXES · Sonnet 5.5 · t=1 e=0 a=3 #? CLEAN · Sonnet 5.5 · t=0 e=0 a=3 #? CLEAN · Sonnet 5.5 · t=0 e=0 a=3
Deep dive
·
Entries this run published (3) and updated (27)
- CVE-2026-61425 and the follow-up batch, Balbooa Gridbox for Joomla: a client-supplied cookie is accepted as proof of identity, giving anonymous Super User access
- Berlin's state government confirms an extortion attempt after a phishing click opens the shared Landesnetz; media reporting names Rhysida
- CVE-2026-76461: Cisco Secure Email Gateway unauthenticated SQL injection in email parsing reaches root command execution, exploited before disclosure (CVSS 9.8)
- CVE-2026-7273 and CVE-2026-107441, Zyxel GS1900 switches: GreyNoise caught a Red Heron-linked actor exfiltrating configurations and hashed root credentials from 996 switches in 48 countries, and Binarly shows its exploit targets a separate flaw that the June fix leaves open; only the .3C0 builds close it
- CVE-2026-13684 / CVE-2026-13639, Synology DSM: two unauthenticated CVSS 9.8 flaws (SCGI output-encoding bug, login-logic entropy weakness) allow remote arbitrary file read/write and denial-of-service with no credentials; C3RB3R ransomware is now encrypting NAS on outdated DSM
- PK Softech, software supplier of Swiss pension funds: malware and a data outflow at Publica, with the City of Zurich fund PKZH saying its insured persons' test data was stolen, the Bernese funds BPK and BLVK and Pensionskasse Post also reporting the supplier incident, and the Federal Prosecutor's Office investigating
- CVE-2026-104935, Ivanti Connect Secure: an authentication bypass chained to code execution is exploited as a zero-day, the root-escalation step was patched on 2026-10-29 and CISA lists all three chain flaws (CVSS 8.6)
- eMudhra: the private keys of eight intermediate CA certificates were trivially recoverable, so anyone could forge trusted HTTPS certificates; browsers block them, clients with their own trust store or no revocation checking need an update (CVE-2026-111943 in Go)
- LiteLLM 1.107.0: the PyPI wheels and the official Docker images carried a credential stealer and a dormant remote-code loader that Python starts at every launch, published through the maintainers' own release workflow with stolen developer tokens
- ARTEX: Microsoft reports Storm-0940, a China-state aligned actor, running an open-source multi-agent LLM penetration-testing framework against hundreds of organizations, with privileged cloud access in under three hours in some cases, and Expel sees the same infrastructure abuse Okta self-service registration
- CVE-2026-111497, Node.js and Google Brotli (Node2Shell): an out-of-bounds write in the Brotli decoder lets crafted compressed data run code, reached through fetch() and Express 5 or body-parser 2 request bodies; fixed in Node.js 22.23.4, 24.22.1 and 26.12.1 and in the PyPI packages Brotli 1.2.1 and brotlicffi 1.2.1.0 (CVSS 4.0 9.2)
- CVE-2026-109618 / CVE-2026-109619, QNAP QTS, QuTS hero and QuTScloud: the PHP2Shell flaws reach the NAS web components before authentication; fixed builds of 2026-10-23, and QVR Surveillance, TVR OS, Notes Station 3 and QNE (ADRA) now fixed
- CVE-2026-109618 / CVE-2026-109619, Cisco Expressway, Ultra-Reliable Wireless Backhaul, Duo Access Gateway and ISE Portal Builder: Cisco's final PHP2Shell advisory names Expressway 15.5.21 and Duo Access Gateway 3.2.0 as the fixes and knows of no malicious use against its products
- CVE-2026-109618 / CVE-2026-109619, PHP2Shell in management servers and storage: Trend Micro Apex Central and Apex One server have no released fix, with patches expected on 2026-11-11, Quest KACE SMA and SDA have fixes and should block ports 80, 443 and 52230 until patched, and NetApp ONTAP 9 is affected by CVE-2026-109618 only, inside the PHP jail
- WordPress core 4.7 to 7.1.3: an unauthenticated race in the core update process can lead to remote code execution, fixed in 7.1.4 and backported to every supported branch, listed by CISA as exploited; Wordfence assigned CVE-2026-119977
- CVE-2026-98432, Linux kernel IPv4 TCP: a use-after-free in connection setup, present since 4.4, has an Anthropic-built remote root exploit against MPTCP listeners that CloudLinux could not reproduce; Citrix XenServer, XCP-ng, MikroTik, Red Hat, Debian, CIQ, Amazon Linux, Ubuntu 26.10 and Sophos have fixes, Ubuntu's LTS kernels are in progress and WatchGuard and Fortinet have none for their products (CVSS 9.8)
