SAP used its November Security Patch Day on Tuesday, November 10, to fix four vulnerabilities that each carry the maximum CVSS score of 10.0, all of them reachable by an attacker without any login. The monthly release includes 35 new security notes, four GitHub security advisories, and three updates to previously released notes, and SAP strongly recommends that customers apply the corrections on a priority basis.

AMD announced on November 10, 2026, the general availability of its 6th Gen AMD EPYC server SP7 processors, built on the new Zen 6 architecture. Systems powered by the new CPUs are now shipping from leading server OEMs and ODMs, and cloud instances from Microsoft Azure and Oracle Cloud Infrastructure will be generally available soon, the company said in its Santa Clara announcement.

NVIDIA, South Korean chip designer Rebellions and SK Telecom announced a collaboration on November 9 in Seoul to build sovereign AI infrastructure for Korea, linking Korean-designed processors directly into NVIDIA's rack-scale platform. The agreement, supported by Korea's Ministry of Science and ICT, was unveiled during NVIDIA AI Day Seoul and is structured as a development collaboration rather than a product launch.

Cisco announced on November 9 that it is adding Anthropic's Claude Mythos to Cisco AI Defense, its platform for testing AI models, applications and agents before they reach production. Announced at Cisco Live APJC in Melbourne, the move will let select enterprises use frontier adversarial reasoning to simulate real-world attacks on their own agents, Cisco said AI Defense, launched in January 2025, has already helped hundreds of customers find critical flaws before production.

Google on November 9 expanded its eighth-generation Tensor Processing Unit portfolio with two new systems, TPU 8tx for secure and confidential inference and TPU 8i Max for massive context windows. The additions bring the eighth-generation family to four systems in a single year, which Google said is the first time it has introduced that many TPU systems in one year in more than a decade of designing the chips.

Spectro Cloud announced on November 9 that its PaletteAI VerteX platform is now available in AWS Marketplace for eligible U.S. Department of War organizations buying through Joint Warfighting Cloud Capability, or JWCC, procurement pathways. The listing gives defense mission owners a new way to buy a common software foundation for modernizing existing infrastructure and running artificial intelligence workloads across cloud, data centers, and the tactical edge.

DigiCert, one of the world's largest certificate authorities, is notifying customers that an unauthorized account read archived customer records, including in some cases passports and driver's licenses, after a 2025 server migration quietly left an internal business system reachable from the public internet for more than 16 months.

A New York Times investigation published on November 7 found that the U.S. Commerce Department approved roughly two dozen Chinese companies to buy or handle Nvidia's H200 artificial intelligence chips, including firms whose listed offices stood empty and whose owners have ties to companies already on the U.S. trade blacklist. The findings raise questions about how closely the export licenses were vetted.

An attacker who can reach an SSH port can log into an account deliberately set up with no password, simply by sending a password that is too long. That is CVE-2026-123158, nicknamed "*sshole," disclosed on November 5, 2026, and fixed the same day in OpenSSH 10.6p2.

The clearest hint yet about the security hardware inside AMD's upcoming Zen 6 processors arrived not in a launch presentation but in a firmware changelog. A commit to the linux-firmware repository adds version 4 of the AMD Platform Management Framework trusted application for a platform identified as 1AH_M80H, and its description states that the application now runs on the RISC-V based trusted execution environment. Phoronix's Michael Larabel spotted the line and noted that he could find no other public reference to a RISC-V trusted execution environment in a Ryzen or EPYC part.