RF Wave

Microsoft released November 2026 patches and more - Nov 15, 2026

Microsoft released November 2026 patches and more - weekly security news and updates roundup for Nov 8-15, 2026

  • vulnerability
  • data breach
  • Microsoft
  • Patch Tuesday
  • Iris Ohyama
  • Iris Plaza
  • Beget
  • York University
  • SEGA
  • ARARA
  • SEGA Fave
  • MOS Burger
  • Vanderbilt University
  • BYOD
  • Nitori
  • Nitori Net
  • Railway
  • Wiz
  • OpenCode
  • Warp
  • Maersk
  • WhiteArmor
  • LF Logistics
  • Li & Fung Group
  • Notion
  • Notion AI
  • Fireworks AI
  • Baker Tilly
  • Experian
  • Apify
  • GitHub
  • Quantum Systems
  • QBase
  • Trezor
  • Safe 5
  • CryptoBilis
  • Cursor
  • Anthropic
  • Open VSX
  • OpenSSH
  • Alpine Linux
  • Google
  • Chrome
  • Barracuda Networks
  • Email Security Gateway
  • UNC4841
  • Mandiant
  • SAP
  • NetWeaver
  • SAP Gateway
  • SAP Web Dispatcher
  • Xen Orchestra
  • Vates
  • XCP-ng
  • Cisco
  • BroadWorks
  • CISA
  • N-able
  • N-central
  • Apache HTTP Server
  • Apache Software Foundation
  • Apache Axis
  • ConnectWise
  • ScreenConnect
  • Huntress
  • Check Point
  • Security Gateway
  • Security Management Server
  • PHP
  • VMware ESXi

Microsoft has released November 2026 software updates

The updates fix a total of 1235 vulnerabilities, including one zero-day vulnerability

This Week’s Updates

Breaches

  1. Iris Ohyama says a third-party cloud breach may have exposed data of up to 7.7 million Iris Plaza customers
  2. Russian cloud firm Beget confirms a data wiper attack destroyed customer data and is rebuilding from scratch
  3. York University confirms theft of personal information from 14 website forms dating back to 2007
  4. SEGA says a breach at newsletter provider ARARA exposed 2.2 million email addresses
  5. Vanderbilt University confirms an active cyberattack claimed by the BYOD ransomware gang
  6. Nitori confirms unauthorized access that may have exposed up to 37.6 million customer records
  7. Railway confirms attackers stole internal source code, leading to $740,000 in fraudulent AI charges
  8. Maersk confirms a data breach as the WhiteArmor ransomware gang demands $5 million
  9. Notion says the Fireworks breach exposed customer AI chat transcripts
  10. Baker Tilly notifies clients of a data breach at a third-party provider affecting over 10,000 people
  11. Apify rotates API tokens and prompts 2FA resets after an unauthorized party accessed internal systems
  12. Quantum Systems confirms an incident after a malicious update reportedly disrupted German military drone operations
  13. Trezor confirms crypto-stealing implants in three Safe 5 wallets and releases firmware 2.13.1
  14. Cursor confirms a security breach led to malicious Claude Code extension copies reaching up to 5,000 developers

Vulnerabilities

  1. Hackers exploit the SSHole OpenSSH authentication bypass (CVE-2026-123158) fixed in version 10.6p2
  2. Google patches the eighth Chrome zero-day exploited in attacks this year (CVE-2026-125350)
  3. Barracuda confirms exploitation of two flaws in Email Security Gateway that give attackers root access
  4. SAP patches four maximum severity flaws in NetWeaver, SAP Gateway and Web Dispatcher
  5. Critical Xen Orchestra authentication bypass exploited to hijack VM servers, fixed in 6.9.1 and 6.10.0
  6. CISA flags a Cisco BroadWorks flaw (CVE-2026-20320) as actively exploited in attacks
  7. N-able releases N-central 2026.4 HF2 hotfixes for zero-day vulnerabilities
  8. Apache HTTP Server patches a critical HTTP/2 remote code execution flaw (CVE-2026-119618)
  9. New N-able 4EverAble2Shell zero-day (CVE-2026-90436) exploited hours after a PoC was released
  10. ConnectWise disables ScreenConnect extensions as SCKit malware targets MSPs via CVE-2026-84869
  11. Check Point warns of a zero-day (CVE-2026-123039) exploited for root access and releases hotfixes
  12. Check Point gateways hacked via PHP2Shell (CVE-2026-109618) to deploy a VMware ESXi wiper