- Canton Vaud: unauthorised access to the IT-support platform of its Gymnases and professional schools copied the names, school e-mail addresses and support requests of about 3,500 teachers and 38,000 pupils; police arrested a 16-year-old pupil of the schools on 2026-10-31
- Android telephony ('SMS of Death'): one hidden WAP Push message crashes the phone process and drops calls, emergency calls included; fixed for Android 14 to 17 at the 2026-11-01 security patch level per Google's bulletin row for CVE-2026-58882, the identifier BleepingComputer gives; Android 12 and 13 stay exposed, public proof of concept
- CVE-2026-109618 / CVE-2026-109619, Xerox AltaLink, EC81xx, VersaLink and WorkCentre printers and Fiery print controllers: AltaLink 82xx and 81xx, EC81xx and VersaLink remediated with PHP 8.2.35, exposure-reducing patches for WorkCentre and the AltaLink C80xx and B80xx models, Fiery patches due 2026-11-09 to 2026-11-23
- CVE-2026-116606 / CVE-2026-111560, Barracuda Email Security Gateway: an unauthenticated configuration-import bypass chained with a root command injection, with watchTowr's detection tool public since 2026-11-03 and its full chain since 2026-11-05; patches are out and no exploitation is reported (CVSS 9.3 and 8.6)
- OPSSHIELD cPGuard: an attacker who registered as a customer reached the vendor's billing and licensing server and shipped a fake update on 2026-11-02 that ran as root on about 2,950 Linux servers, copying root secrets and leaving a root shell and a scheduled task
- Binance's own report on the 2026-10-29 theft of about USD 6.34 billion: a fake recruiter's coding assignment compromised an engineer's laptop, an internal AI tool carried the attacker to two colleagues and a container-deployment token, and a deployed container reached the wallet signing service; the FBI attributes it to North Korea's TraderTraitor
- Sophos's own root-cause analysis of a developer-targeted intrusion: a fake job-interview repository's VS Code workspace settings ran BeaverTail and InvisibleFerret on a Mac whose endpoint agent had not reported since 11 June, and a third-party OAuth authorization outlived the session revocation
- CVE-2026-116779, FreeSWITCH 1.11.2 and earlier: one inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands, the vendor says exploitation has been observed, and 1.11.3 fixes it (CVSS 3.1 9.8)
- Exposed application credentials: Microsoft sees an agentic framework search GitHub for OAuth and cloud application secrets and then sign in as the applications from 2026-10-28, and Todyl sees an operator use MSP applications to reach 27 organisations, government clients among them
- CVE-2026-111497, Brotli decoder flaw in Siemens Desigo CC and Industrial Edge, Mitel MiVoice Business and OpenScape, with Cisco listing Duo Network Gateway and RoomOS in its combined advisory: Desigo CC takes the .NET updates, while Mitel updates and the Industrial Edge Common Configurator fix are still pending
- Apple's mercenary-spyware threat notifications of late October reached Bundestag members and federal-government staff in Germany; BSI tells recipients to treat the iPhone as possibly compromised, update, keep Lockdown Mode on and consider replacing the device; no actor or vector is public
- CVE-2026-117691, Keycloak SAML HTTP-Redirect signature bypass: a percent-encoded parameter name lets an unauthenticated attacker log in as any federated user; fixed in Keycloak 26.8.2
- IBM API Connect: hard-coded administrative credentials, unauthenticated command injection and authentication bypass among the CVEs fixed in v12.1.1.3 and 10.0.8.13
- Elastic threats, etc. report, November 2026: signed AI assistants as execution parents, RMM agents as the payload, paste-and-run infostealers and legacy-protocol identity abuse
Sources changed (this run)
Edits this run made to sources/sources.json · promotions, demotions, new candidates, and fetch-method / category / reliability / url corrections (the run record's sources_changed[]). Paginated; 10 per page.
No source-list edits recorded for this run.
