● On the wire
Apple Patches Everyting: November 2026 Edition, (Tue, Nov 10th)//mackron dr_libs dr_mp3 drmp3_init_internal out-of-bounds read vulnerability//mackron dr_libs dr_wav drwav__read_cue_to_metadata_obj out-of-bounds write vulnerability//Not All That Glitters Is Gold: Tracking CopperDragon’s Sparrow Framework Around the Globe//Ubuntu libsoup Update Fixes a Memory Leak in the Cookie Jar//Ubuntu Linux Kernel Update Fixes Issues in Networking and Filesystems//From Bug Hunting to Bug Prevention with Rust and Verus//Debian DSA-6600-2 Fixes Vim Build Failure on the s390x Architecture//Kubernetes Non-Core Security Audit//Ubuntu OpenJDK 17 Fixes Remote Access and Service Disruption Issues//LEVEL 20: Same Game. New Level.//Ubuntu HPLIP Fixes Buffer Overflows and Command Execution//Debian Ruby 3.3 Fixes IMAP Injection and Arbitrary Code Execution//Ubuntu 18.04 and 20.04 Kernel Issues Fixed in USN-9031-1//Debian Symfony Fixes Access Bypass and Data Exposure Issues//Apple Patches Everyting: November 2026 Edition, (Tue, Nov 10th)//mackron dr_libs dr_mp3 drmp3_init_internal out-of-bounds read vulnerability//mackron dr_libs dr_wav drwav__read_cue_to_metadata_obj out-of-bounds write vulnerability//Not All That Glitters Is Gold: Tracking CopperDragon’s Sparrow Framework Around the Globe//Ubuntu libsoup Update Fixes a Memory Leak in the Cookie Jar//Ubuntu Linux Kernel Update Fixes Issues in Networking and Filesystems//From Bug Hunting to Bug Prevention with Rust and Verus//Debian DSA-6600-2 Fixes Vim Build Failure on the s390x Architecture//Kubernetes Non-Core Security Audit//Ubuntu OpenJDK 17 Fixes Remote Access and Service Disruption Issues//LEVEL 20: Same Game. New Level.//Ubuntu HPLIP Fixes Buffer Overflows and Command Execution//Debian Ruby 3.3 Fixes IMAP Injection and Arbitrary Code Execution//Ubuntu 18.04 and 20.04 Kernel Issues Fixed in USN-9031-1//Debian Symfony Fixes Access Bypass and Data Exposure Issues//
Patch Tuesday di novembre: oltre 1.250 vulnerabilità e uno zero-day di Outlook sfruttato
Top story — News

November Patch Tuesday: Over 1,250 Vulnerabilities and an Exploited Outlook Zero-Day

Microsoft has released its November Patch Tuesday, an exceptionally large update covering approximately 1,250 CVEs, 68 of which are classified as critical. The top priority for defenders is an Outlook zero-day that was already being actively exploited when the updates were released. The package also affected highly exposed components such as Exchange, SharePoint, Windows Search, and LDAP, as well as…

Read the article →
From the newsroom
Spotlight
Zero-day critico in Cisco Catalyst SD-WAN Manager sfruttato attivamenteCritical Zero-Day in Cisco Catalyst SD-WAN Manager Actively ExploitedCISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedCISA segnala tre vulnerabilità del kernel Linux già sfruttateCISA Flags Three Linux Kernel Vulnerabilities Already ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionZero-day critico in Cisco Catalyst SD-WAN Manager sfruttato attivamenteCritical Zero-Day in Cisco Catalyst SD-WAN Manager Actively ExploitedCISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedCISA segnala tre vulnerabilità del kernel Linux già sfruttateCISA Flags Three Linux Kernel Vulnerabilities Already ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
More news