InfoSecBulletin Cybersecurity for mankind

Microsoft has shared its updates for November 2026. These updates fix 1,093 new flaws in Windows, Office, SQL Server, SharePoint, Exchange Server, Azure services, and developer tools. The update has one serious flaw in Microsoft Outlook that can let attackers steal a user’s NTLMv2 password hash. This update fixes 63 …

Barracuda has confirmed active exploitation of security flaws affecting its Email Security Gateway (ESG), warning that attackers could combine two vulnerabilities to gain root access without logging in. The issues, listed as CVE-2026-116606 and CVE-2026-111560, include an authorization bypass and command injection. To exploit them, one needs access to the …

Apple, SAP, and Ivanti have published security updates that fix several flaws with messaging, Bluetooth, enterprise servers, and endpoint management systems. The disclosures show flaws that could let remote attackers get into private iMessage chats, skip security checks, run unauthorized code, alter trusted certificates, and leak sensitive data. The biggest …