Coverage gaps (this run)
Sources this run's brief needed that returned no usable content via any documented recipe. Bridge-recovered or quiet-day sources do NOT appear here. (Distinct from the independent source-accessibility probe at the foot of this section, which probes all active sources regardless of what any run needed.)
No coverage gaps in this run · every source the brief needed returned usable content via its documented recipe.
Verification findings · all iterations
Per-iteration finding detail. Each table is one verifier pass · what was flagged, how the main agent remediated it, and the outcome. Walking the tables top-to-bottom shows the verifier's debugging trail across iterations.
Iteration #? NEEDS_FIXES · 18 findings (truth=5, editorial=4, advisory=9) · Claude Sonnet 5.5 · 28m 38s
| F-code | Section | Item · URL/quote | Verifier summary | Remediation · outcome |
|---|---|---|---|---|
| F3 claim-not-supported | · | September 2025 was cited to Inside IT, whose page carries no 2025 date; the watson.ch citation that carries it had been removed. | Applied: watson.ch citation restored after September 2025. | |
| F3 claim-not-supported | · | (low confidence) The summary stated BPK's assumption (ist davon auszugehen) as an assertion. | Applied: 'assumes'; record summary amended. | |
| F4 hallucinated-fact | · | (low confidence) 'one unauthenticated request' and 'no workaround' are unsupported; Red Hat's courtesy guidance names a prerequisite and an interim lever. | Applied: takeaway reworded to Red Hat's formal statement; the prerequisite and the account-registration lever added from Red Hat's guidance. | |
| F3 claim-not-supported | · | (low confidence) 'anonymized hosting address' spliced the 9 July case with the label of the recurring pattern. | Applied: 'an anonymized address known to be malicious'. | |
| F13 ? | · | (low confidence) The title stated the CVE-to-flaw link as fact; it rests on BleepingComputer. | Applied: title now says 'per Google's bulletin row for CVE-2026-58882, the identifier BleepingComputer gives'. | |
| F8 needs-more-research | · | 26.8.2 also fixes the exploited Brotli flaw CVE-2026-111497 in its bundled decoder; the entry did not say so or reference the Brotli entries. | Applied: sentence with Keycloak and CISA citations; references to both Brotli entries. | |
| F10 missed-angle | · | Keycloak 26.8.2 fixing the bundled decoder was missing from the Node2Shell entry. | Applied: added to this fire's correction record on that entry (section sentence, affected and fixed strings, affected_products, sources; fields amended). | |
| F8 needs-more-research | · | (low confidence) No count of the bulletins' CVEs and of the unauthenticated 9.x rows; the CVE records are a selection. | Applied: 'more than two hundred CVEs' (206 distinct ids) and 18 unauthenticated 9.x rows on the v12 bulletin; sourcing note says the records are a selection. | |
| F9 surface-contradiction | · | (low confidence) The older NZZ-attributed statement stood without a pointer to BPK's narrower notices. | Applied: this fire's section adds that the NZZ quoted the fund more broadly, cited to the NZZ. | |
| F11 editorial-advisory | · | (advisory) Sourcing notes argue the verification tier; the Keycloak note's 'main sponsor' is unsourced. | Applied: all three notes trimmed to provenance; 'main sponsor' removed. | |
| F11 editorial-advisory | · | (advisory) Red Hat page public date is 2026-11-05. | Applied: source record and citations dated 2026-11-05. | |
| F11 editorial-advisory | · | (advisory) 'the entry names' in the record summary. | Applied: summary amended to name the products. | |
| F11 editorial-advisory | · | (advisory) The eight-minute infostealer-to-login figure is a breakout-time statistic with no decision drawn from it. | Applied: removed from the body and the evidence list. | |
| F11 editorial-advisory | · | (advisory) Record summary narrower than the section; trimmed clauses, including Siemens' reason no action is needed without Management Applications, went unnamed. | Applied: the Siemens clause restored, the Cisco table sentence shortened instead; record summary amended. | |
| F11 editorial-advisory | · | (advisory) Stale 'updated on 2026-11-04' next to the 2026-11-06 revision. | Applied: 'updated through 2026-11-06'. | |
| F11 editorial-advisory | · | (advisory) Headline 'have none' reads as no remedy beside Fortinet's IPS virtual patch. | Applied: 'no fixed build from WatchGuard or Fortinet'. | |
