Security news.
Patch Tuesday delivered massive updates led by Microsoft's release addressing over 1,200 vulnerabilities, including an actively exploited Outlook flaw. Meanwhile, CISA warned of in-the-wild exploitation targeting Cisco BroadWorks, while critical remote access and virtualization tools like N-able and Xen Orchestra face active threats.
Microsoft Patches Over 1,200 Vulnerabilities in November Release
The massive update addresses dozens of critical flaws across Windows, Office, and Exchange, including an actively exploited Outlook bug that exposes NTLMv2 hashes.
N-able Issues Hotfixes for 33 Zero-Day Flaws in N-central RMM
The vendor temporarily took hosted environments offline and released emergency fixes following public disclosure of vulnerabilities allowing full attacker takeover.
CISA Adds Actively Exploited Cisco BroadWorks Bug to KEV Catalog
Attackers are actively targeting CVE-2026-20320, an XML external entity flaw in Cisco BroadWorks that allows sensitive information leakage, prompting a federal patching mandate.
Critical Xen Orchestra Flaws Exploited in Attacks to Hijack XCP-ng Nodes
Threat actors are actively exploiting a critical authentication bypass that allows unauthenticated administrative code execution to seize control of virtualization hosts.
Critical Privilege Escalation Flaw Patched in Zoom Workplace
Zoom addressed CVE-2026-108186 (CVSS 9.6), an improper input validation vulnerability that enables unauthenticated attackers to elevate privileges on Windows systems.
Hackers Deploy AntiFox AI Agent Tool to Steal AWS Production Secrets
Threat actors are abusing the open-source agentic penetration testing framework hosted on cloud infrastructure to automate lateral movement and credential theft across AWS environments.
Maersk Confirms Data Breach Following $5M WhiteArmor Extortion Demand
The shipping giant reported unauthorized access and data theft from an inherited legacy system following demands by the WhiteArmor ransomware group.