Spectro Cloud announced on November 9 that its PaletteAI VerteX platform is now available in AWS Marketplace for eligible U.S. Department of War organizations buying through Joint Warfighting Cloud Capability, or JWCC, procurement pathways. The listing gives defense mission owners a new way to buy a common software foundation for modernizing existing infrastructure and running artificial intelligence workloads across cloud, data centers, and the tactical edge.

DigiCert, one of the world's largest certificate authorities, is notifying customers that an unauthorized account read archived customer records, including in some cases passports and driver's licenses, after a 2025 server migration quietly left an internal business system reachable from the public internet for more than 16 months.

A New York Times investigation published on November 7 found that the U.S. Commerce Department approved roughly two dozen Chinese companies to buy or handle Nvidia's H200 artificial intelligence chips, including firms whose listed offices stood empty and whose owners have ties to companies already on the U.S. trade blacklist. The findings raise questions about how closely the export licenses were vetted.

An attacker who can reach an SSH port can log into an account deliberately set up with no password, simply by sending a password that is too long. That is CVE-2026-123158, nicknamed "*sshole," disclosed on November 5, 2026, and fixed the same day in OpenSSH 10.6p2.

The clearest hint yet about the security hardware inside AMD's upcoming Zen 6 processors arrived not in a launch presentation but in a firmware changelog. A commit to the linux-firmware repository adds version 4 of the AMD Platform Management Framework trusted application for a platform identified as 1AH_M80H, and its description states that the application now runs on the RISC-V based trusted execution environment. Phoronix's Michael Larabel spotted the line and noted that he could find no other public reference to a RISC-V trusted execution environment in a Ryzen or EPYC part.

SonicWall has patched a high-severity vulnerability in SonicOS that can allow a VPN user to bypass SAML authentication, and with it the multi-factor authentication that SAML is supposed to enforce. The flaw, tracked as CVE-2026-19868, was added to the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalog on November 6, the same day SonicWall published its advisory, and federal agencies must remediate it by November 20.

Microsoft is shrinking the roster of neocloud partners it rents artificial intelligence capacity from, focusing on a few key suppliers while it prioritizes its own data centers, according to people familiar with the matter who spoke to CNBC. The company is still evaluating its external agreements and has not decided which providers it will stop using, the sources said. Bloomberg reported on the plans earlier, and two people said Microsoft has also opted not to renew a deal with Oracle.

Extreme Networks, the Morrisville, North Carolina maker of enterprise networking software and equipment, is exploring a sale after attracting inbound acquisition interest, Reuters reported on Friday, November 6. People familiar with the matter told Reuters that the company is working with an investment bank on a sale process that followed the approach. The sources spoke on condition of anonymity because the talks are private, and Reuters did not report a timetable or a price for any potential transaction.

Microsoft Threat Intelligence and Microsoft Security Research reported on November 5 that threat actors are using an agentic artificial intelligence framework called ARTEX to search public GitHub repositories for exposed credentials, application secrets, and AI inference keys, and then to use those secrets to move into victims' cloud environments. In one documented case, Microsoft says, an agent went from scanning GitHub for client secrets to exfiltrating data from Azure Key Vault in five minutes.

Google has announced a long-term investment of $17 billion to build its first data center in Wyoming, a campus in Laramie County south of Cheyenne that will support the company's artificial intelligence and cloud workloads. The company is developing the project with Tallgrass Energy, Black Hills Energy, American Electric Power (AEP), and Related Digital, and it says it will pay the full cost of the electricity the campus uses, along with the infrastructure its growth requires.