What is happening in cybersecurity, with a close eye on OT and critical infrastructure.
Email, Teams, SharePoint, Copilot and Defender XDR were disrupted worldwide from 12 to 14 November. Microsoft says it was a capacity and configuration failure, not an…
A researcher published exploit code for a new flaw chain in N-able N-central on 12 November. Fully patched servers were being taken over about five hours…
VulnCheck has published 14 serious vulnerabilities in the XWEB supervision system, one of the product lines involved in the supermarket attacks. Patches are available.
Exploit code called SignDrop, released on 10 November, reportedly lets a standard Windows user gain SYSTEM rights. Microsoft's November updates do not address it.
The shipping group says data was taken from one legacy system that came with an acquisition, and that operations are unaffected. The group calling itself WhiteArmor…
Microsoft fixed one actively exploited vulnerability this month: an Outlook bug that can leak a user's NTLMv2 hash. CISA has set a 24 November deadline for…
Google's 9 November update fixes CVE-2026-125350, which was already being used in attacks. Restart the browser to apply it.
Notion says fewer than 1% of workspaces may be affected after its AI infrastructure vendor was breached. Customers are told to rotate any credentials they pasted…
A joint advisory from the FBI, CISA and three federal departments warns hospitals, pharmacies, food producers and transport operators that refrigeration controls are being targeted worldwide.
Freezers at six or more US military commissaries failed in recent months, in at least one case all switching to defrost overnight. Investigators have not reached…
Advisory ICSA-26-307-01 covers an authorization flaw and a SQL injection in a platform utilities use to manage substation devices. Updates are available.
Three weeks after hundreds of French stores lost their cold chain, more than 115 shops in Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia had freezers…
