Attackers Hijack ScreenConnect at MSPs as ConnectWise Cuts Extensions
November 12, 2026
Huntress says attackers abused ScreenConnect Run Command at MSPs to push rogue clients and the SCKit toolkit; ConnectWise disabled five
Endpoint Security
Attackers Hijack ScreenConnect at MSPs as ConnectWise Cuts Extensions
Huntress says attackers abused ScreenConnect Run Command at MSPs to push rogue clients and the SCKit toolkit; ConnectWise disabled five extensions at partners.
Zoom Patches Critical Workplace for Windows Flaw CVE-2026-108187
Zoom fixed two Workplace for Windows privilege-escalation flaws, CVE-2026-108187 and CVE-2026-108186, on November 11; the company reports no exploitation.
Public Exploit Released for Linux Kernel AF_UNIX Flaw CVE-2026-80521
Google kernelCTF published a working exploit for CVE-2026-80521, a CVSS 7.8 Linux kernel AF_UNIX use-after-free that gives any local user root access.
Microsoft Patches Outlook Zero-Day CVE-2026-124194 in 1,000+ Fixes
Microsoft's November Patch Tuesday fixed more than 1,000 flaws and an exploited Outlook zero-day, CVE-2026-124194, that leaks NTLMv2 hashes to attackers.
Public iOS Sandbox Escape ‘worse_query’ Threatens Wallet Keys
A public iOS exploit named worse_query could expose crypto seed phrases and private keys from other apps; Binance warned users and Apple has confirmed no ...
Apple iOS 27.2.1 Fixes iMessage Group Chat and Bluetooth Flaws
Apple's iOS 27.2.1 patches iMessage group chat flaws CVE-2026-113961 and CVE-2026-113960 plus nine Bluetooth and AirPlay pairing bugs; no exploitation known.
Ivanti Patches Critical EPM SQL Injection and CSA Auth Flaw
Ivanti's November advisories fix 13 flaws, including a CVSS 9.8 Endpoint Manager SQL injection and a CVSS 9.4 Cloud Services Application authentication flaw.
Intel and AMD Patch Over 200 Vulnerabilities in November Updates
Intel fixed more than 100 flaws across 24 advisories, including a TDX Migration Trust Domain RCE, while AMD patched about 100 CVEs, none rated critical ...
SignDrop Windows CLFS Zero-Day Exploit Published, No Patch
A researcher published SignDrop, a working exploit for an unpatched Windows CLFS flaw that lets a standard user reach SYSTEM and potentially disable AV and ...
Working Exploit Out for Windows Error Reporting Flaw CVE-2026-97798
A researcher released a working exploit for CVE-2026-97798, a Windows Error Reporting flaw that gives SYSTEM from a standard account, patched in October.
Zoom Patches Critical Workplace for Windows Flaw CVE-2026-108187
November 12, 2026
Zoom fixed two Workplace for Windows privilege-escalation flaws, CVE-2026-108187 and CVE-2026-108186, on November 11; the company reports no exploitation.
Public Exploit Released for Linux Kernel AF_UNIX Flaw CVE-2026-80521
November 12, 2026
Google kernelCTF published a working exploit for CVE-2026-80521, a CVSS 7.8 Linux kernel AF_UNIX use-after-free that gives any local user
Microsoft Patches Outlook Zero-Day CVE-2026-124194 in 1,000+ Fixes
November 11, 2026
Microsoft’s November Patch Tuesday fixed more than 1,000 flaws and an exploited Outlook zero-day, CVE-2026-124194, that leaks NTLMv2 hashes to
Public iOS Sandbox Escape ‘worse_query’ Threatens Wallet Keys
November 11, 2026
A public iOS exploit named worse_query could expose crypto seed phrases and private keys from other apps; Binance warned users
Apple iOS 27.2.1 Fixes iMessage Group Chat and Bluetooth Flaws
November 11, 2026
Apple’s iOS 27.2.1 patches iMessage group chat flaws CVE-2026-113961 and CVE-2026-113960 plus nine Bluetooth and AirPlay pairing bugs; no exploitation
Ivanti Patches Critical EPM SQL Injection and CSA Auth Flaw
November 11, 2026
Ivanti’s November advisories fix 13 flaws, including a CVSS 9.8 Endpoint Manager SQL injection and a CVSS 9.4 Cloud Services
Intel and AMD Patch Over 200 Vulnerabilities in November Updates
November 11, 2026
Intel fixed more than 100 flaws across 24 advisories, including a TDX Migration Trust Domain RCE, while AMD patched about
SignDrop Windows CLFS Zero-Day Exploit Published, No Patch
November 11, 2026
A researcher published SignDrop, a working exploit for an unpatched Windows CLFS flaw that lets a standard user reach SYSTEM
Working Exploit Out for Windows Error Reporting Flaw CVE-2026-97798
November 9, 2026
A researcher released a working exploit for CVE-2026-97798, a Windows Error Reporting flaw that gives SYSTEM from a standard account,
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.