📡 IT SecOps News — November 3, 2026
Daily IT SecOps, vulnerability, patch, and security news briefing. Sources monitored: 17 feeds across Microsoft, CISA, security news, and IT communities
🚨 High Alerts & Active Exploits
Critical vulnerabilities, zero-days, active exploits in the wild, and emergency advisories requiring immediate IT SecOps attention.
Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access
Source: The Hacker News · Published: November 3, 2026 at 03:59 PM UTC · 🔗 Direct Link to Article / Advisory
🛡️ CVE: CVE-2026-116606 (CVE.org) · (NVD) Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization controls and gain root access to a susceptible device. The vulnerabilities, a pre-authentication authorization bypass vulnerability and a command injection vulnerability, have been assigned the …
Google bans Android TV maker for secretly installing malware on millions of devices
Source: Neowin · Published: November 3, 2026 at 02:16 PM UTC · 🔗 Direct Link to Article / Advisory
Google has disrupted the global XCPE botnet, an illegal operation that controlled over 1.3 million Android TV set-top boxes worldwide. Read more…
UK school estate hit by 3AM ransomware in suspected AI-assisted attack
Source: BleepingComputer · Published: November 3, 2026 at 02:00 PM UTC · 🔗 Direct Link to Article / Advisory
A 3AM ransomware affiliate targeted a school estate in the UK and successfully encrypted around 37 of nearly 50 machines reached from an unmanaged host. […]
Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
Source: The Hacker News · Published: November 3, 2026 at 11:23 AM UTC · 🔗 Direct Link to Article / Advisory
🛡️ CVE: CVE-2026-98432 (CVE.org) · (NVD) Fixed kernels for a use-after-free vulnerability in the Linux kernel’s IPv4 TCP code are now available for Red Hat Enterprise Linux 8, 9, and 10, while Ubuntu’s fixes for its three newest long-term-support releases remain in its opt-in testing channel with no date for a regular update. The flaw, tracked as CVE-2026-98432, can be reached by a rem…
Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware
Source: The Hacker News · Published: November 3, 2026 at 11:00 AM UTC · 🔗 Direct Link to Article / Advisory
A Russia-aligned threat actor known as Gorbag has been observed using simple information stealer malware in attacks targeting Ukrainian organizations. “Active since at least February 2025, the group has focused exclusively on Ukrainian targets, with a clear preference for law enforcement and justice entities, local administrations near the front…
⚠️ Bad Updates & Known Issues
Reports of problematic updates, broken KBs, OS regressions, and patches causing issues.
- 🟠 Microsoft confirms October Windows KB5002934 update broke Excel copy paste again, issues fix — Neowin · Article Link → — 🔧 KB: KB5002934 (Microsoft Support)
Microsoft’s October Windows update struck again breaking Excel’s copy-paste feature once more. The company admitted the problem and has issued a fix now. Read more…
📅 Upcoming Changes & Deprecations (14-Day Horizon)
Upcoming security changes, feature retirements, and deadlines on the horizon.
-
📆 Dynamics 365 Sales: Autonomously generate quotes and drive sales with Sales Development Agent — Microsoft 365 Roadmap · Read Announcement → Sales Development Agent (SDA) can take leads from qualified opportunities to closed deals. Key capabilities include: Generating quotes through D365S as well as 1P/3P systems and sharing them with customers to company branded templates. Connectivity to quoting and transaction s…
-
📆 Microsoft Teams: Intelligent call recap for call queue calls on Mobile — Microsoft 365 Roadmap · Read Announcement → Calling reps and supervisor leads can access intelligent call recap for call queue calls directly from the Queues app on Mobile. After a call, users can quickly catch up on the conversation with AI-generated notes, key discussion points, and recommended follow-up tasks, helpin…
-
📆 Microsoft Teams: Automatic recording indicator for call queue calls on Mobile — Microsoft 365 Roadmap · Read Announcement → For call queue calls that are automatically recorded by the organization, Teams on Mobile will clearly indicate that recording and transcription have started automatically and cannot be stopped. This gives users clearer and more accurate information about the recording state o…
-
📆 Microsoft Teams: Manage call groups on Mobile — Microsoft 365 Roadmap · Read Announcement → Users can create and manage their call group directly from Teams on Mobile. They can add or remove members, configure how the group should ring, and choose to forward or simultaneously ring incoming calls to their call group. This makes it easier for users to manage how their …
-
📆 OneDrive: Respond to access requests directly in the Share dialog — Microsoft 365 Roadmap · Read Announcement → Review and respond to access requests inside the Share dialog. When people request access to a file, folder, or library, anyone who can share it will see pending requests right in the Share dialog for that item. From there, they can choose the level of access to grant, approve…
-
📆 Dynamics 365 Project Operations: Support What-If Analysis for multiple budget versions — Microsoft 365 Roadmap · Read Announcement → This is for Project Operations Core and Integrated to ERP. Enable project managers to compare multiple budget versions and select the most suitable budget before submission and approval. This capability improves decision-making by allowing users to evaluate different planning …
-
📆 Dynamics 365 Project Operations: Enable multiple baselines for a project — Microsoft 365 Roadmap · Read Announcement → Multiple Baselines enables project managers to capture and maintain multiple snapshots of a project plan, providing a historical record of project execution and performance over time. Available for Project Operations Core and Project Operations connected with ERP. With this ca…
-
📆 Dynamics 365 Business Central: USA - Manually upload 1099 forms to the IRIS — Microsoft 365 Roadmap · Read Announcement → The FIRE system will effectively be retired at the end of 2026, and IRIS will be the only electronic filing channel starting January 1, 2027. Users in Business Central can now generate IRIS-compatible 1099 submission files for manually upload instead of the legacy FIRE format….
