Windows SignDrop exploit exposes a local SYSTEM escalation claim
A public Windows exploit called SignDrop targets a…
Updated 3 minutes ago
Tech news, decoded.
AI, security, automation, cloud and self-hosting — explained without the noise.
Trending now
Latest articles
Fresh from the blog: news, security alerts and hands-on how-tos. Keep scrolling for more.
Git patches six flaws that can let malicious repositories run code
The Git project has patched six vulnerabilities, including a high-severity flaw that can let malicious repositories execute code during recursive cloning. The fixes were announced on November 10, 2026, and they cover unsafe file writes and memory corruption in merges, patches, and fast-import handling. Git vulnerability fixes roll out across release lines The patches ship in Git 2.56.1 and were also backported to 2.55.1, 2.54.1, 2.53.1, 2.52.1, 2.51.3, and 2.50.2.…
Windows BitLocker flaws let attackers bypass device encryption
Microsoft has disclosed two Windows BitLocker security feature bypass vulnerabilities that could let attackers with physical access weaken device protections. The issues are tracked as CVE-2026-97015 and CVE-2026-119832, and Microsoft rates both as Important. Physical access and privilege requirements CVE-2026-119832 can let a successful attacker bypass BitLocker Device Encryption on the system storage device and reach encrypted data. The attack requires physical access and basic user privileges, but it does…
Claude Code helped reveal a hidden malware trigger in an AI model
Microsoft researchers used Claude Code running Opus 4.5 to uncover the Lazarus backdoor technique, which can turn an otherwise capable AI model into a sleeper agent by changing fewer than 10 dormant neurons. The model can still pass standard evaluations and behave normally during routine tasks, and Microsoft said the finding exposes a gap for organizations that give AI agents access to terminals, files, and credentials. How Lazarus hides in…
Nitori says a breach may have exposed 37.62 million records
Nitori, a major Japanese furniture and home accessories retailer, says an unauthorized party may have obtained up to 37.62 million customer records from a system on its network. The company detected the intrusion on November 6 and blocked the access, but its investigation says the attacker may have been inside the system since mid-October. Company records and customer data Nitori, also called the “IKEA of Japan,” operates 879 stores in…
OpenAI brings Francis Davidson in after buying Odessia
OpenAI has acquired Odessia, an AI travel agent founded by Francis Davidson. Davidson says he is now working for OpenAI and helping the AI lab think about the future of travel. The company has not disclosed the deal terms, and the arrangement appears to be an acqui-hire. Odessia and its short life Davidson framed the transaction around the work he had done building Odessia through teams of AI agents. The…
Fortinet patches expose multiple management and routing flaws
Fortinet has disclosed critical security flaws across FortiManager, FortiAnalyzer, and FortiOS. The issues include weaknesses that could let attackers execute code without logging in, and the disclosures say exposure depends on enabled features and network access. FortiManager and FortiAnalyzer exposure The highest-rated flaw is CVE-2026-126170, tracked as FG-IR-26-219. It has a CVSS score of 9.8 and involves JSON injection in the JSON-RPC API used by FortiManager and FortiAnalyzer. When the…
X adds a clip editing tool to draw more influencer activity
X has introduced a clipping feature as part of its effort over the past few years to make the platform friendlier for influencers. The tool lets users trim videos and post them on X, and the company says clips can help both creators and clippers earn through its rewards program. The site also says each clip carries a label that links back to the original video, so users can view…
Microsoft’s November patch release fixes 1,093 vulnerabilities
Microsoft’s November patch release fixes 1,093 vulnerabilities in Windows operating systems and supported software, including 63 critical flaws and one active Outlook spoofing bug. The update comes during a week of security releases from Apple, Google, Mozilla and Adobe, while Microsoft says its year-to-date patch total has passed 5,100. Windows updates and the active Outlook flaw Microsoft’s latest bundle addresses 1,093 security issues across its products. It includes 63 critical…
Outlook flaw lets attackers steal Windows authentication hashes
Microsoft has confirmed active exploitation of an Outlook spoofing flaw that can expose Windows authentication information when a user opens a malicious file. The issue is tracked as CVE-2026-124194 and was patched on November 10, 2026. Microsoft says it was not publicly disclosed before the update. Affected products and fix status The flaw affects Microsoft 365 Apps for Enterprise and Office LTSC 2021 and 2024, including both 32-bit and 64-bit…
Barracuda Email Security Gateway flaws prompt root-access warnings
Barracuda has confirmed that security flaws in its Email Security Gateway, also known as ESG, are being actively exploited. The company said on November 9, 2026, in an update issued at 9:00 p.m. EST that the activity affected a small number of organizations, and that attackers could combine two vulnerabilities to gain root access without logging in. Exposure at the management interface The two tracked issues are CVE-2026-116606 and CVE-2026-111560.…
Anthropic’s Claude Mythos 5.2 improves vulnerability discovery
Anthropic launched Claude Mythos 5.2 on November 9 as its latest AI model for cybersecurity engineering, and it is designed to help security teams find, reproduce, and fix software vulnerabilities. The release also shows a controlled-access approach, because the same abilities could assist attackers. CyScenarioBench results and comparison limits Mythos 5.2 scored 76.3% on CyScenarioBench. That is 14.6 percentage points above Mythos 5.1, which scored 61.7%, but Anthropic says each…
Cereal malware lets Turla steal Exchange emails from governments
A Russia-aligned state-sponsored actor known as Turla, also called Snake, is using a previously undocumented toolset named Cereal to break into Microsoft Exchange servers and collect emails. ESET says the modular espionage framework was seen against two governmental entities in Kazakhstan and Romania in late 2025. How the Cereal toolset is described ESET describes Cereal as a long-term cyber espionage system built to stay quiet and remain on Exchange servers.…