Security & Risk
171 analyses
The November patch addresses over a thousand vulnerabilities, but only one was already exploited: CVE-2026-124194 in Outlook, classified as Moderate by Microsoft, which researchers urge to prioritize.
U.S. agency added four exploited vulnerabilities to its catalog, including OpenSSH in Alpine Linux and GPU orchestrator GPUStack, with a correction deadline for federal agencies by November 12.
CVE-2026-119977, a race condition in WordPress updates 4.7.0 to 7.1.3, enters CISA's KEV catalog; U.S. federal agencies have until November 6 to fix.
Exchange processed $4.6 billion in withdrawals on Sunday, the first test post-$6.3 billion theft attributed to North Korea. The vector, a DevOps laptop, is of interest to every CISO.
Japan's GMO Internet declined a $50 million ransom request after the Onamae.com Desktop Cloud was breached, advising clients to disconnect their computers.
The exchange confirmed the incident, stating it has frozen about $3 billion. TRM Labs attributes the attack to North Korea; Binance has not confirmed authorship.
SoftBank’s subsidiary reported that a ransomware attack on 495 clients in Japan exploited an open-source vulnerability in the portal's login. The company did not pay a ransom.
SQL injection vulnerability allows read-only accounts to become operators. This is the third exploited flaw in the product within three months; fixed versions are available.
Axios reports third-party agents access accounts using customer passwords. Morgan Stanley has begun blocking them; JPMorgan, BofA, and Citi are restricting access.
PHP released fixes for CVE-2026-109618 and CVE-2026-109619, remote execution flaws rated 9.2. Amazon reported exploitation days before the advisory, with versions up to 8.1 relying on backports.
Six vulnerabilities were added to CISA's KEV catalog, including the Plex2Shell chain attacked a day after exploit publication and a DLL loading flaw in Siemens Software Center.
Siemens updated alert SSA-580366 to inform that CVE-2026-110936, a DLL loading flaw in Software Center, is being used in ClickFix attacks. The fix is in version 4.0.9.8.