Citrix has patched 28 security flaws in NetScaler ADC and NetScaler Gateway, and the most urgent of them needs no special configuration to reach. In bulletin CTX697305, published on November 12, 2026, the company fixed CVE-2026-120868, a memory overflow in packet processing rated 9.3 under CVSS v4.0. Unlike most NetScaler flaws, this one affects every ADC and Gateway deployment in its default configuration, and Citrix has published no workaround for it. Upgrading is the only remediation.

A secret-stealing campaign that researchers call wfx-loot has turned hijacked GitHub accounts into a delivery system for cloud and artificial intelligence credentials, running its payload in at least 1,806 repositories and probing tens of thousands more.

A worm-like toolkit called SCKit has turned a trusted remote support tool into an attack path against managed service providers. Attackers used access to cloud-hosted ConnectWise ScreenConnect panels to push commands that installed rogue ScreenConnect clients on customer machines, giving them a separate channel that could survive the legitimate session being closed.

Microsoft said on Friday, November 13, that the worldwide Microsoft 365 outage that began the previous afternoon was finally in broad recovery, after nearly 24 hours in which businesses, schools, and governments struggled to reach email and the services that depend on it. The company said it had addressed the underlying issue and was seeing broad recovery and stability, while warning that it was still restoring service to remaining customers and regions and that its service health page still listed some services as unavailable.

Cerebras Systems has signed Microsoft as a cloud customer, making the software giant its third hyperscaler deal after Amazon Web Services and Oracle, as the wafer-scale chipmaker reported a record third quarter and raised its outlook for the full year.

AMD announced its Versal tamper-resistant, or TR, devices on November 13, a new family of adaptive processors built to protect security-critical information against sophisticated physical attacks. Based on the Versal AI Edge Series Gen 2 platform, the devices are aimed at organizations that handle sensitive information in defense systems, critical industrial infrastructure, data center networking and financial technology.

Google Cloud has warned customers running virtual machines on AMD Turin processors that three CPU side-channel flaws could let an attacker infer sensitive data from other processes, or from the operating system kernel, inside the same virtual machine. The company said it has already applied mitigations that protect against attacks between separate virtual machines and between a virtual machine and its host, but closing the remaining gap inside a guest will require action from customers.

Jensen Huang has resigned as Nvidia's president, chief executive officer and a member of its board, effective immediately, the company said on Thursday, November 12. The departure ends a 33-year run for the co-founder who built Nvidia from a graphics-chip maker for gamers into the dominant supplier of processors for artificial intelligence. Nvidia said its board accepted the resignation on Wednesday.

A.P. Moller-Maersk confirmed on November 11 that an attacker gained unauthorised access to one of its local legacy systems and extracted data from it. The system came to Maersk through a previous acquisition, a detail that puts the incident squarely in a familiar enterprise risk category: systems inherited in a deal that may not have received the same scrutiny, patching, or monitoring as the core estate.

Ivanti has released its November 2026 security updates, fixing 13 vulnerabilities across five products, and enterprise administrators should put two of them at the top of the patch queue. The most severe flaw is a SQL injection vulnerability in the Core of Ivanti Endpoint Manager that allows a remote attacker to achieve remote code execution without any authentication at all.