Do Son 
TL;DR Google’s kernelCTF program has published full technical details and a working exploit for CVE-2026-80521, a Linux...
Latest news
At a Glance Malware Family BBNet Linux botnet (META payload v3.0; 13 ELF binaries across 10 unique...
TL;DR Security researchers uncovered three connected cyber espionage clusters operating across Latin America, Asia, and Europe that...
Indian certificate authority eMudhra announced another major security remediation following its October cryptographic scandal. Specifically, the organization...
Corporate Japan faces an escalating wave of sophisticated cyberattacks in the artificial intelligence era. Specifically, the massive...
TL;DR Security firm V12 posted a video this week showing a Telegram Android RCE flaw in action....
At a glance Actor Unknown; not identified by ConnectWise Activity Unauthorized partner account access and deployment of...
TL;DR Google released Chrome 157.0.8103.78/.79 for Windows and Mac and 157.0.8103.78 for Linux, fixing 83 security flaws....
TL;DR OpenPrinting devs fixed a critical pappl-retrofit path traversal bug after researchers publicly disclosed the full flaw...
TL;DR Zoho fixed eight high-severity ManageEngine vulnerabilities on November 10 and 11, 2026. Six affect DDI Central,...
Zoho fixes eight ManageEngine vulnerabilities in DDI Central and ADAudit Plus, including Cisco router command injection and SQL injection flaws.
Go 1.27.4 and 1.26.11 deliver 12 Go security fixes, blocking cgo code execution at build time (CVE-2026-97033) and an HTTP/1 server crash.
Node.js fixes 17 bugs, including Node.js HTTP/2 vulnerabilities and a TLS heap leak (CVE-2026-123864). Update to 26.13.1, 24.22.3 or 22.23.5.
Update Apache HTTP Server to 2.4.71 now to fix CVE-2026-119618, a critical mod_http2 remote code execution flaw, alongside CVE-2026-106023.
cybernewswire
Torrance, USA, 11th November 2026, CyberNewswire
N-able patches N-central vulnerabilities in 2026.4 HF2 as attackers scan with the public proof-of-concept exploit. Seven CVEs, up to CVSS 9.3.
The unpatched worse_query iOS sandbox escape flaw allows malicious apps to bypass container restrictions and siphon crypto wallet data and photos.
SignDrop, an unpatched Windows CLFS zero-day, now has a public proof-of-concept exploit that gives standard users SYSTEM privileges. No patch yet.
Proofpoint researchers detailed the BluePhishing attack Entra Agent ID technique, showing how malicious AI agent blueprints enable OAuth consent abuse.
Update MongoDB Server to 9.0.7 now to fix CVE-2026-118383, CVE-2026-120808, and 24 other flaws causing code execution, memory leaks, and crashes.
Five critical Windows vulnerabilities rated CVSS 9.8 hit Windows Kerberos, LDAP, DNS, DHCP and iSCSI. Patch domain controllers and servers first.
CISA KEV additions on November 10 cover six Known Exploited Vulnerabilities in Outlook, Chrome, Barracuda ESG, Cisco BroadWorks and Openwave.
Axis fixes 15 flaws, led by AXIS Camera Station bug CVE-2026-13312 (CVSS 9.9) that could compromise a system. AXIS OS updates also released.
Microsoft fixes a CVSS 9.9 SharePoint Server vulnerability, a 9.9 Azure DevOps Server RCE and a 9.8 SQL Server flaw in November 2026 Patch Tuesday.
Update to Git 2.56.1 now to fix six Git security vulnerabilities, including CVE-2026-111760 and CVE-2026-105437 for code execution and heap bugs.
Microsoft patches Outlook zero-day CVE-2026-124194, a spoofing flaw exploited in the wild and added to CISA KEV. Install the November 2026 updates.
Fortinet fixes eight critical vulnerabilities, including FortiManager RCE CVE-2026-126170 (CVSS 9.8). Fortinet critical vulnerabilities also hit FortiOS.
Update to version 30.0 now to fix three Bitcoin Core vulnerabilities, including CVE-2025-62861, CVE-2025-62860, and CVE-2025-62859 affecting nodes.
Microsoft November 2026 Patch Tuesday fixes 1,093 vulnerabilities, including an exploited Outlook zero-day, CVE-2026-124194, and a CVSS 10.0 Entra flaw.
Update self-managed servers to 19.5.4 now to fix the critical GitLab heap overflow flaw CVE-2026-105437 that allows command execution in Gitaly.
Update Synology DiskStation Manager now to patch CVE-2026-76954, CVE-2026-85101, and 25 other flaws allowing arbitrary file writes and crashes.
Zoom Workplace for Windows 7.1.8 fixes CVE-2026-108186 (CVSS 9.6) and CVE-2026-108187, two escalation of privilege flaws. Update now.