Skip to main content
New every working day · 5-minute read

IT Daily: your morning brief

Monday, 9 November 2026☕ 5 minLayoffs · Security · Skills · Jobs

1Patch this today

Actively exploitedGPUStack Improper Authentication Vulnerability

Affected: GPUStack (CVE-2026-102895)

GPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml.

  1. Check whether you run this product or version.
  2. Official required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or disco… Full guidance
  3. Review logs for signs of exploitation (CISA due date: 2026-11-12).
Source: CISA Known Exploited Vulnerabilities Catalog, added 2026-11-09

260-second skill

Three Sysmon events worth knowing

Sysmon event 1 is a process created, event 3 is a network connection, and event 11 is a file created. Together they tell you what ran, who it talked to and what it dropped on disk. They are the start of many investigations.

Topic: Sysmon

3Question of the day

Explain the TCP three-way handshake.
Topic: Networking · Your streak (this device):

4Open roles today

Senior Software EngineerLTIMindtree · Brazil, SPSenior Software EngineerLTIMindtree · Bengaluru, KarnAssociate – Operations – Operations – CBS – FIN – FP&A Account Support – GurgaonEY · Gurugram, HR

See all open roles →