Justin Schroeder of Standard Agents argues that businesses should use small, domain-specific AI agents instead of relying on one general-purpose agent equipped with many skills. He says standards for building, installing, and connecting agents are needed to make this approach practical.

Source

OpenAI’s ChatGPT new Wallet lets AI agents complete purchases, but there’s a human-shaped speed bump: users must approve every payment with a security check.

Source

Microsoft says Defender blocks potential exploitation attempts against SignDrop, the Windows zero-day that can give a local user SYSTEM privileges. The company is investigating and says it has no evidence of attacks in the wild. An independent researcher reproduced the exploit but found its apparent requirements limited the number of affected machines.

Source

Euro-Office, a European-developed office suite and Microsoft Office alternative, is now available as a desktop app for Windows, macOS and Linux. The free Nextcloud Office Desktop app supports offline editing and can connect to Nextcloud Hub for real-time collaboration.

Source

Microsoft says a fault introduced during an earlier network capacity upgrade caused the global Microsoft 365 outage after a later network change exposed it. The explanation follows widespread Outlook disruption and an email backlog that also affected Teams and other services. Microsoft says it has addressed the underlying issue, though restoration was still underway for some customers.

Source

ARTEX is an open-source AI penetration-testing framework that coordinates agents and security tools to map systems, identify weaknesses, and pursue potential attack paths. Although designed for security testing, attackers have also used it and its forks against organizations. Cloudflare says daily requests from AI penetration testing and exploitation tools have grown more than 30-fold since October 1, as attackers use ARTEX-derived frameworks to scan targets and exploit stolen credentials. The company observed more than 50 framework families scanning its customers in three days, from thousands of IP addresses.

Source

Microsoft has released emergency out-of-band updates to fix Windows licensing and activation errors caused by November’s security updates. The patches address SLMGR command failures that returned error 0x80041008 when organizations configured activation or managed product keys.

Source

Cloudflare’s Kitesurf is a lightweight browser for AI agents that runs on Cloudflare Workers. Its source code is now available under the Apache 2.0 license, allowing developers to modify it, run it locally, or deploy their own instance. The release fulfills a promise made when Cloudflare added WebMCP support and broader browser compatibility to Kitesurf.

Source

The number of vulnerabilities assigned Common Vulnerabilities and Exposures (CVE) identifiers in 2026 passed 100,000 on November 13, more than double the 2025 total. VulnCheck counted 100,222 disclosures and attributes much of the surge to AI-assisted research. The growing volume is adding pressure to patching workflows as attackers move quickly against some newly disclosed flaws.

Source

A post-quantum-ready YubiKey is now in beta, giving organizations an early way to test future cryptographic hardware. Meanwhile, FIDO Alliance CTO Nishant Kaushik recommends choosing workforce passkeys by user risk—and planning for recovery and eventual key replacement. The advice comes as Microsoft Entra ID moves users away from SMS and voice authentication.

Source

Attackers have chained PHP2Shell with a newly disclosed privilege-escalation flaw to take over Check Point gateways, with some intrusions leading to destructive attacks on VMware ESXi hosts. Check Point has released emergency hotfixes for CVE-2026-123039 and says a couple of dozen customers were affected. The campaign turns the previously identified PHP2Shell risk to firewall and VPN appliances into a route for root access and network intrusion.

Source

On 6 November 2026, Microsoft shipped Windows 11 Insider Preview Build 29704.1000 to the Experimental (Future Platforms) channel. The standout change is granular privacy: you can permit or refuse camera, microphone, and location for each desktop application instead of depending on one blanket device setting. The same build resolves Windows Update error 0x80070057 - 0x20003, which halted some upgrades in the SAFE_OS phase, and repairs HDMI and DisplayPort audio on certain AMD graphics hardware. This piece walks through the new permissions model, its fit with enterprise policy, and the practical impact of the fixes.

Source

Microsoft's November 10, 2026, security releases rework how NTLM message signing is negotiated to close CVE-2026-118737 and limit NTLM relay risk. Windows clients now propose actual NTLM signing on every non-anonymous session, whereas servers still allow unsigned clients through. From May 2027 onward, Windows servers will insist on NTLM signing by default and refuse peers that never offer it. This piece covers what changed, the registry DWORDs ClientAllowUnsignedNtlm and ServerRequireNtlmSign, and how audit events 4022 and 4023 help you locate unsigned NTLM before the server-side requirement kicks in.

Source

Cloudflare’s developer platform runs applications and services on its global network. Its new Spend Management beta lets pay-as-you-go customers set spending limits and alerts for Workers and Durable Objects, then automatically pause chargeable activity when a limit is reached.

Source

Google is rolling out Gemini 4 Hydrogen, its cloud-based AI model for everyday coding and multistep tasks, in Search and the Gemini app as a replacement for Gemini 3.8 Flash. The recently launched model is also coming to eligible Google Sheets users. Google says it handles complex Search queries and instructions in the Gemini app more effectively.

Source

Microsoft plans to retire some legacy Compatibility Mode settings in desktop Word, potentially changing the layout of documents created or last saved in Word 2010 or earlier. The rollout is due to begin on Windows in December 2026 and on Mac in May 2027.

Source

GitHub was built for people who write code, open pull requests, and review each other's work. As AI agents take over more of that work, rivals are asking whether developers still need GitHub. GitHub isn't obsolete yet, but its role is changing quickly.

Source

Microsoft reports broader Outlook and Microsoft 365 recovery in North America and sustained improvement across much of Europe after a configuration patch improved stability in parts of Asia Pacific. As of 8 a.m. ET on November 13, some users still faced intermittent access and delayed email, with no estimate for full restoration.

Source

CNN contributor Jacob Ward and correspondent Gage Golding discuss a global Microsoft 365 outage affecting Outlook and other cloud services. The disruption interrupted email, collaboration and some security services for customers worldwide. Microsoft had reported limited progress restoring service, but the cause and recovery time remained unclear.

Source