SonicWall MFA Bypass Exploited; QNAP Says Patching Plex Isn't Enough
Saturday, November 7, 2026 · 9 min
CISA confirms exploitation of a SonicOS SSL-VPN flaw that can sidestep SAML-enforced MFA, and QNAP tells exposed Plex users to assume compromise. Plus, new research on autonomous ARTEX operations and OpenAI's restricted GPT-6 Cyber model.
Listen
Show notes
CISA confirms exploitation of a SonicOS SSL-VPN flaw that can sidestep SAML-enforced MFA, and QNAP tells exposed Plex users to assume compromise. Plus, new research on autonomous ARTEX operations and OpenAI's restricted GPT-6 Cyber model.
In this episode
- SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks — BleepingComputer
“The vulnerability, tracked as CVE-2026-19868, allows attackers with valid credentials for an alternate authentication method to bypass SAML authentication controls, potentially including SAML-enforced multi-factor authentication (MFA). The flaw has a CVSS severity score of 7.1…”
- QNAP says hackers breaching NAS devices in Plex2Shell attacks — BleepingComputer
“QNAP says that users should treat their NAS devices and all personal content as compromised if they're running a vulnerable Plex server that is exposed on the public web. The vendor warned that updating now will not remove any payloads the attackers have already installed on the…”
- Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns - Check Point Research — Check Point Research
“As described further below, artifacts obtained by Check Point Research show that these systems can work fully autonomously after the initial goal has been set by the operator. Using agentic hacking frameworks like ARTEX, threat actors can carry out attacks at a previously…”
- OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs — BleepingComputer
“OpenAI has classified the new model as having "Critical" cybersecurity capabilities under its Preparedness Framework, up from the "High" classification given to its previous model. The new model is not publicly available, with access currently restricted to a select group of…”