Cybersecurity

Google released Chrome fixes for a high-severity XML memory bug it says is being exploited. The flaw is the eighth in-the-wild Chrome bug flagged this year.

• Security Zone Info Team
• November 10, 2026

MailRoute says Outlook.com began rejecting some mail from domains without DMARC on Nov. 5. Microsoft has not publicly confirmed the reported change.

• Security Zone Info Team
• November 9, 2026

Apiiro reports that 1,122 public GitHub files contain exposed passwords associated with Claude Code’s “Don’t Ask Again” permission option.

• Security Zone Info Team
• November 8, 2026

Coldframe is a Python honeypot posing as Danfoss or Dixell refrigeration equipment to log connections, login attempts and exploit probes.

• Security Zone Info Team
• November 8, 2026

InfoHawk says it identified 820 domains impersonating 35 restaurant brands, with one checkout flow collecting card details and bank SMS codes.

• Security Zone Info Team
• November 7, 2026

Report URI says 15,579 websites remain infected with malicious JavaScript, but says its team cannot notify the affected sites at scale.

• Security Zone Info Team
• November 7, 2026

OpenAI says its prototype validated 1,724 Linux kernel vulnerabilities and generated 948 local privilege-escalation exploits for human review.

• Security Zone Info Team
• November 5, 2026

Binance says a multi-stage attack involved fake interviews, malware and compromised internal tools. The FBI attributed the theft to North Korean-linked TraderTraitor.

• Security Zone Info Team
• November 5, 2026

A GitHub report documents automatic Postman plugin installs and agent configuration changes on one Mac; it does not establish API data exfiltration.

• Security Zone Info Team
• November 4, 2026

A report says Ubuntu 22.04, 24.04 and 26.04 lack patched kernels for CVE-2026-98432, rated CVSS 9.8. Ubuntu has not announced a fix date.

• Security Zone Info Team
• November 3, 2026