-
📆 Dynamics 365 Field Service: Use AI recommendations for mobile offline profile configuration — Microsoft 365 Roadmap · Read Announcement → Business value Mobile offline profile design can affect first sync, ongoing sync cost, app responsiveness, and reliability. Administrators and makers often need to balance business data requirements with profile complexity, related data, and performance considerations. AI-assi…
-
📆 Microsoft Copilot (Microsoft 365): New Microsoft 365 Copilot usage reports for Copilot Search, Connectors, and Agents for US Government customers — Microsoft 365 Roadmap · Read Announcement → We are introducing new Microsoft 365 Copilot usage reports for Copilot Search, Copilot Connectors, and Copilot Agents for US Government customers across GCC Moderate, GCC High, and DoD environments. These reports will provide administrators with organization-level and user-lev…
✅ Official Updates & Security Advisories
Feature announcements, security blogs, and official releases.
-
Fake-download campaign uses trojanized installers to deliver monetization payloads — Microsoft Security Blog · Read Article → Microsoft Threat Intelligence tracks a fake-download campaign that uses trojanized Inno installers to deliver multiple monetization offers and provides detection and investigation guidance across the complete installer session. The post Fake-download campaign uses trojanized i…
-
Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms — Microsoft Security Blog · Read Article → Read why Gartner named Microsoft a Leader in the inaugural 2026 Magic Quadrant for AI Agent Management Platforms. The post Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms appeared first on Microsoft Security Blog .
-
Learn about using Intune to manage Microsoft Defender settings on devices that aren’t enrolled with Intune - Microsoft Intune — Microsoft Intune What’s New · Read Article → Learn how to use Intune endpoint security policies to manage Microsoft Defender for Endpoint on devices that are not enrolled with Intune Summarize this article for me In this article When you integrate Microsoft Intune with Microsoft Defender for Endpoint, you can use Intune …
-
What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks — Microsoft Security Blog · Read Article → Real-world exploitation concentrates in a small, high-impact subset of CVEs. Learn how defenders can prioritize vulnerabilities based on exploitation likelihood, exposure, and potential blast radius. The post What exploited vulnerabilities have in common: A data-driven analysi…
🐛 IT SecOps Community Buzz
What IT SecOps teams and sysadmins are discussing today.
- Barracuda warns of critical flaws allowing root access to devices — BleepingComputer · View Thread →
Cybersecurity company Barracuda Networks warned customers to patch two vulnerabilities that can let attackers run commands with root privileges. […]
- The 4 Elements of Exposure Prioritization and How to Operationalize Them — The Hacker News · View Thread →
Your team is remediating more vulnerabilities than ever, yet your breach risk has barely changed. You’re spending too much time and effort on exposures attackers may never exploit, while higher-risk exposures sit, wai…
- Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets — The Hacker News · View Thread →
BTCPay Server, a self-hosted, open-source cryptocurrency payment processor, has urged users to install the latest version of its software in response to reports of Bitcoin and Litecoin being stolen from hot wallets on…
- Microsoft highlights how Windows 11 KB5127936 brings a much needed backup recovery feature — Neowin · View Thread → — 🔧 KB: KB5127936 (Microsoft Support)
Admins can breathe a sigh of relief sooner as Microsoft adds a new useful backup recovery feature with Windows 11 KB5127936. Read more…
Generated automatically at November 3, 2026 at 06:12 PM UTC · View all IT SecOps news →