LIVE · cybersecurity feed
Live wire
CVE-2026-20320 · Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available PatchesEU cyber scores look healthy, but 45% of surveyed IT providers take months to patchCVE-2026-120043 · SliceWP Affiliate Program Suite SQL Injection Exploited Before DisclosureCVE-2026-86596 · CLavaque s2Member Improper Control of Generation of Code Flaw Exploited Upon DisclosureCVE-2026-124194 · Microsoft Office Outlook Vulnerability Exploited Same Day as DisclosureCVE-2026-114432 · Rocklobster Contact Form 7 Flaw Exploited Same Day as DisclosureCVE-2026-123751 · Revmakx WP Duplicate Flaw Exploited Before CVE PublicationDetecting sleeper agents hiding in AI model neuronsNovember Patch Tuesday: An Overflowing Cornucopia of CVEsU.S. urges critical infrastructure orgs to secure refrigeration systems ASAP after EU supermarket and blood bank attacks
vulnerability

Windows 11 KB5132061 & KB5131087 cumulative updates released

Microsoft has released its November 2026 Patch Tuesday cumulative updates, designated as KB5132061 and KB5131087. These mandatory updates apply to Windows 11 versions 23H2, 24H2, 25H2, and 26H2. As part of the company’s monthly security cycle, these releases address hundreds of vulnerabilities identified in previous months. Users can obtain the patches through the standard Windows Update…

ZeroDay News ·

Source: BleepingComputer

Photo: iMahesh (CC BY-SA 4.0) via Wikimedia Commons

Microsoft has released its November 2026 Patch Tuesday cumulative updates, designated as KB5132061 and KB5131087. These mandatory updates apply to Windows 11 versions 23H2, 24H2, 25H2, and 26H2. As part of the company’s monthly security cycle, these releases address hundreds of vulnerabilities identified in previous months. Users can obtain the patches through the standard Windows Update interface in Settings or via manual download from the Microsoft Update Catalog.

The update introduces several functional enhancements alongside the security fixes. A significant change involves the File Explorer context menu, which has been redesigned to be more customizable and responsive. Users can now toggle specific commands, such as Send to or Create shortcut, and choose which app extensions appear in the primary menu or submenus. Additionally, the update adds support for dark mode within the Folder Options dialog and improves the consistency of file information layouts in search results. The address bar now recognizes the tilde character as a shortcut for navigating to the user profile directory.

Microsoft has also modernized the AutoPlay experience for connected devices like cameras and smartphones. The new interface supports dark mode, adjusts more effectively to display scaling settings, and integrates notifications into the system notification center. For gamers, the XBOX mode features a refreshed Gaming Task View with a new navigation bar that provides immediate access to power options and the ability to exit to the desktop.

Accessibility features have received notable updates as well. The Magnifier tool now includes a contrast theme toggle, per-monitor zoom capabilities, and viewport locking, which allows users to keep a magnified view on one display while interacting with others. Live Captions now include a setting to exclude screen reader audio, ensuring that transcriptions remain focused on system and microphone input. Furthermore, the Narrator tool has gained the ability to read and navigate mathematical equations within Microsoft 365 applications and specific versions of the Edge and Chrome browsers.

System management and recovery processes have also been refined. The Privacy & security page in Settings now groups related controls for the camera, microphone, and location, while the Device Info card, previously seen in earlier preview builds, is rolling out to additional markets for users signed in with a Microsoft account. In terms of recovery, Windows Recovery Environment (WinRE) can now automatically utilize existing Wi-Fi profiles, including certificate-based networks, to facilitate cloud-based rebuilds without requiring external USB media.

The update also includes minor refinements to the Taskbar, such as improved window preview animations and better state persistence for multi-monitor setups. Phone Link functionality has been expanded to allow users to preview recent messages or notifications directly within the Start menu by hovering over the item. Finally, the temporary files section within the Storage settings has received visual design adjustments to improve usability. These changes are consistent across all supported versions of Windows 11 included in this release cycle.

vulnerabilitypatch
ShareXLinkedInWhatsAppFacebook

More News

view all →
CVE-2026-20320high

Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security vulnerabilities affecting Cisco BroadWorks and the Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities (KEV) catalog. The agency’s inclusion of these flaws indicates that they are currently being leveraged in active, real-world attacks. Organizations utilizing these platforms…

vulnerabilitycritical

EU cyber scores look healthy, but 45% of surveyed IT providers take months to patch

The European Union’s cybersecurity landscape presents a significant disconnect between high-level national policy scores and the operational realities of service providers, according to the 2026 assessment released by the European Union Agency for Cybersecurity (ENISA). While the agency’s revised EU Cybersecurity Index reports an average score of 71.53 out of 100 across member states, a…

vulnerability

Nearly half of big firms shelve or close vulnerability findings they haven’t confirmed

Large enterprises are increasingly struggling to manage their vulnerability backlogs, with nearly half of organizations employing 5,000 or more staff members admitting to closing or deprioritizing security findings without conducting a full verification process. According to data from ProjectDiscovery, the primary driver for this behavior is a lack of time, as security teams find themselves…

breach

An Instagram ad was all it took: Leaked exploit kits are hitting employees’ iPhones

Criminals are increasingly leveraging leaked exploit kits to compromise iPhones, creating significant security risks for corporate environments where employees use personal devices for work. According to the 2026 Advanced Mobile Threat Report from iVerify, two specific toolkits, DarkSword and Coruna, are being deployed through malicious advertisements and compromised websites to target iOS…

security

A CISO’s guide to trimming waste from a flat security budget

Chief Information Security Officers facing stagnant financial resources are increasingly turning to operational consolidation as a primary strategy for maintaining security posture. Ken Leeser, the CISO at Y Meadows, suggests that a frozen budget should be viewed as an opportunity to audit and simplify an organization's existing security stack rather than a purely negative constraint. This…

ai

OpenAI builds a kill switch for its research models

OpenAI has officially introduced a centralized security mechanism, dubbed Control Room, designed to monitor and terminate the operations of its research models. The company developed this system to address growing safety and security concerns as its artificial intelligence models increase in power and complexity. By providing a dedicated infrastructure to track model workloads, the tool allows…