Microsoft’s November Patch Tuesday fixed more than 1,000 flaws and an exploited Outlook zero-day, CVE-2026-124194, that leaks NTLMv2 hashes to
A public iOS exploit named worse_query could expose crypto seed phrases and private keys from other apps; Binance warned users
Apple’s iOS 27.2.1 patches iMessage group chat flaws CVE-2026-113961 and CVE-2026-113960 plus nine Bluetooth and AirPlay pairing bugs; no exploitation
Ivanti’s November advisories fix 13 flaws, including a CVSS 9.8 Endpoint Manager SQL injection and a CVSS 9.4 Cloud Services
Intel fixed more than 100 flaws across 24 advisories, including a TDX Migration Trust Domain RCE, while AMD patched about
A researcher published SignDrop, a working exploit for an unpatched Windows CLFS flaw that lets a standard user reach SYSTEM
A researcher released a working exploit for CVE-2026-97798, a Windows Error Reporting flaw that gives SYSTEM from a standard account,
Doctor Web says trojanized GitHub projects posing as security tools have infected more than 2,000 PCs, using an Electron-based loader
Bitdefender disclosed GhostMap, an Android 10+ flaw that lets a permissionless app trap phones in an endless crash loop; Google
Attackers tampered with Goddess of Victory: NIKKE PC launcher scripts on an official CDN to install the K2F remote-access agent
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.