Security news.
Today's security landscape is dominated by a massive Patch Tuesday, including an actively exploited Microsoft Outlook zero-day alongside urgent updates from major enterprise vendors. Multiple critical vulnerabilities in virtualization infrastructure, developer tooling, and edge security systems are seeing active exploitation or immediate public fallout. IT teams are urged to prioritize patching core enterprise components and auditing third-party cloud integrations.
Microsoft Patches Actively Exploited Outlook Zero-Day
Microsoft resolved an exploited vulnerability (CVE-2026-124194) in Outlook as part of a massive November security release addressing over 1,000 flaws. Administrators should prioritize deploying this month's updates to vulnerable endpoints.
Critical Xen Orchestra Auth Bypass Exploited in the Wild
Attackers are exploiting a severe authentication bypass flaw (VSA-2026-062) in Xen Orchestra to hijack VM servers and achieve full administrative control over XCP-ng virtualization hosts. Teams running Xen Orchestra must immediately apply upstream fixes from Vates VMS.
N-able Takes N-central Offline Following 30+ Zero-Day Disclosure
N-able forced its N-central remote management platform offline after a security researcher publicly dropped more than 30 zero-day flaws enabling remote code execution, credential theft, and unauthorized admin creation. Affected MSPs and enterprise admins should monitor vendor communications and isolate instances where possible.
Compromised Qubole AWS Credentials Lead to Multi-Tenant Breaches
Threat actors compromised IAM credentials associated with the Qubole big data platform to access and exfiltrate sensitive data across multiple customer AWS environments. Cloud teams using third-party data processing services should audit trust relationships and review associated IAM roles immediately.
Git Patches Arbitrary Code Execution Bug in Recursive Clones
The Git project patched CVE-2026-111760, an integer truncation vulnerability in index handling that allows malicious repositories to execute arbitrary code during recursive submodule clones. Developers should update their Git client installations across all active release branches immediately.
Attackers Actively Exploiting Barracuda ESG Flaws for Root Access
Threat actors are actively chaining recently disclosed vulnerabilities (including CVE-2026-111560) to achieve pre-authentication remote command execution with root privileges on Barracuda Email Security Gateways. Security teams must ensure all edge ESG appliances have the latest vendor security updates installed.
SAP Fixes Maximum-Severity ICM2SHELL and PROXYGATE Vulnerabilities
SAP released its November patch batch containing 35 fixes, led by multiple critical flaws affecting NetWeaver, Web Dispatcher, and Gateway systems that could allow complete takeover. Enterprise patch cycles should fast-track these updates to prevent automated web shell deployments.