Do Son Cybersecurity firms warn of a Critical, actively exploited FortiWeb flaw that allows unauthenticated attackers to create a new administrator account on the FortiWeb Manager panel. Update to v8.0.2 immediately.
ASUS released an urgent patch for a Critical (CVSS 9.3) Auth Bypass flaw (CVE-2025-59367) in its DSL Series Routers. The bug allows remote attackers to gain unauthorized access without credentials. Update firmware immediately.
Qualcomm launches Dragonwing IQ-X, its first industrial PC processor with Oryon CPUs, 45 TOPS of AI power, and a rugged design for factory edge controllers.
OpenAI released GPT-5.1 Instant/Thinking with "adaptive reasoning" for slower, deeper thinking. It also adds new chat styles like Professional, Candid, and Quirky.
macOS Tahoe 26.2 beta reveals "Edge Light," an AI-driven virtual ring light that uses the display edges and Neural Engine to optimize illumination for video calls.
Microsoft revealed plans for an "Agentic OS," transforming Windows 11 into an AI-first platform using the Model Context Protocol (MCP) to let AI agents interact with native apps.
A malicious Chrome extension, Safery: Ethereum Wallet, steals BIP-39 seed phrases by encoding them into synthetic Sui blockchain addresses and broadcasting microtransactions, bypassing HTTP/C2 detection.
NVIDIA patched two High-severity flaws in its NeMo Framework. CVE-2025-23361 and CVE-2025-33178 allow local code injection and privilege escalation in AI training environments. Update to v2.5.0.
Amazon uncovered an advanced APT simultaneously exploiting Cisco ISE RCE (CVE-2025-20337) and Citrix Bleed Two (CVE-2025-5777) as zero-days. The attacker deployed a custom in-memory web shell on Cisco ISE.
A new macOS threat uses malicious AppleScript (.scpt) files, disguised as documents/updates, to bypass Gatekeeper and execute stealers like MacSync and Odyssey, exploiting user trust.
Zoho issued an urgent patch for a Critical (CVSS 9.8) Unauthenticated SQL Injection flaw (CVE-2025-8324) in Analytics Plus. The bug risks remote query execution and account takeover. Update to Build 6171.
A High-severity LPE flaw (CVE-2025-60710) in the WindowsAI Recall Policy Configuration scheduled task allows local users to gain SYSTEM privileges via a symlink arbitrary delete attack.
cybernewswire
New York, New York, 13th November 2025, CyberNewsWire
Google Workspace now supports direct, server-to-server data migration from Dropbox via APIs. Enterprise customers can transfer up to 100 accounts per session.
Apple Wallet now supports digital US Passports for TSA identity checks on domestic flights, eliminating the need for a physical passport or Real ID-compliant license.
Windows 11 now supports a new API allowing password managers (like 1Password, Bitwarden) to handle passkey authentication directly, simplifying cross-platform sign-in.
Valve unveiled Steam Frame VR, a standalone headset with Snapdragon 8 Gen 3, SteamOS, and Foveated Streaming, set to launch in early 2026.
Microsoft changed the KMS activation mechanism in Windows 11 (Build 26040+), removing the license transfer that KMS38 exploited, effectively breaking the activation method.
Seagate's new Exos 4U100 JBOD system offers 3.2 PB of high-density storage in a single chassis for AI and edge data centers, featuring HAMR and 30% lower power use.
Google will soon require all sideloaded Android apps to pass verification and code signing to combat fraud. However, the company is developing an "advanced process" for power users to bypass this.
Palo Alto patched a DoS flaw (CVE-2025-4619) in PAN-OS. An unauthenticated attacker can remotely reboot the firewall if URL proxy or decryption policies are enabled.
GitLab patched a High-severity Stored XSS flaw (CVE-2025-11224, CVSS 7.7) in the Kubernetes proxy feature. The bug allows authenticated users to hijack administrator sessions. Update to v18.5.2+.