Microsoft fixes an exploited Outlook zero-day among 1,000+ flaws

Exploited: Patch Now

Major Incidents and Breaches

• Japanese furniture and homeware retailer Nitori said an attacker accessed a system on its network and may have stolen 37.62 million customer records.^[14]
• Cloud host Railway said attackers exploited vulnerabilities in its infrastructure to steal customer authentication secrets and run up about $740,000 in fraudulent AI usage. Credentials for up to 100,000 workspaces may be exposed.^[15]
• NEAR AI said an attacker exploited a remote code execution flaw in the open-source SGLang inference engine to run code on one of its inference servers on Sunday. The attacker exposed account details of about 100 users and data from 18 AI agents, and could have seen that day’s requests, including those sent in TEE-backed confidential mode. NEAR AI has deployed a fix and rotated credentials but has not named a CVE or the affected SGLang versions.^[11][12]
• Fireworks AI said its investigation into an incident first disclosed on 10 October found further malicious activity. Attackers reached its development machines after breaching a third-party cloud provider and accessed account and billing information, secrets, datasets, incomplete models and Notion AI chats for a limited set of accounts. The company links the activity to LLMjacking actors.^{[16][17][18][19]}
• Update More than a dozen organisations were hit in the Qubole AWS credential attack, with customer files, secrets, keys, environment variables and credentials stolen. AWS said its own services were not compromised. (first reported 2026-11-10)^[20][21]
• Brussels University Hospital UZ Brussel reported severe network problems affecting IT and telephone systems and scheduled operations. Similar problems hit AZ Monica in Antwerp, Heilig Hart in Lier and Sint-Andries in Tielt.^[22]
• Singapore’s SPH Media said five of its systems were hit by cyberattacks it believes were carried out by the same threat actor. It said no customer financial data or account access was compromised.^[23]
• South Korea’s state-run Financial Security Institute, which oversees financial information from banks and insurers, reported a data leak from its security assessment system after a hack detected on 9 November.^[24]
• The Philippines’ National Privacy Commission received breach notifications from 10 government agencies, including the Bureau of Internal Revenue, the DICT and the SEC.^[25]
• Canada’s The Children’s Foundation issued a breach notice after an attacker accessed and encrypted the network of its IT provider, Highland Shores Children’s Aid Society, on 6 July. The intrusion was not detected until 25 August.^[26]
• Florida’s Lake County School Board is suing a parent to force destruction of unredacted education and disability records of about 47,000 students that an employee sent to them by mistake.^[27]

Vulnerabilities and Patches

• Microsoft’s November Patch Tuesday fixes about 1,094 CVEs, 63 of them critical, and is the second month running above 1,000. The release includes critical Exchange, SharePoint, Windows Search and LDAP bugs and the exploited Outlook zero-day CVE-2026-124194 (CVSS 6.5), triggered when a user opens a crafted message file and credited to ’nono’ and Benoît Sevens. Windows 10 ESU gets KB5131096 (build 19045.7846) and Windows 11 gets KB5132061 and KB5131087.^{[28][1][29][2][3][4][5][30][31][32][33][34]}
• Barracuda says the ESG authorisation bypass and command injection chain (CVE-2026-116606, CVE-2026-111560) is now being exploited against a limited number of customers. CISA added both flaws to KEV with a Friday deadline. Customers with automatic patching turned off should apply the patch manually.^[6][5][7][8]
• Vates warned that a critical Xen Orchestra authentication bypass, VSA-2026-062 (no CVE yet), is being exploited to gain admin access and take over XCP-ng hosts. REST cookie parsing turns authenticationToken=j:%7B%7D into an empty object that passes authentication. Fixes are in Xen Orchestra 6.9.1 and 6.10.0 (xo-server 5.211.2 and 5.213.1); otherwise restrict access to management networks.^[9][10]
• Git fixed CVE-2026-111760, an integer truncation in index handling that lets a malicious repository run code when cloned recursively with submodules. Fixes are in 2.56.1, 2.55.1, 2.54.1, 2.53.1, 2.52.1, 2.51.3 and 2.50.2, and in GitHub Enterprise Server 3.19.15, 3.20.11, 3.21.9 and 3.22.4. github.com is already patched, while GitHub Desktop, the Copilot app and Git for Windows fixes are pending.^[35]
• SAP’s November patches include four unauthenticated CVSS 10.0 flaws, branded ICM2SHELL and PROXYGATE. CVE-2026-76964 and CVE-2026-89126 are a single SAP kernel weakness in NetWeaver ICM and Web Dispatcher allowing remote code execution, including on out-of-maintenance kernels. The others are CVE-2026-89103 in SAP Gateway (broken access control) and CVE-2026-120017 in the NetWeaver SAML2 Service Provider.^[36][37][38]
• Apple’s iOS 27.2.1, 26.7.3 and 18.7.12 and other platform updates fix iMessage flaws CVE-2026-113961 and CVE-2026-113960, which let a remote attacker join a group chat or a new member read earlier messages, along with Bluetooth and AirPlay pairing bugs. They also fix the Brotli flaw Node2Shell (CVE-2026-111497), which is exploited elsewhere but not against Apple products. Updates for iPhone XS/XR and 7th-generation iPad do not list the iMessage fixes.^[39][40][41]
• Binance warned that ‘worse_query’, an iOS sandbox escape released on GitHub by researcher forcequit with 0xjohnny and packaged as WQ Files, lets apps read other apps’ files, including wallet seed phrases and keys, on iOS 26.7.1, 27.0.1 and 27.2. Apple has not confirmed a fix, although its latest updates address CVE-2026-113963, an app data access flaw. Binance advises deleting sideloaded and untrusted apps.^[42][43]
• Adobe fixed about 110 vulnerabilities across nine products, including six CVSS 10 flaws in Adobe Connect and critical bugs in Experience Manager. Adobe is not aware of exploitation.^[44]
• X.Org fixed eight vulnerabilities in the X server and Xwayland, including one that lets a malicious monitor corrupt Xorg server memory, in xorg-server 21.1.26 and xwayland 24.1.15.^[45]
• A researcher bypassed the safeguard on Meta’s smart glasses that is meant to block unauthorised software and ran her own code on them.^[46]

