Microsoft fixes 1,235 flaws, including Outlook zero-day
Microsoft’s November security update includes 1,235 fixes and an actively exploited Outlook flaw. The day also brings a proposed Anthropic IPO and new New York reporting rules for frontier AI firms. Here are the details.
November 10, 2026
Microsoft’s November security update includes 1,235 fixes and an actively exploited Outlook flaw. The day also brings a proposed Anthropic IPO and new New York reporting rules for frontier AI firms. Here are the details.
Microsoft’s November tally excludes 108 flaws patched earlier this month and follows October’s 1,411 fixes; 66 of today’s vulnerabilities are rated critical. An actively exploited Outlook zero-day is among the 1,235 flaws, with about 639 affecting Windows products.
The exploited Outlook bug makes this more than a routine monthly update, so users should apply the fixes promptly.
[ BleepingComputer ]
Beyond its public offering, Anthropic is lining up a $26 billion private placement with anchor investors including Google, Nvidia, Microsoft and TSMC, bringing total share placements to as much as $90.4 billion. Goldman Sachs and Morgan Stanley lead underwriting; shares will trade on Nasdaq as ANT.
The proposed valuation would put a huge number on investor demand for AI, while the private placement keeps Google, Nvidia, Microsoft and TSMC in the deal.
[ The Decoder ]
New York opened a registration portal Tuesday, requiring frontier AI developers including OpenAI and Anthropic to register by Jan. 1, 2027. The RAISE Act mandates safety frameworks, 72-hour incident reports and public transparency reports; repeat violations can cost up to $3 million.
Companies building frontier AI now face a state-level reporting and transparency regime, with penalties that rise for repeat violations.
[ TechCrunch ]
A public proof-of-concept, WQ Files, uses the “worse_query” iOS sandbox escape to browse, export, edit or delete other apps’ data without a jailbreak. Binance urges users on iOS 26.7.1, 27.0.1 and 27.2 to update; no crypto losses are confirmed.
Anyone using Binance on the listed iOS versions should update, since the proof of concept can access data across apps.
[ BleepingComputer ]
SAP’s November 2026 update fixes 35 vulnerabilities, including four maximum-severity flaws in NetWeaver, Gateway and Web Dispatcher, which handle authentication, backend connectivity and incoming web traffic. Onapsis reported three, tracking two as ICM2SHELL and one as PROXYGATE.
Companies running these SAP systems should prioritize the fixes because the affected products sit on authentication and web-traffic paths.
[ BleepingComputer ]
The beta lets businesses reach ChatGPT’s 1.2 billion weekly users with verified information and product feeds covering pricing and availability. Business Hub also offers engagement insights, while Business Agents are initially available to eligible U.S. ecommerce and online service businesses.
ChatGPT could become a new place to compare product prices and availability, though the beta is limited to eligible U.S. businesses.
[ OpenAI News ]
The exploited flaw is a high-severity use-after-free in Chrome’s XML component, where stale memory references can enable code execution. Google is rolling out Stable Desktop fixes for Windows, macOS (157.0.8103.50/.51) and Linux (157.0.8103.50).
Chrome users should install the update as it reaches their devices; attackers were already exploiting the flaw.
[ BleepingComputer ]
This article was generated by AI and cites original sources.