Understand the threat. Build the defense.
MAG212 explains the attacks and vulnerabilities that matter in plain language, then shows you what to do about them. Every analysis cites its sources and ends with practical steps you can take today, whether you protect a family, a small business or an enterprise network.
Latest analysis
New explainers on the vulnerabilities and incidents security teams are dealing with right now: what happened, who is affected and what to do.
Microsoft 365 Outage: Outlook, Teams and Exchange Online Down as Servers Fail Health Checks
A large Microsoft 365 outage on 12 November 2026 cut users off from Outlook and Exchange Online and spread to Teams, SharePoint, Copilot and Defender XDR. Microsoft blames servers failing…
Read the analysis
Security Deadlines to 30 November: Barracuda, Xen Orchestra, eMudhra Distrust and Four Asus Router Flaws
Barracuda’s exploited flaw pair is due tomorrow, Xen Orchestra’s exploited bypass still has no CVE, eMudhra certificates start…
Ivanti and Citrix Ship Critical Fixes for Management Platforms: EPM 2024 SU8, CSA 5.0.8.1 and XenServer
Ivanti’s November update fixes a 9.8 Endpoint Manager SQL injection that can lead to unauthenticated RCE and a 9.4…
Apache httpd 2.4.71 Fixes a Critical HTTP/2 Flaw (CVE-2026-119618); Whether It Is Exploited Is Disputed
Apache rates CVE-2026-119618 in mod_http2 Critical: a synchronisation bug in assign_headers can corrupt the heap and allow remote…
An AI Pentest Platform in Real Intrusions: AntiFox Linked to IIS Web Shells and Stolen AWS Production Secrets
Arctic Wolf ties self-hosted instances of AntiFox, an open-source agentic pentesting platform, to intrusions that went from an…
Qlik Sense Servers Used as a Staging Post: Reverse Shells, and Exploits for ActiveMQ and Veeam Waiting in the Wings
Cynet blocked PowerShell reverse shells launched from Qlik Sense’s scheduler at several EU organisations within three minutes.…
Zoom Workplace for Windows: Update to 7.1.8 to Close a 9.6 Privilege-Escalation Flaw and Its 8.1 Companion
Zoom’s bulletins ZSB-26023 and ZSB-26024 fix CVE-2026-108186 (CVSS 9.6) and CVE-2026-108187 (8.1) in Zoom Workplace for Windows.…
MAG212 CYBER Daily · 12 November 2026: ScreenConnect MSP Attacks, KEV Deadline Day, Zoom, Qlik and AntiFox
Trusted tools in hostile hands: attackers used MSPs’ cloud ScreenConnect consoles to push rogue clients and SCKit to 288+ endpoints, four exploited flaws (OpenSSH SSHole, GPUStack, FreeSWITCH, Aspera Faspex) hit their KEV deadline today, Zoom fixes a 9.6 Windows flaw, Qlik Sense servers stage ActiveMQ and Veeam…
Each issue pairs every story with a defensive field guide: an architecture diagram, the controls that actually help and the steps to verify you are protected.
Free security tools
Practical tools built for everyday security decisions. They run in your browser, and the sensitive ones never send your data anywhere.
Learn cybersecurity step by step
Structured learning paths that take you from the basics to professional skills, using our articles, cheat sheets and tools along the way.
Pick the path that fits you, from staying safe online to professional security skills, and track your progress as you go.
Start a learning path →About MAG212
MAG212 is an independent cybersecurity publication founded and edited by El Mostafa Ouchen, an IT and cybersecurity professional with more than 20 years of experience in enterprise networking, systems administration and digital infrastructure.
Every story is checked against primary sources, which we link so you can verify them yourself. The goal is defense: helping readers understand threats and protect what matters.
About us · Editorial policy · Books by the editor