| F11 editorial-advisory | · | (advisory) The summary still stopped at 2.20.4.2. | Applied: summary adds version 2.20.5.0; summary added to the record's fields. | |
| F11 editorial-advisory | · | (advisory, pre-existing) The 2026-10-25 record summary's 'so' clause is an inference. | Left: declined in the report with its reason; records are append-only. |
Iteration #? NEEDS_FIXES · 12 findings (truth=5, editorial=0, advisory=7) · Claude Sonnet 5.5 · 20m 27s
| F-code | Section | Item · URL/quote | Verifier summary | Remediation · outcome |
|---|---|---|---|---|
| F4 hallucinated-fact | · | The version scope and the single 26.8.2 upgrade target were wrong for Red Hat build of Keycloak, which Red Hat lists as fixed in 26.6.9 by RHSA-2026:96039 and RHSA-2026:96040 of 2026-11-07, with Red H | Applied: the Red Hat builds, errata and the unaffected RH SSO 7 added to the summary, body, Exposure, action, takeaway, cves and sourcing note; 26.8.2 confined to upstream Keycloak (raw Red Hat page re-read). | |
| F4 hallucinated-fact | · | (low confidence) 'No source reports exploitation' read blanket beside the exploited Brotli fix the release also carries. | Applied: scoped to the SAML flaws; the summary names the Brotli fix and CISA's listing. | |
| F4 hallucinated-fact | · | (low confidence) Detection hunted the encoded name 'instead of' SAMLResponse, but the attack places it before a signed one. | Applied: 'with or without a literal SAMLResponse beside it'; both halves labelled inferences. | |
| F4 hallucinated-fact | · | (low confidence) 'Keycloak before 26.8.2' stated a range the release notes do not give. | Applied: 'Keycloak builds without the 26.8.2 fix (no range stated)'. | |
| F4 hallucinated-fact | · | The calibration line used the pre-correction count; after the Ivanti move 12 of 47 entries are high (25.5%), at the alarm. | Applied: both counts stated; all 12 re-graded against the high bar, none failed, reasons given. | |
| F11 editorial-advisory | · | (advisory) 'no usable mitigation' and the report's 'no Red Hat mitigation' read absolute beside Red Hat's courtesy guidance. | Applied: 'no mitigation that meets its criteria' in both. | |
| F11 editorial-advisory | · | (advisory) Record summaries narrower than their sections (Node2Shell ELLIO correction; Publica NZZ and Inside IT sentences). | Applied: both record summaries amended. | |
| F11 editorial-advisory | · | (low confidence) The September 2025 month was attributed to what Publica confirmed to the paper, but it is Publica's statement to watson.ch. | Applied: 'in September 2025 as it told watson.ch'. | |
| F11 editorial-advisory | · | (low confidence) Exposure and the section's 'therefore' sentence stated the CVE-to-flaw link unhedged. | Applied: both carry 'BleepingComputer's identifier'. | |
| F11 editorial-advisory | · | (low confidence) The component names in Exposure and the action are uncited. | Applied: component names removed; every network-reachable API Connect endpoint counts. | |
| F11 editorial-advisory | · | (advisory) Publica main-analysis count 1,141 is 1,143 on disk. | Applied: 1,143. | |
| F11 editorial-advisory | · | (advisory) verification_iterations and the residual were first-pass values. | Applied: header follows the last iteration. |
Iteration #? NEEDS_FIXES · 4 findings (truth=1, editorial=0, advisory=3) · Claude Sonnet 5.5 · 18m 49s
| F-code | Section | Item · URL/quote | Verifier summary | Remediation · outcome |
|---|---|---|---|---|
| F4 hallucinated-fact | · | (low confidence) CVE-2026-110931 'releases before 26.8.2' and Exposure 'below 26.8.2' state a range the release notes do not give. | Applied: 'builds without the 26.8.2 fix', with the notes' lack of a range stated, in both CVE records and Exposure. | |
| F11 editorial-advisory | · | (advisory) The action's 'or serves SAML clients' scope is unsourced. | Applied: removed; the action covers SAML brokering, as the release notes do. | |
| F11 editorial-advisory | · | (advisory) The sourcing note said both sources describe the same fixes; Red Hat's page covers one CVE. | Applied: Red Hat describes CVE-2026-117691 alone. | |
| F11 editorial-advisory | · | (advisory) RHSA-2026:96040 covers the 26.6.9 packages and RHSA-2026:96039 the 26.6 container images; the entry bound both to 26.6.9. | Applied: each erratum bound to its own deliverable in the body, action, cves and sourcing note. |
