Cybersecurity Roundup: Fireworks Breach, OpenAI’s 948 Linux Exploits, Nvidia Probe
Summary
The roundup covers Fireworks’ breach and exposed Notion AI chats, OpenAI’s reported 948 Linux privilege-escalation exploits, an OpenSSH authentication bypass, N-central shutdowns after alleged zero-days, and an Nvidia board investigation into reported spying.
Key points
- Fireworks disclosed access to account and billing information, secrets, datasets, and some incomplete model weights; Notion said fewer than 1% of workspaces were affected and that AI chat transcripts were exposed.
- OpenAI reported that a research pipeline reproduced 1,724 Linux kernel vulnerabilities and generated 948 working local privilege-escalation exploits; the tested attacks required an existing foothold.
- OpenSSH CVE-2026-123158 can bypass password authentication on certain musl-based Linux systems without PAM. CISA added it to KEV; fixes include OpenSSH 10.6p2 or a distribution update.
- N-able took hosted N-central offline and advised on-premises customers to shut down after a researcher published 33 alleged zero-days. N-able said it had found no evidence of active exploitation in its environments.
- Nvidia’s board opened an independent investigation following reports that CEO Jensen Huang was targeted by a foreign intelligence operation. The board said it had no reason to believe Nvidia secrets or national security were compromised.
- In controlled enterprise-network tests, Vals AI reported that DeepSeek V4.1 Flash completed about 73% of objectives, compared with 81% for a restricted-access OpenAI model; the tests were not observed attacks on businesses.
Article Details
- Event Type
- Cybersecurity news roundup covering a confirmed data breach, reported and confirmed vulnerability exploitation, vulnerability research, and security product developments.
- Impact
- Fireworks AI reported that attackers accessed account and billing information, secrets, datasets, and incomplete model weights for some customers; a compromised cloud provider reportedly gave the attacker a route into Fireworks development machines. Notion said fewer than 1% of workspaces were affected and that exposed Insights transcripts could contain sensitive information; it disconnected Fireworks and disabled Insights. OpenSSH CVE-2026-123158 was reported as actively exploited on certain musl-based systems without PAM. Barracuda said attackers exploited a vulnerability chain against a small number of organizations. Other reported risks included alleged N-central zero-days prompting N-able to take hosted environments offline, SAP flaws for which exploitation was not observed in the wild, and Plex flaws QNAP said were being chained for unauthenticated remote code execution. OpenAI reported generating 948 working local privilege-escalation exploits in a research run; the article notes these require an initial foothold and were produced in tested configurations.
MITRE ATT&CK
CVE
CVE-2026-111560Barracuda Networks · Barracuda Email Security Gateway (ESG); Barracuda Networks · Barracuda Load Balancer Application Delivery Controller (ADC); +4 moreBarracuda says attackers have exploited two flaws against a small number of organizations. On Email Security Gateway, chaining CVE-2026-116606 with CVE-2026-111560 can bypass authorization and execute commands as root.CVE-2026-116606Barracuda Networks · Barracuda Email Security Gateway (ESG)Barracuda says attackers have exploited two flaws against a small number of organizations. On Email Security Gateway, chaining CVE-2026-116606 with CVE-2026-111560 can bypass authorization and execute commands as root.CVE-2026-123158OpenBSD · OpenSSHOpenSSH’s CVE-2026-123158 affects certain Linux systems using musl without PAM. With password authentication enabled and specific account configurations, a long password can authenticate to an account whose passwordCVE-2026-76964SAP_SE · SAP NetWeaver AS ABAP (Internet Communication Manager)Onapsis Research Labs tracks ICM2SHELL as CVE-2026-76964 and CVE-2026-89126, both CVSS 10.0. Source: Onapsis.CVE-2026-89126SAP_SE · SAP Web DispatcherOnapsis Research Labs tracks ICM2SHELL as CVE-2026-76964 and CVE-2026-89126, both CVSS 10.0. Source: Onapsis.
People
Ozgun KultekinResearcher who explained how the OpenSSH password-checking error can allow authentication bypass on certain musl-based systems without PAM.Sean BalesResearcher who published findings describing 33 alleged N-central zero-days; the article says the full affected-version range had not yet been vendor-confirmed.
Vendors
BarracudaBarracuda confirms exploitation of an ESG root-access chainDeepSeekDeepSeek narrows the offensive AI gap in enterprise-network testsFireworks AIAside from that, it’s been a rough week for AI infrastructure. Fireworks AI got hacked, and the fallout is still spreading. OpenAI’s AI found 948 paths to root in Linux, and a Chinese open-weight model came close inN-able🛠️ N-central taken offline: N-able shut hosted environments and urged on-prem shutdowns after disclosure of 33 alleged zero-days.Notion💬 Fireworks breach reaches Notion: AI chat transcripts were exposed; Notion disconnected Fireworks and disabled Insights.NvidiaNvidia investigates alleged spying targeting Jensen HuangOpenAIbeen a rough week for AI infrastructure. Fireworks AI got hacked, and the fallout is still spreading. OpenAI’s AI found 948 paths to root in Linux, and a Chinese open-weight model came close in performance to aQNAPQNAP warns that four Plex Media Server flaws are being chained for unauthenticated RCE, with compromised servers running miners and proxy software. The vulnerabilities are in Plex, not QTS or QuTS hero.SAPSAP fixes four CVSS 10.0 flaws, including ICM2SHELLWorkOSWorkOS attributes its breach to a researcher’s unintended AI intrusion
Products
DeepSeek v4.1 FlashVals AI found that DeepSeek V4.1 Flash completed about 73% of objectives across two simulated enterprise networks, versus 81% for OpenAI’s restricted-access GPT-6 Sol Daybreak. On the harder Lighthouse range, DaybreakEmail Security GatewayBarracuda says attackers have exploited two flaws against a small number of organizations. On Email Security Gateway, chaining CVE-2026-116606 with CVE-2026-111560 can bypass authorization and execute commands as root.GPT-6 Sol Daybreakof objectives across two simulated enterprise networks, versus 81% for OpenAI’s restricted-access GPT-6 Sol Daybreak. On the harder Lighthouse range, Daybreak completed 27 of 31 objectives; DeepSeek completed 21.Linux kernelOpenAI says an autonomous research pipeline reproduced 1,724 Linux kernel vulnerabilities and produced 948 working local privilege-escalation exploits in an October run. The reported API bill was about $1.21M.N-central🛠️ N-central taken offline: N-able shut hosted environments and urged on-prem shutdowns after disclosure of 33 alleged zero-days.OpenSSH🐛 sshole bypasses SSH authentication: An actively exploited OpenSSH flaw allows authentication bypass on certain musl-based systems without PAM.Plex Media ServerQNAP warns that four Plex Media Server flaws are being chained for unauthenticated RCE, with compromised servers running miners and proxy software. The vulnerabilities are in Plex, not QTS or QuTS hero.Web DispatcherCVSS 10.0 flaws. Onapsis demonstrated unauthenticated RCE through WebSocket reassembly in ICM and Web Dispatcher: ICM2SHELL, CVE-2026-76964 and CVE-2026-89126. Commands run as <sid>adm, the account owning the SAP