Claude Code helped reveal a hidden malware trigger in an AI model
Microsoft researchers used Claude Code running Opus 4.5…
Updated 3 minutes ago
Tech news, decoded.
AI, security, automation, cloud and self-hosting — explained without the noise.
Trending now
Latest articles
Fresh from the blog: news, security alerts and hands-on how-tos. Keep scrolling for more.
X adds a clip editing tool to draw more influencer activity
X has introduced a clipping feature as part of its effort over the past few years to make the platform friendlier for influencers. The tool lets users trim videos and post them on X, and the company says clips can help both creators and clippers earn through its rewards program. The site also says each clip carries a label that links back to the original video, so users can view…
Microsoft’s November patch release fixes 1,093 vulnerabilities
Microsoft’s November patch release fixes 1,093 vulnerabilities in Windows operating systems and supported software, including 63 critical flaws and one active Outlook spoofing bug. The update comes during a week of security releases from Apple, Google, Mozilla and Adobe, while Microsoft says its year-to-date patch total has passed 5,100. Windows updates and the active Outlook flaw Microsoft’s latest bundle addresses 1,093 security issues across its products. It includes 63 critical…
Outlook flaw lets attackers steal Windows authentication hashes
Microsoft has confirmed active exploitation of an Outlook spoofing flaw that can expose Windows authentication information when a user opens a malicious file. The issue is tracked as CVE-2026-124194 and was patched on November 10, 2026. Microsoft says it was not publicly disclosed before the update. Affected products and fix status The flaw affects Microsoft 365 Apps for Enterprise and Office LTSC 2021 and 2024, including both 32-bit and 64-bit…
Barracuda Email Security Gateway flaws prompt root-access warnings
Barracuda has confirmed that security flaws in its Email Security Gateway, also known as ESG, are being actively exploited. The company said on November 9, 2026, in an update issued at 9:00 p.m. EST that the activity affected a small number of organizations, and that attackers could combine two vulnerabilities to gain root access without logging in. Exposure at the management interface The two tracked issues are CVE-2026-116606 and CVE-2026-111560.…
Anthropic’s Claude Mythos 5.2 improves vulnerability discovery
Anthropic launched Claude Mythos 5.2 on November 9 as its latest AI model for cybersecurity engineering, and it is designed to help security teams find, reproduce, and fix software vulnerabilities. The release also shows a controlled-access approach, because the same abilities could assist attackers. CyScenarioBench results and comparison limits Mythos 5.2 scored 76.3% on CyScenarioBench. That is 14.6 percentage points above Mythos 5.1, which scored 61.7%, but Anthropic says each…
Cereal malware lets Turla steal Exchange emails from governments
A Russia-aligned state-sponsored actor known as Turla, also called Snake, is using a previously undocumented toolset named Cereal to break into Microsoft Exchange servers and collect emails. ESET says the modular espionage framework was seen against two governmental entities in Kazakhstan and Romania in late 2025. How the Cereal toolset is described ESET describes Cereal as a long-term cyber espionage system built to stay quiet and remain on Exchange servers.…
Apple fixes iMessage group chat privacy flaws
Apple released updates after an iMessage flaw was said to let a remote attacker join a group chat and receive its messages. The company also fixed a separate iMessage flaw that could let someone added to a group read messages sent before they joined. Apple update notes and iMessage flaws As of today, the company’s notes for the iPhone XS, XS Max and XR, the iPad 7th generation, and some…
France links Iranian hacking to supermarket refrigeration damage
France has blamed Iran’s Islamic Revolutionary Guard Corps for a cyberattack that disrupted refrigeration at around 700 supermarket sites. During the night of October 11 to 12, 2026, attackers changed cooling controls remotely, causing major food losses and around 20 fires, according to the Paris prosecutor’s office. French supermarket refrigeration attack Foreign Minister Jean-Noël Barrot confirmed the attribution on November 9 and called it an attack of “unprecedented scale and…
SAP’s November 2026 patch cycle fixes dozens of SAP flaws
SAP’s November 2026 Security Patch Day covers critical vulnerabilities in SAP NetWeaver, Web Dispatcher, Gateway, and other business applications. Released on November 10, the update includes 35 new security notes, four GitHub security advisories, and three updates to earlier notes. Highest-risk SAP flaws span NetWeaver and gateway tools Four vulnerabilities in the release carry the maximum CVSS score of 10.0. The patched issues include memory corruption, missing authentication, broken access…
iOS sandbox flaw may expose crypto wallet files on iPhone
Binance warned iPhone users about worse_query, an iOS flaw that could let malicious apps read files belonging to other apps. The warning named iOS 26.7.1, 27.0.1, and 27.2 as affected, and said seed phrases, private keys, and login details could be exposed. What Binance said about the flaw The exchange described this as an operating system issue rather than a problem tied to Binance alone. It said the normal boundary…
Terminal2Shell claims a 1971 flaw affects billions of devices
Terminal2Shell says a flaw dating back to 1971 affects more than two billion devices and lets anyone who opens a terminal gain an interactive shell. The page presents the issue as “TermGeddon,” but it is satire rather than a confirmed vulnerability disclosure. The supposed issue and what it actually shows The site lists a CVE as pending and gives the problem a CVSS score of 11.0 out of 10. That…
GhostAction campaign breaches 500-plus GitHub accounts
A new wave of the GhostAction campaign has compromised more than 500 GitHub accounts. The attackers used those accounts to plant a fake security workflow across tens of thousands of repositories, and the workflow steals cloud, AI, and publishing credentials. Malicious workflow planted across repositories Security firm Socket says the affected accounts began adding the malicious file on October 7, 2026. Some of the repositories belong to large organizations. On…