Iteration #? CLEAN · 3 findings (truth=0, editorial=0, advisory=3) · Claude Sonnet 5.5 · 21m 11s
| F-code | Section | Item · URL/quote | Verifier summary | Remediation · outcome |
|---|---|---|---|---|
| F11 editorial-advisory | · | (advisory, pre-existing) smsofdeath.com is cited for 2026-10-29 but carries no date; the date is on the linked GitHub page. | Left: text predates this fire and the date is right on the researcher's repository; a candidate for the next record on the entry. | |
| F11 editorial-advisory | · | (advisory, pre-existing) Inside IT cited as 2026-10-09 (slug, dateCreated); JSON-LD datePublished reads 2026-10-13. | Left: the 2026-10-09 date matches the page's creation date and URL; no reader-facing defect. | |
| F11 editorial-advisory | · | (advisory, pre-existing) The takeaway names the AltaLink models but not EC8036 and EC8056, which the summary, cves and action carry. | Left: the action a responder works already names both models; the takeaway text predates this fire. |
Iteration #? CLEAN · 3 findings (truth=0, editorial=0, advisory=3) · Claude Sonnet 5.5 · 30m 40s
| F-code | Section | Item · URL/quote | Verifier summary | Remediation · outcome |
|---|---|---|---|---|
| F11 editorial-advisory | · | (advisory) Trend Micro's advisory now reads last updated 2026-11-04 and adds Deep Discovery Analyzer (patch expected 12 November); the entry's 2026-11-02 snapshot is stale, every claim and quote still | Left: a new development for the next intel fire's record on the entry, not a defect of this fire's changes. | |
| F11 editorial-advisory | · | (advisory, carried) The takeaway omits EC8036 and EC8056, which the summary, cves and action name. | Left: as in iteration 4. | |
| F11 editorial-advisory | · | (advisory) The coverage-gaps note called Citrix CTX697256 and CTX697300 a JS shell; extract reads both in full. | Applied: the note says the re-sweep's read failed and extract reads both. |
Verification & coverage notes
The run record's narrative body, verbatim. This is where the run accounts for its own judgement calls: every borderline drop and judged-not-relevant item with its reason, dedup decisions, single-source items and their carve-outs, contradictions, and per-source coverage gaps, so nothing the run considered disappears silently.
Verification & coverage notesrun record body
2026-11-08T1309Z-audit · audit · Opus 5.5 · window 168 h · 3 entries published
Scope and outcome
Scheduled weekly audit of 2026-11-01T13:12Z to 2026-11-08T13:09Z (anchor: the 2026-11-01 audit, the last with re-sweeps). Forty-seven entries with activity from the week's seven intel fires were truth-checked whole in five passes: 23 clean, 19 with imprecisions, 5 with factual errors. Twenty-seven entries carry one record each from this fire (9 update, 11 correction, 7 improvement; 6 internal), among them the out-of-window LiteLLM, Gridbox, Cisco PHP2Shell and ARTEX entries. Three findings the fires missed are published as new entries: Keycloak 26.8.2 (CVE-2026-117691), IBM API Connect and Elastic's November threats, etc. report. The report is docs/audits/2026-11-08-quality-audit.md.
Verification & coverage notes
- Claims: the open partial claim of cleanup wave 05 (
2026-10-21T1147Z-audit,partial 2026-10-21T11:47:42Z wave=05) still stands onmain; the scheduled audit ignores a partial claim (Phase 0 step 2), and it is more than 48 h old. - Truth passes: 47 entries in five batches, 1,380 ledger claims, every claim answered (4 unreadable in TE: superseded Trend Micro and CIQ page states). Verdicts: 23 clean, 19 imprecision, 5 factual error. TC also re-checked the LiteLLM watch item (factual error: its root-cause post was rewritten) and TB the Danfoss AFP quote (verbatim).
- Pre-pass leads: Splunk and QNAP quotes were verbatim until the publishers revised the pages (both replaced); the Cisco citation-cve lead was a real binding error (fixed).
- KEV: three additions since 2026-11-01, all covered (
work/2026-11-08T1309Z-audit/kev-window.txt); no COVERED-STALE or RANSOMWARE row. - Stale-truth sweep:
exploitation-consistencypasses over all 47 window entries and no criticalimmediate_actionlacks a fixed version. - Backlog: one open row, ChimeraZ/ZOHE, held to 2026-11-17 with a named condition; ARX Group SA was struck at expiry by the 2026-11-07 fire and G2 found no confirmation.
