-
Apache Patches Critical HTTP/2 Flaw as Security Alerts Urge Updates
Apache has released a fix for a critical web-server vulnerability that could allow remote code execution. Security advisories urge prompt updates while stressing that actual exposure depends on configuration and the installed software package.
-
CISA Adds Cisco BroadWorks Flaw to Exploited-Vulnerability Catalogue
CISA’s November listing changes the urgency around a BroadWorks weakness patched in August. Cisco identifies fixed software and says no workaround addresses the vulnerability.
-
Google Adds AI Systems for Sensitive Data and Longer Contexts
The TPU 8tx protects data in use at the hardware level. The dual-chip TPU 8i Max targets workloads that need to move more data through memory.
-
SonicWall Patches Exploited VPN Authentication Bypass
CISA added CVE-2026-19868 to its exploited vulnerabilities list. The flaw affects SonicOS SSL VPN deployments that use SAML for sign-ins.
-
Firefox 159.0.1 Fixes a High-Impact Browser Layout Flaw
Mozilla fixed CVE-2026-120572 in its desktop browser. Canada’s cyber agency highlighted the patch in an advisory on Friday.
-
US and Australian Cyber Agencies Ask Vendors for Post-Quantum Migration Plans
Updated guidance turns quantum readiness into a procurement question, asking suppliers to identify embedded cryptography and show how products can be upgraded.
-
FBI and CISA Warn Refrigeration Cyberattacks Put Cold Chains at Risk
US agencies warn that attackers are targeting industrial refrigeration and monitoring systems. A French blood-service incident shows how functioning alarms and a rapid operational response can limit damage.
-
Chrome Sets a New eMudhra Certificate Cutoff as Trust-Store Cleanup Continues
Google’s 4 November update sets a timestamp cutoff for newly issued certificates under an eMudhra root. Enterprise responses show why browser fixes and application trust stores need separate attention.
-
CrowdStrike Adds AI Kill Switch as It Plans Fiddler and Dreadnode Acquisitions
CrowdStrike’s latest announcements combine a human-triggered stop control with planned agent-monitoring and security-testing capabilities, with different features arriving on different schedules.
-
NCSC Warns AI-Powered Ransomware Could Hit UK Infrastructure by 2028
Britain’s cyber agency links the growing threat to longstanding weaknesses and urges organisations to modernise systems while using AI to improve their own defences.
