The clearest hint yet about the security hardware inside AMD's upcoming Zen 6 processors arrived not in a launch presentation but in a firmware changelog. A commit to the linux-firmware repository adds version 4 of the AMD Platform Management Framework trusted application for a platform identified as 1AH_M80H, and its description states that the application now runs on the RISC-V based trusted execution environment. Phoronix's Michael Larabel spotted the line and noted that he could find no other public reference to a RISC-V trusted execution environment in a Ryzen or EPYC part.

SonicWall has patched a high-severity vulnerability in SonicOS that can allow a VPN user to bypass SAML authentication, and with it the multi-factor authentication that SAML is supposed to enforce. The flaw, tracked as CVE-2026-19868, was added to the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalog on November 6, the same day SonicWall published its advisory, and federal agencies must remediate it by November 20.

Microsoft is shrinking the roster of neocloud partners it rents artificial intelligence capacity from, focusing on a few key suppliers while it prioritizes its own data centers, according to people familiar with the matter who spoke to CNBC. The company is still evaluating its external agreements and has not decided which providers it will stop using, the sources said. Bloomberg reported on the plans earlier, and two people said Microsoft has also opted not to renew a deal with Oracle.

Extreme Networks, the Morrisville, North Carolina maker of enterprise networking software and equipment, is exploring a sale after attracting inbound acquisition interest, Reuters reported on Friday, November 6. People familiar with the matter told Reuters that the company is working with an investment bank on a sale process that followed the approach. The sources spoke on condition of anonymity because the talks are private, and Reuters did not report a timetable or a price for any potential transaction.

Microsoft Threat Intelligence and Microsoft Security Research reported on November 5 that threat actors are using an agentic artificial intelligence framework called ARTEX to search public GitHub repositories for exposed credentials, application secrets, and AI inference keys, and then to use those secrets to move into victims' cloud environments. In one documented case, Microsoft says, an agent went from scanning GitHub for client secrets to exfiltrating data from Azure Key Vault in five minutes.

Google has announced a long-term investment of $17 billion to build its first data center in Wyoming, a campus in Laramie County south of Cheyenne that will support the company's artificial intelligence and cloud workloads. The company is developing the project with Tallgrass Energy, Black Hills Energy, American Electric Power (AEP), and Related Digital, and it says it will pay the full cost of the electricity the campus uses, along with the infrastructure its growth requires.

Zyxel has patched a previously unknown vulnerability in its GS1900 smart managed switches after researchers found that the exploit used against nearly a thousand devices still worked on firmware that administrators believed had already fixed the problem. The flaw, now tracked as CVE-2026-107441, affects ten GS1900 models and lets an unauthenticated attacker run operating system commands with root privileges through the switches' web management program.

Qualcomm reported fiscal fourth-quarter results on November 4 that captured a company in transition, as a sharp fall in smartphone chip sales contrasted with rapid growth in automotive and a new data center business that management expects to become a major revenue source in fiscal 2027.

Arista Networks reported third-quarter 2026 revenue of 3.66 billion dollars on November 3, up 58.5 percent from 2.31 billion dollars a year earlier and up 20.5 percent from the second quarter. The company described the result as its fastest year-on-year quarterly revenue growth since its initial public offering in 2014, and the figure cleared Arista's own guidance of about 3.3 billion dollars by more than 350 million dollars.

Broadcom announced on November 4 that it is expanding its VMware Cloud Foundation portfolio with new private AI deployment tools, security and disaster recovery capabilities built into the core platform, and a new lower-cost virtualization product for smaller environments. The company is positioning VMware Cloud Foundation, known as VCF, as a private cloud platform for running traditional virtual machines, containers and AI workloads in enterprise data centers.