- Duplicates: no CVE-sharing pair touching the window lacks a
references[]link. - Recovered entries: Keycloak 26.8.2 and IBM API Connect clear PD-11(b) on their own mechanics (an unauthenticated login as any federated user; hard-coded administrative credentials with no privileges), both at
notablebecause no source shows constituency exposure; Elastic's report clears PD-9. IBM API Connect is the unexploited-bundle class of the open operator recommendation first raised on 2026-10-11 (recommendation 2 of this report); it is published here because PD-11(b)'s "otherwise" limb names exactly an anonymous path to full administrative control. - borderline-drop: Plex2Shell (CVE-2026-96652/-96654/-96655/-96656, KEV since 2026-10-20, QNAP notice of 2026-11-06 reports wide exploitation): consumer and SMB media server with no public-sector deployment shown; re-open on a Swiss nexus.
- borderline-drop: Windows Paint CVE-2026-83844 v2, Android November bulletin, Chrome 157, LXD CVE-2026-112816, the Drupal contrib wave of 2026-11-04, Absolute Secure Access 14.61, AWS Babelfish CVE-2026-119923, IBM Aspera Faspex CVE-2026-123218, HPE Fabric Composer HPESBNW05172, the Entra device-registration cloud CVE (G1): unexploited, on the regular cycle, end of life or fully mitigated by the vendor.
- borderline-drop: BBT SE (Brenner) attack, Gleis D / Medi Porta Chur (Cloak claim), BACS and police EHRA phishing warnings, EDÖB SkySale duty-to-inform ruling, ENISA CNW-2026-05 (G2): no vector, nexus or new obligation.
- borderline-drop: Symantec Anubis/Lindnor, CERT-In CIAD-2026-0058 CRAFTY FALCON, Microsoft exploited-vulnerabilities analysis and fake-download campaign, Check Point ChatGPT Lockdown bypass, CrowdStrike ecosystem post, Recorded Future October CVE landscape, Sophos ransomware in financial services, ESET SlippyNunchucks and Gorbag, Trend Micro Matryoshka, Censys ARTEX counts (G3): no constituency decision, fixed before the window, or no new fact.
- Declined truth-pass findings, with reasons in the report: Danfoss record-summary inference, Dahua CERT-UA carve-out, Cisco SEG labelled lines, Node2Shell 2026-10-27 record summary.
- Registry: the exposed-app-credentials campaign's summary and its ARTEX relation note now reflect Todyl's revision of 2026-11-06;
3AMadded tomalware:threeam'sambiguous_labels. - Source health:
connectwise-trust-centerstill flaps (read directly at 11:25Z, 403 at about 13:30Z) and staysblocked;novee-securitydemoted;balbooa-blogadded as a candidate; recipe notes on six further records. - Reader pool (context): 2 live jina keys, about 98k tokens; G1 and G3 fell through to the reader six times between them.
- ATT&CK pin: upstream v20.1 (2026-11-05) was available; updated this fire, no technique-level changes, self-test and build green.
- Tool and repo change:
.gitignorere-includeswork/**/gate.log, which thework/**/*.logrule of 2026-10-20 had kept out of every commit since the 2026-11-01 audit added it. - Coverage gaps: sygnia (blocked on every transport), ico-uk (403 on every transport, fifth consecutive run), the Ivanti hub advisory page (JS shell), Citrix CTX697256 and CTX697300 (a JS shell to the re-sweep's reader;
extractreads both in full, per the confirmation pass), the OX Security page (403; read from an archive copy by TE). - Verifier loop: five iterations. Iterations 1 to 3 returned NEEDS_FIXES (truth 5, 5, 1), all remediated; iteration 4 returned CLEAN and iteration 5, the cold confirmation pass over all 230 claims, confirmed it. Residual 0; the advisories left are listed with reasons in each iteration.
- Budget: 13 of 20 spawns (3 re-sweeps, 5 truth passes, 5 verifier passes, so 5 of 10 verifier spawns) and 6,625,713 sub-agent tokens (
work/2026-11-08T1309Z-audit/budget.tsv).
← Operations dashboard · run-record contract: docs/pipeline.md