Understand the threat. Build the defense.
MAG212 explains the attacks and vulnerabilities that matter in plain language, then shows you what to do about them. Every analysis cites its sources and ends with practical steps you can take today, whether you protect a family, a small business or an enterprise network.
Latest analysis
New explainers on the vulnerabilities and incidents security teams are dealing with right now: what happened, who is affected and what to do.
Signed, Provenanced and Malicious: Hijacked Accounts Shipped Malware in bee-js 13.3.0 and Swarm Desktop 0.56.2
Hijacked maintainer and release-bot accounts ran Ethersphere’s own workflows to publish malicious bee-js 13.3.0 with valid npm provenance and signed Swarm Desktop 0.56.2 builds. How it…
Read the analysis
Frontline Education Breach Climbs to 3.08 Million School Staff and Students; Amplifon, Revolve Counts Rise
Frontline Education now says its August breach hit 3,085,266 school employees and students, more than double earlier filings.…
France Blames Iran’s IRGC for Heating Supermarket Fridges: Refrigeration Controllers Become a State Target
French prosecutors and ANSSI attribute the October sabotage of supermarket refrigeration to the IRGC-linked Shahid Kaveh group.…
Qubole’s Own AWS Account Was Used to Assume Customer IAM Roles and Steal Cloud and Identity Secrets
An attacker used Qubole’s AWS account to assume IAM roles customers created for the vendor, many long unused, then read secrets,…
CISA Gives Three Days to Fix Exploited FreeSWITCH, GPUStack and IBM Aspera Faspex Flaws
CISA’s 9 November KEV batch puts FreeSWITCH (CVE-2026-116779), GPUStack (CVE-2026-102895) and IBM Aspera Faspex (CVE-2026-123218)…
Plex2Shell: Four Unauthenticated Plex Flaws Exploited Against QNAP NAS Owners — Update and Close Port 32400
QNAP warns that Plex2Shell, four unauthenticated remote-code-execution flaws in Plex Media Server, has been widely exploited…
SonicWall CVE-2026-19868 Update: SSL-VPNs That Skip SAML MFA, Fixed SonicOS Builds and the 20 Nov Deadline
Exploited SonicOS flaw CVE-2026-19868 lets users with alternate-method credentials bypass SAML-enforced MFA on SSL-VPN. Fixed in…
Attackers Walk In Through Trusted Doors: OpenSSH sshole, SonicWall MFA Bypass, Qubole AWS Abuse — MAG212 CYBER Daily, 10 November 2026
Exploited OpenSSH sshole on Alpine/musl (KEV due Nov 12), a SonicWall SSL-VPN flaw that skips SAML MFA, Plex2Shell on QNAP NAS, Qubole’s own AWS account used on customer roles, signed bee-js malware and France’s IRGC attribution for the fridge sabotage. Plus the three actions to take today.
Each issue pairs every story with a defensive field guide: an architecture diagram, the controls that actually help and the steps to verify you are protected.
Free security tools
Practical tools built for everyday security decisions. They run in your browser, and the sensitive ones never send your data anywhere.
Learn cybersecurity step by step
Structured learning paths that take you from the basics to professional skills, using our articles, cheat sheets and tools along the way.
Pick the path that fits you, from staying safe online to professional security skills, and track your progress as you go.
Start a learning path →About MAG212
MAG212 is an independent cybersecurity publication founded and edited by El Mostafa Ouchen, an IT and cybersecurity professional with more than 20 years of experience in enterprise networking, systems administration and digital infrastructure.
Every story is checked against primary sources, which we link so you can verify them yourself. The goal is defense: helping readers understand threats and protect what matters.
About us · Editorial policy · Books by the editor