Nov 11: Xen Orchestra auth bypass is under active exploitation, giving attackers admin on XCP-ng hosts
Attackers are going after the control and access layers: hypervisor management, cloud secrets, and the AI-assistant connectors that sit in front of both. Review who and what holds admin-level tokens in your stack, including agents.
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.