Daily Summary of Cybersecurity · Live edition, updated continuouslyTuesday 10 November 2026 · UTC
Latest Cybersecurity News Today: 10 November 2026
SonicWall patches flaws as OpenClaw skills deliver malware and Trump picks CISA nominee
President Trump nominated Palantir's Michael LoSapio to lead CISA, which has lacked a Senate-confirmed director for the entirety of Trump's second term. SonicWall updated an advisory for seven Gen 7 and Gen 8 firewall flaws, warning of potential active exploitation of a SAML authentication bypass that CISA says is active. Acronis reported more than 575 malicious OpenClaw skills that delivered malware to Windows and macOS systems.
Malicious OpenClaw skills deliver malware to Windows and macOS
Acronis said more than 575 malicious OpenClaw skills disguised as utilities delivered trojans, cryptocurrency miners and information stealers to Windows and macOS systems. It described AI agents coordinating attacks, stolen credentials accessing linked services, and tools that interfere with intrusion detection and recovery. It also detailed a Gitea exploit campaign and a Qilin ransomware sample that could delete Windows Volume Shadow Copies.
President Donald Trump on Monday nominated Michael LoSapio, chief information security officer at Palantir, to lead the Cybersecurity and Infrastructure Security Agency. CISA has lacked a Senate-confirmed director for the entirety of Trump's second term after Sean Plankey withdrew in April. Republicans control the Senate until January, but Democrats have scrutinized Palantir over its work with the Department of Homeland Security.
SonicWall patches seven firewall flaws, one potentially exploited
SonicWall updated an advisory for seven Gen 7 and Gen 8 firewall flaws, five allowing unauthenticated remote attacks. It warned of potential active exploitation of CVE-2026-19868, a SAML authentication bypass in SonicOS SSL VPN. CISA added the bug to its Known Exploited Vulnerabilities catalog the same day and says it is active. SonicWall described potential exploitation and shipped fixes with a workaround only for the SAML bypass.
Illustration 
