Do Son 
Update to version 30.0 now to fix three Bitcoin Core vulnerabilities, including CVE-2025-62861, CVE-2025-62860, and CVE-2025-62859 affecting nodes.
Microsoft November 2026 Patch Tuesday fixes 1,093 vulnerabilities, including an exploited Outlook zero-day, CVE-2026-124194, and a CVSS 10.0 Entra flaw.
Update self-managed servers to 19.5.4 now to fix the critical GitLab heap overflow flaw CVE-2026-105437 that allows command execution in Gitaly.
Update Synology DiskStation Manager now to patch CVE-2026-76954, CVE-2026-85101, and 25 other flaws allowing arbitrary file writes and crashes.
Zoom Workplace for Windows 7.1.8 fixes CVE-2026-108186 (CVSS 9.6) and CVE-2026-108187, two escalation of privilege flaws. Update now.
Ivanti security advisories fix 13 flaws, including Ivanti Endpoint Manager RCE CVE-2026-121653 (CVSS 9.8) and CSA bug CVE-2026-121683.
Details and proof-of-concept steps for five mailcow vulnerabilities are public, including a CVSS 9.1 cross-tenant RCE. Update to 2026-11.
Composer 2.11.2 and 2.2.32 fix three Composer vulnerabilities, including command execution via a crafted composer.lock file (CVSS 8.8).
The November 2026 OpenSSL security advisory fixes five Low-severity bugs in OpenSSL QUIC, AES-GCM-SIV and CMS. Releases are due December 1.
cybernewswire
Alisa Vijeo, California, 10th November 2026, CyberNewswire
Alisa Viejo, California, 10th November 2026, CyberNewswire
Alisa Viejo, California, 10th November 2026, CyberNewswire
Columbus, Ohio, United States, 10th November 2026, CyberNewswire
France attributed a destructive Iran refrigeration cyberattack impacting 700 sites to the IRGC group Shahid Kaveh, causing food spoilage and fires.
The project adopts the Asahi Linux GPL license across its repositories to stop commercial actors from using AI to launder code from Apple Silicon drivers.
A new Windows Hello login update allows simultaneous facial, fingerprint, and PIN entry, streamlining authentication in Windows 11.
Apache Commons Codec 1.23.0 addresses CVE-2026-119078 and CVE-2026-124077, while Apache HTTP Server 2.4.70 fixes a heap buffer overflow.
Attackers exploit a Barracuda ESG vulnerability chain (CVE-2026-116606, CVE-2026-111560) for root RCE after a proof-of-concept exploit went public.
Update Progress WS_FTP Server to 2025.0.5 now to patch CVE-2026-115338, CVE-2026-115341, and three other high-severity security vulnerabilities.
Apple issued the iOS 27.2.1 security update to fix critical iMessage eavesdropping flaws, zero-click Bluetooth pairing, and wireless memory bugs.
Anthropic launched Claude Fable 5.2 and Mythos 5.2, cutting API pricing by 20% while claiming the top Artificial Analysis intelligence benchmark score.