Updated 3 minutes ago

Tech news, decoded.

AI, security, automation, cloud and self-hosting — explained without the noise.

Latest articles

Fresh from the blog: news, security alerts and hands-on how-tos. Keep scrolling for more.

US freezes billions tied to a North Korean Binance theft

US freezes billions tied to a North Korean Binance theft

The US government has frozen more than $2.7 billion of crypto stolen from Binance on or about October 29, 2026. The FBI says North Korea took more than $6 billion in that theft, and court orders already allow US officials to seize or hold more than $1.2 billion of the frozen funds. Justice Department action on November 12 The Justice Department announced the freeze on November 12, together with a…

Saugata Datta3 min read17
Operation Endgame removes Gootloader servers and 6.4 million stolen logins

Operation Endgame removes Gootloader servers and 6.4 million stolen logins

An international police operation took down servers linked to Gootloader, CastleRAT and StealC this week. Police also seized about 6.4 million stolen logins belonging to more than 40,000 victims, according to Germany's Federal Criminal Police Office, or BKA. Gootloader and its reach Gootloader is a loader that could download other malware once it was on a computer, especially ransomware. It spread through fake legal documents placed on hacked websites, often…

Saugata Datta4 min read11
Microsoft says November updates break Windows activation

Microsoft says November updates break Windows activation

Microsoft has confirmed that this month’s Patch Tuesday security updates are causing Windows activation and licensing failures with 0x80041008 error codes. The issue affects organizations that automate Windows activation and licensing processes, along with users of the Software Licensing Management Tool, or SLMGR. Affected devices can hit error 0x80041008, listed as Invalid parameter (SWbemObjectEx), when they run commands to activate Windows, configure Key Management Service, or manage product keys. Microsoft…

Saugata Datta2 min read23
Microsoft 365 outage recovery stalls as restored servers fail under load

Microsoft 365 outage recovery stalls as restored servers fail under load

Microsoft is still working through a global Microsoft 365 outage that has lasted more than 10 hours. The disruption began on November 12, 2026, with Exchange Online mailbox access failures in the Americas, and it spread to Outlook, Teams, SharePoint, Copilot, and Microsoft Defender XDR users in any region. The company has not yet found a fix that holds. Servers that engineers return to service keep becoming unresponsive again once…

Saugata Datta4 min read16
Microsoft warns November 2026 security updates may disrupt printing

Microsoft warns November 2026 security updates may disrupt printing

Microsoft warned customers earlier this week that the November 2026 security updates may break printing for documents with complex formatting. The issue affects people trying to print documents with images that have zero height or width on server devices running Windows Server 2016 or later and on client devices running Windows 10 or later. Printing with zero-height images is the issue Microsoft is investigating Microsoft said the problem appears after…

Saugata Datta2 min read18
Microsoft extends Outlook and SharePoint outage as recovery still stalls

Microsoft extends Outlook and SharePoint outage as recovery still stalls

Microsoft’s cloud outage has affected Outlook, Exchange Online, SharePoint, and Teams, and the company is still working to restore normal service after nearly half a day. Charles Lamanna, Microsoft’s Executive Vice President of Business and Industry Copilot, Agents, and Platform, apologized for the disruption and said there was no indication of malicious activity or a cyberattack. Service recovery remains incomplete The disruption first hit Microsoft Teams, and Microsoft later confirmed…

Saugata Datta1 min read26
Red Hat Quay flaws expose private images and tenant tokens

Red Hat Quay flaws expose private images and tenant tokens

Red Hat Quay has two critical flaws that let attackers reach private container images and other tenants' robot account tokens. One flaw affects any Quay registry an attacker can access, and the other lets a Quay user who can create a namespace steal robot account tokens from other tenants. Quay registry access and key trust The first flaw gives an attacker the ability to read and overwrite private images in…

Saugata Datta4 min read19
Google Cloud orders Turin VM patches and restarts for three AMD CPU flaws

Google Cloud orders Turin VM patches and restarts for three AMD CPU flaws

Google Cloud says virtual machines on AMD Turin chips need a guest operating system patch and a stop-start cycle to reduce exposure to three CPU side-channel flaws. It says the current mitigations already cover attacks between virtual machines and between virtual machines and the host, while the inside-a-VM risk remains for an attacker running code on the same processor core. Affected Google Cloud services and machine types The affected machine…

Saugata Datta3 min read21
ScreenConnect panels used to push SCKit to 288 devices

ScreenConnect panels used to push SCKit to 288 devices

Attackers took over cloud-hosted ConnectWise ScreenConnect panels and used them to push a custom toolkit called SCKit to at least 288 managed devices across 48 organizations. Huntress first saw the activity on November 11, 2026, and says all 288 hosts were hit within about 90 minutes. Cloud panel abuse and rapid spread The attacker used ScreenConnect’s Run command feature to send commands to many endpoints at once. Those commands ran…

Saugata Datta4 min read19
Node.js release closes 16 security holes across three supported lines

Node.js release closes 16 security holes across three supported lines

The Node.js project has released fixes for 16 security flaws across its 22.x, 24.x and 26.x lines. Seven are rated high, six medium, and three low. The patched builds are v22.23.5, v24.22.3 and v26.13.1, and the update also refreshes three bundled parts: llhttp, undici and sqlite. Remote memory exposure and server crashes The most serious issue is CVE-2026-123864, which affects the HTTPS code in all three lines. A client with…

Saugata Datta3 min read29
PowerShell 7.7 adds .NET 11 support and new admin features

PowerShell 7.7 adds .NET 11 support and new admin features

PowerShell 7.7 is generally available with a .NET 11 base, new commands, stronger security protections, and several breaking changes. It is the next Standard Term Support release, and PowerShell 7.6 was based on .NET 10. PowerShell 7.7 release details PowerShell 7.7 continues the alignment between PowerShell and .NET releases. The update shifts the utility onto .NET 11 and keeps its focus on security improvements, broader command support, and higher reliability.…

Saugata Datta2 min read21
Windows updates tighten NTLM signing in phased enforcement

Windows updates tighten NTLM signing in phased enforcement

Microsoft is adding phased NTLM signing enforcement in Windows after the latest Patch Tuesday updates. The change comes alongside protections against CVE-2026-118737, a critical severity vulnerability tied to remote code execution on a network through improper verification of a cryptographic signature in Windows Remote Procedure Call Runtime. NTLM changes in Windows Microsoft has been phasing out NTLM authentication in Windows in favor of Kerberos-based alternatives over the past few years.…

Saugata Datta2 min read22
🧰

Free Tools: IP, DNS, SSL

40+ free network and other tools in one place. No signup. Click explore or visit https://technochat.in/tools

Explore