SAP has patched four maximum-severity vulnerabilities, including flaws dubbed ICM2SHELL and PROXYGATE, in its November 2026 security updates. They affect NetWeaver, the application platform behind SAP business software, as well as Web Dispatcher and Gateway, which route requests and connect external applications to SAP systems. Attackers can exploit the flaws remotely without credentials to compromise affected systems.

Source

Apple’s Mac Studio is a desktop workstation that can run AI models locally using its M5 Ultra chip and unified memory. New benchmarks show that a 256 GB configuration completed an agentic AI workload in less than half the time of a DGX Spark-like system, but larger models exposed a crucial software gap. For those models, the choice of inference engine—the software that runs them—can determine whether the Mac or a two-system Nvidia cluster wins.

Source

Microsoft is bringing back the user-requested What’s New dialog in classic Outlook for Windows, giving users a way to see recent changes in the desktop email client. The announcement adds a notification feature to the planned visual refresh, which will update the interface without changing familiar workflows.

Source

Cisco Cloud Control is a cloud-based service for managing the company’s networking devices and software. Starting in 2027, Cisco says every product it ships will integrate with the platform, although products will not necessarily require a Cloud Control connection to be managed. Cisco also plans to expand the service beyond the United States and extend its Live Protect vulnerability controls to more products.

Source

CISA has added four vulnerabilities in OpenSSH, GPUStack, SignalWire FreeSWITCH and IBM Aspera Faspex to its Known Exploited Vulnerabilities catalog, citing active attacks. Federal civilian agencies are urged to apply fixes by November 12, 2026. The OpenSSH flaw has already been linked to attempts to steal credentials and establish persistent access.

Source

Google has released a Chrome security update that fixes an actively exploited XML vulnerability, CVE-2026-125350. It is the eighth exploited Chrome zero-day Google has patched in 2026. The update includes nine security fixes for Windows, macOS, and Linux.

Source

Microsoft Purview provides cloud-based tools for protecting and investigating organizational data. Two new audit events record how the Purview portal evaluates user permissions, helping administrators investigate access decisions. They capture both role membership checks and checks involving scoped permissions.

Source

ChatGPT regained ground among six major chatbots, increasing its share of sessions from 80.42% in June to 81.2% in September 2026, according to a Graphite analysis of Similarweb data.

Source

Matthew Berman reviews Anthropic’s Claude Fable 5.2 on coding, game development and graphics projects. His demonstrations include a full Microsoft Excel clone, a Windows video editor and playable games built from short prompts. He reports strong autonomous coding performance, but some projects consumed billions of tokens and would have cost thousands of dollars at API rates.

Source

Claude is Anthropic’s AI service for coding, research, and other technical work. Its new Claude Fable 5.2 and Claude Mythos 5.2 models generate output up to 30% faster than their 5.1 predecessors, according to Anthropic, and cost $8 per million input tokens and $40 per million output tokens. Fable is generally available, while direct Mythos access is restricted to approved cybersecurity and life sciences users.

Source

Anthropic’s Claude models help developers tackle coding and reasoning tasks through cloud services. Claude Fable 5.2 is now available on Amazon Bedrock and Claude Platform on AWS, alongside the restricted Claude Mythos 5.2. Organizations adopting Fable should check its data-retention settings and test existing integrations before migrating.

Source

Apple is testing a change in macOS 27.3 that could require users to manually add apps before granting Full Disk Access, a permission that lets software read protected data such as mail and backups. The change is disabled in the first developer beta, and Apple has not confirmed whether it will ship in its current form.

Source

Red Hat OpenShift manages containerized applications and virtual machines across data centers and clouds. The newly available OpenShift 5 adds AI-assisted troubleshooting and upgrade checks, while forthcoming Red Hat Enterprise Linux (RHEL) updates add tamper protection and AI administration tools. Autonomous troubleshooting remains a technology preview and requires human approval for changes.

Source

Azure Linux is Microsoft’s Linux distribution for its cloud infrastructure and services. Its new 3.0.2022 release addresses vulnerabilities across the kernel, open-source packages and container tools, while also tightening certificate trust. The release notes contain more than 470 CVE references, though repeated entries mean that is not a count of distinct vulnerabilities.

Source

Attackers exploiting the OpenSSH SSHole flaw have tried to access credentials and maintain access, with one installing a remote-control implant after gaining root. The activity follows an SSHole attack that gained root on an Alpine Linux honeypot. The flaw, CVE-2026-123158, affects certain Linux configurations running OpenSSH, software used for secure remote logins.

Source

Microsoft Copilot, the cloud-based AI assistant for workplace tasks, can now create, update and delete data in connected third-party apps. Connector write actions are generally available in Copilot Chat and Cowork, with user approval required by default.

Source

CachyOS, an Arch Linux-based distribution focused on performance, now runs on Windows through the Windows Subsystem for Linux (WSL). Microsoft is working with the project to add it to WSL’s built-in download list, but users must install the image manually for now.

Source

Cisco AI Defense helps organizations test and protect their AI applications. Its new integration with Anthropic’s Claude Mythos 5 adds more advanced attack simulations for AI agents, but customers use the model through AI Defense rather than accessing it directly.

Source

Windows settings backup and restore helps organizations carry user settings and Microsoft Store app lists between devices. Its new Restore Summary shows users what was recovered on Windows 11 version 24H2 and later. Microsoft has also made backup the default on eligible Windows 11 26H2 devices, though restore still requires administrator configuration.

Source