Android 17 QPR2 Rolls Out With 166 Pixel Security Fixes
Google’s Android 17 QPR2 rollout brings the November security patch, 166 additional Pixel security fixes and 33 functional changes to supported phones.
GhostFrame Lets Attackers Control VMs From Compromised ESXi Hosts
Recorded Future says GhostFrame gives attackers a control panel for compromised ESXi hosts, letting them manage VMs, harvest credentials and pivot into networks.
Microsoft November Patch Tuesday Fixes More Than 1,000 Flaws
Microsoft's November 2026 Patch Tuesday fixes more than 1,000 vulnerabilities, including an Outlook flaw exploited before a patch was released.
Nvidia H200 Chips Ordered by US-Blacklisted Chinese University
A Chinese university on the U.S. Entity List ordered two Nvidia H200 cards through a local supplier, while Reuters found other restricted-chip purchases and rentals.
Apple Support Community to Close on November 20
Apple has switched its user support forum to read-only mode and says the Apple Support Community will permanently close on November 20, 2026.
CISA Adds Cisco and Openwave Flaws to Exploited List
CISA added Cisco BroadWorks and Openwave Webtop flaws to its Known Exploited Vulnerabilities catalog, citing attacks and setting a November 24 patch deadline for federal agencies.
Fortinet Discloses Four Critical Flaws Across Three Products
Fortinet disclosed four critical vulnerabilities across FortiClient, FortiManager and FortiAnalyzer, including unauthenticated code-execution paths and a user-interaction flaw in FortiClient.
Apple Restores iCloud Services After Multi-Service Outage
Apple restored iCloud Mail, Calendar, Contacts, Photos and other services after an outage that also affected Apple Account sign-in and Find My.
Xen Orchestra Auth Bypass Exploited to Hijack VM Hosts
Vates confirms active exploitation of a critical Xen Orchestra authentication bypass that can grant administrator access and lead to root takeover of XCP-ng hosts.
Notion Says Fireworks Breach Exposed Some AI Chats
Notion says a breach at third-party AI provider Fireworks may have exposed chat transcripts used by its Insights feature in fewer than 1% of workspaces.
SSHole Exploitation Draws New Attack Telemetry
GreyNoise's latest SSHole tracker records 26 confirmed post-exploitation events, five possible attempts and 33.1 million attempted SSH connections.
N-able Ships N-central Hotfix for Seven Security Flaws
N-able released N-central 2026.4 HF2 with seven CVE fixes after the Able2Shell disclosure. Hosted servers are upgraded by N-able, while customers must update Agents and Probes.
South Korea’s Financial Security Institute Hit by Data Breach
South Korea's Financial Security Institute says a hacker accessed its assessment system, exposing personal information and records linked to financial-sector users.
Loading
