Do Son 
TL;DR The Plone/Zope Security Team released fixes on November 10, 2026, for a Plone remote code execution...
Latest news
TL;DR Check Point says attackers exploited CVE-2026-123039 against “a couple of dozen customers.” This Check Point Gateway...
TL;DR Cloud Software Group has released four Citrix security bulletins that fix 31 CVEs. Most of the...
cybernewswire
San Francisco, California, USA, 12th November 2026, CyberNewswire
TL;DR Google’s kernelCTF program has published full technical details and a working exploit for CVE-2026-80521, a Linux...
At a Glance Malware Family BBNet Linux botnet (META payload v3.0; 13 ELF binaries across 10 unique...
TL;DR Security researchers uncovered three connected cyber espionage clusters operating across Latin America, Asia, and Europe that...
Indian certificate authority eMudhra announced another major security remediation following its October cryptographic scandal. Specifically, the organization...
Corporate Japan faces an escalating wave of sophisticated cyberattacks in the artificial intelligence era. Specifically, the massive...
TL;DR Security firm V12 posted a video this week showing a Telegram Android RCE flaw in action....
San Francisco, California, USA, 12th November 2026, CyberNewswire
Telegram fixes a Telegram Android RCE flaw after V12 showed remote code execution through a bot message. No CVE yet. Update the Android app now.
Google Chrome security update 157.0.8103.78 fixes 83 flaws, including five Critical use-after-free bugs such as CVE-2026-126885. Update Chrome now.
Full details and PoC exploit code for the critical pappl-retrofit path traversal flaw CVE-2026-123747 are now public. Apply commit c65a28f right away.
Zoho fixes eight ManageEngine vulnerabilities in DDI Central and ADAudit Plus, including Cisco router command injection and SQL injection flaws.
Go 1.27.4 and 1.26.11 deliver 12 Go security fixes, blocking cgo code execution at build time (CVE-2026-97033) and an HTTP/1 server crash.
Node.js fixes 17 bugs, including Node.js HTTP/2 vulnerabilities and a TLS heap leak (CVE-2026-123864). Update to 26.13.1, 24.22.3 or 22.23.5.
Update Apache HTTP Server to 2.4.71 now to fix CVE-2026-119618, a critical mod_http2 remote code execution flaw, alongside CVE-2026-106023.
Torrance, USA, 11th November 2026, CyberNewswire
N-able patches N-central vulnerabilities in 2026.4 HF2 as attackers scan with the public proof-of-concept exploit. Seven CVEs, up to CVSS 9.3.
The unpatched worse_query iOS sandbox escape flaw allows malicious apps to bypass container restrictions and siphon crypto wallet data and photos.
SignDrop, an unpatched Windows CLFS zero-day, now has a public proof-of-concept exploit that gives standard users SYSTEM privileges. No patch yet.
Proofpoint researchers detailed the BluePhishing attack Entra Agent ID technique, showing how malicious AI agent blueprints enable OAuth consent abuse.
Update MongoDB Server to 9.0.7 now to fix CVE-2026-118383, CVE-2026-120808, and 24 other flaws causing code execution, memory leaks, and crashes.
Five critical Windows vulnerabilities rated CVSS 9.8 hit Windows Kerberos, LDAP, DNS, DHCP and iSCSI. Patch domain controllers and servers first.
CISA KEV additions on November 10 cover six Known Exploited Vulnerabilities in Outlook, Chrome, Barracuda ESG, Cisco BroadWorks and Openwave.
Axis fixes 15 flaws, led by AXIS Camera Station bug CVE-2026-13312 (CVSS 9.9) that could compromise a system. AXIS OS updates also released.
Microsoft fixes a CVSS 9.9 SharePoint Server vulnerability, a 9.9 Azure DevOps Server RCE and a 9.8 SQL Server flaw in November 2026 Patch Tuesday.
Update to Git 2.56.1 now to fix six Git security vulnerabilities, including CVE-2026-111760 and CVE-2026-105437 for code execution and heap bugs.
Microsoft patches Outlook zero-day CVE-2026-124194, a spoofing flaw exploited in the wild and added to CISA KEV. Install the November 2026 updates.
Fortinet fixes eight critical vulnerabilities, including FortiManager RCE CVE-2026-126170 (CVSS 9.8). Fortinet critical vulnerabilities also hit FortiOS.
Update to version 30.0 now to fix three Bitcoin Core vulnerabilities, including CVE-2025-62861, CVE-2025-62860, and CVE-2025-62859 affecting nodes.