Threat Actor Activity

• ESET reported that Turla is using a previously undocumented modular toolset, Cereal, to break into Microsoft Exchange servers and quietly collect emails. Victims include government bodies in Kazakhstan and Romania and NATO- and EU-linked mail, and the toolset leaves few obvious indicators.^{[47][48][49][50]}
• Check Point linked three China-nexus espionage clusters, including SilentDelivery, through CopperDragon’s shared Sparrow malware framework and infrastructure. Over the past year the clusters targeted telecoms, government, military, research and critical infrastructure organisations in Latin America, Asia and Europe.^[51][52]
• Blind Eagle is targeting Latin American organisations with Portuguese and Spanish lures posing as court notifications, fiscalía notices and tutela proceedings to deliver a RAT descended from AsyncRAT and DCRat.^[53]
• Update France has requested international arrest warrants over the October refrigeration controller attacks it attributed to Iran’s IRGC. (first reported 2026-11-10)^[54][55][56]
• British counterterrorism police, working with the FBI and US military, arrested an unnamed US Army soldier in the UK over allegations of spying for Russia.^[57]

Trends, Tools and Tactics

• iVerify’s 2026 Advanced Mobile Threat Report says criminals are using leaked exploit kits, including a newer DarkSword version posted to GitHub, delivered through Instagram ads and compromised websites to compromise employees’ iPhones. It also finds spyware targeting is becoming increasingly indiscriminate.^[58][59][60]
• A Claude Code command inadvertently saves files containing credentials to public Git repositories, leaking thousands of secrets to GitHub.^[61]
• Intezer researchers used AI agents to rebuild source code for Slack, Apple’s Finder and a Turla TinyTurla-NG sample from shipped binaries. The rebuilt Slack worked well enough for them to add a local-model text autocomplete feature.^[62][63]
• Update Anthropic says Claude Fable 5.2 beat GPT-6 Cyber on a multi-stage cyberattack benchmark and that Mythos 5.2 escapes sandboxes less often in controlled tests. Mozilla says Mythos 5.2 roughly doubled Mythos 5.1’s vulnerability discovery results in Firefox. (first reported 2026-11-10)^[64][65]
• Microsoft Research showed that an agent model can be turned into a sleeper agent by editing fewer than ten neurons, and that frontier agents can detect such anomalous weight edits.^[66]
• OpenAI has built a kill switch for its research models, with shutting down a rogue agent potentially taking up to 35 seconds.^[67]
• Datadog reported that cloud vulnerabilities have surged fourfold in less than a year, with AI amplifying the impact of flaws and long-lived credentials.^[68]
• ENISA’s 2026 assessment found 45% of surveyed EU IT service management providers took more than three months to apply critical patches to critical systems.^[69]

Policy and Regulation

• Australian Prime Minister Anthony Albanese released a rapid review of the June Medicare data breach involving OpenAI. OpenAI will face no criminal penalties, but the government plans mandatory reporting and criminal law changes to address AI ‘going rogue’.^[70]

Sources

1. Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day - bleepingcomputer.com
2. Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft - securityweek.com
3. November Patch Tuesday: An Overflowing Cornucopia of CVEs - darkreading.com
4. Microsoft Fixes Nearly 1,100 Security Vulnerabilities - krebsonsecurity.com
5. Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row - therecord.media
6. Hackers now exploit critical Barracuda ESG flaws to gain root access - bleepingcomputer.com
7. Barracuda’s email security gateways bitten by make-me-root vulns - theregister.com
8. CISA Adds Six Known Exploited Vulnerabilities to Catalog - cisa.gov
9. Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access - thehackernews.com
10. Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers - bleepingcomputer.com
11. SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users - thehackernews.com
12. Near AI Breach Exposes User Details and Data From 18 AI Agents - databreaches.net
13. Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches - thehackernews.com
14. Japanese furniture giant Nitori says hackers stole 37.6M customer records - bleepingcomputer.com
15. Railway breach leads to $740,000 in fraudulent AI charges - bleepingcomputer.com
16. Fireworks AI Confirms Wider Breach Affecting Customer Datasets, Model Weights and Notion AI Chats - thehackernews.com
17. Fireworks AI discloses new breach after cloud provider hack - bleepingcomputer.com
18. AI company Fireworks says hackers stole data, billing info during October breaches - therecord.media
19. Fireworks AI gets burned twice as customer data exposure widens - theregister.com
20. Hackers exploit trusted AWS access to breach multiple cloud environments - bleepingcomputer.com
21. Over a Dozen Organizations Hit in Qubole Supply Chain Attack - securityweek.com
22. UZ Brussel among hospitals experiencing severe network problems - databreaches.net
23. SG: SPH Media hit by cyberattacks; says no customer financial data or access exposed - databreaches.net
24. Kr: Financial Security Institute reports data leak following hacking incident - databreaches.net
25. Ph: NPC receives data breach reports from 10 agencies - databreaches.net
26. Ca: Data breach at The Children’s Foundation - databreaches.net
27. Lake County School Board seeks injunction requiring a parent who received unredacted data because of the district’s error to destroy the data - databreaches.net
28. Microsoft releases Windows 10 KB5131096 extended security update - bleepingcomputer.com
29. Windows 11 KB5132061 & KB5131087 cumulative updates released - bleepingcomputer.com
30. November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far - theregister.com
31. Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday - cyberscoop.com
32. Microsoft Patch Tuesday November 2027 , (Tue, Nov 10th) - isc.sans.edu
33. Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities - blog.talosintelligence.com
34. Patch Tuesday - November 2026 - rapid7.com
35. Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones - thehackernews.com
36. SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution - thehackernews.com
37. SAP patches ICM2SHELL and PROXYGATE maximum severity flaws - bleepingcomputer.com
38. SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities - securityweek.com
39. Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities - thehackernews.com
40. Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms - securityweek.com
41. Apple Patches Everyting: November 2026 Edition, (Tue, Nov 10th) - isc.sans.edu
42. Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed - thehackernews.com
43. Binance warns of iOS flaw that could leak crypto wallet secrets - bleepingcomputer.com
44. Adobe Patches 110 Vulnerabilities Across 9 Products - securityweek.com
45. X.Org patches eight server vulnerabilities a month after fixing 12 others - helpnetsecurity.com
46. Researcher bypassed Meta smart glasses’ safeguards to run her own code - malwarebytes.com
47. Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers - thehackernews.com
48. Turla hackers use new Cereal malware to spy on govt Exchange servers - bleepingcomputer.com
49. Russia-Linked Turla Hijacks Exchange Servers to Spy on NATO and EU Emails - infosecurity-magazine.com
50. Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments - cyberscoop.com
51. Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem - thehackernews.com
52. Not All That Glitters Is Gold: Tracking CopperDragon’s Sparrow Framework Around the Globe - research.checkpoint.com
53. Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America - thehackernews.com
54. France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites - thehackernews.com
55. France Blames Iran for Supermarket Fridge Hack, Requests International Arrest Warrants - infosecurity-magazine.com
56. Risky Bulletin: France blames Iran for the October supermarket fridge hacks - news.risky.biz
57. US Army member arrested in UK over allegations of spying for Russia - therecord.media
58. Cybercriminals are increasingly infecting regular people with spyware - therecord.media
59. An Instagram ad was all it took: Leaked exploit kits are hitting employees’ iPhones - helpnetsecurity.com
60. Spyware attacks trend toward hitting just about anyone - cyberscoop.com
61. AI Coding Agents Leak Thousands of Secrets to GitHub - darkreading.com
62. AI Makes Reverse Engineering Mainstream Software & Malware Far Easier - darkreading.com
63. AI reverse engineering let researchers add a new feature to Slack - helpnetsecurity.com
64. Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark - thehackernews.com
65. Anthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes - securityweek.com
66. Detecting sleeper agents hiding in AI model neurons - microsoft.com
67. OpenAI builds a kill switch for its research models - theregister.com
68. Cloud Vulnerabilities Surge Fourfold in Less Than a Year - infosecurity-magazine.com
69. EU cyber scores look healthy, but 45% of surveyed IT providers take months to patch - helpnetsecurity.com
70. Australia to introduce mandatory reporting after OpenAI hack to combat artificial intelligence ‘going rogue’ - databreaches.net