📡 IT SecOps News — November 4, 2026
Daily IT SecOps, vulnerability, patch, and security news briefing. Sources monitored: 17 feeds across Microsoft, CISA, security news, and IT communities
🚨 High Alerts & Active Exploits
Critical vulnerabilities, zero-days, active exploits in the wild, and emergency advisories requiring immediate IT SecOps attention.
| Priority | Title | Source | Advisory / Link |
|---|---|---|---|
| 🔴 HIGH | SonicWall Won’t Patch EoL GMS Flaws That Could Expose Files, Alter Datab… | The Hacker News | Read News Article → |
| 🔴 HIGH | NIKKE PC game launcher hacked to spread remote access, data-stealing mal… | BleepingComputer | Read News Article → |
| 🔴 HIGH | CISA flags WordPress RCE flaw as actively exploited in attacks | BleepingComputer | Read News Article → |
| 🔴 HIGH | Google Issues Patches for Critical Android Flaw That Could Allow RCE Wit… | The Hacker News | Read News Article → |
| 🔴 HIGH | CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upg… | The Hacker News | Read News Article → |
| 🔴 HIGH | Binance says fake job interview led to $6.3 billion crypto heist | BleepingComputer | Read News Article → |
SonicWall Won’t Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
Source: The Hacker News · Published: November 4, 2026 at 05:00 PM UTC · 🔗 Direct Link to Article / Advisory
🛡️ CVE: CVE-2026-109593 (CVE.org) · (NVD) SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched. Details of the security flaws, which affect SonicWall GMS 9.5.2 and earlier versions, are below - CVE-2026-109593 (CVSS score: 9.1) - An unauthenticated file read vulnerability that could allow an attacker wi…
NIKKE PC game launcher hacked to spread remote access, data-stealing malware
Source: BleepingComputer · Published: November 4, 2026 at 04:58 PM UTC · 🔗 Direct Link to Article / Advisory
The developers of Goddess of Victory: NIKKE have confirmed that hackers tampered with the game’s PC launcher scripts in a supply-chain attack, distributing malware capable of stealing credentials and cryptocurrency wallet data. […]
CISA flags WordPress RCE flaw as actively exploited in attacks
Source: BleepingComputer · Published: November 4, 2026 at 12:11 PM UTC · 🔗 Direct Link to Article / Advisory
The US Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that attackers have started exploiting a recently patched high-severity WordPress vulnerability in the wild. […]
Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
Source: The Hacker News · Published: November 4, 2026 at 07:46 AM UTC · 🔗 Direct Link to Article / Advisory
🛡️ CVE: CVE-2026-58868 (CVE.org) · (NVD) A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin. The flaw, CVE-2026-58868, affects Android 14 through 17. Phones get the fix with security patch level 2026-11-01 or later, which phone makers and carriers send on their own schedules. As of Novem…
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
Source: The Hacker News · Published: November 4, 2026 at 05:43 AM UTC · 🔗 Direct Link to Article / Advisory
🛡️ CVE: CVE-2026-119977 (CVE.org) · (NVD) The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The high-severity vulnerability, tracked as CVE-2026-119977 (CVSS score: 8.1), is a case of Time-of-check Time-of-use (TOCTOU) race condition th…
⚠️ Bad Updates & Known Issues
Reports of problematic updates, broken KBs, OS regressions, and patches causing issues.
No problematic update reports detected today.
📅 Upcoming Changes & Deprecations (14-Day Horizon)
Upcoming security changes, feature retirements, and deadlines on the horizon.
-
📆 Microsoft Viva: Engage - Improved shared messages end-user experience — Microsoft 365 Roadmap · Read Announcement → Improving the shared conversation experience in Viva Engage to so it’s easier for users to discover, read, and participate. GA date: November CY2026
-
📆 Microsoft Teams: Copilot in the Queues app on Mobile — Microsoft 365 Roadmap · Read Announcement → Agents and supervisors can use Copilot in the Queues app on Mobile to quickly understand and follow up on customer conversations. From shared call history, users can ask questions about a past call and use Copilot to surface relevant information and insights from the conversat…
-
📆 Microsoft Teams: Shared call history in the Queues app on Mobile — Microsoft 365 Roadmap · Read Announcement → Calling reps and Supervisor leads can view shared call history for their call queues in the Queues app on Mobile, helping them track call activity, review call details, and coordinate customer follow-ups while on the go. GA date: December CY2026
-
📆 Dynamics 365 Commerce: Design POS screen layouts in a modern browser designer — Microsoft 365 Roadmap · Read Announcement → Create and preview POS screen layouts in headquarters with a modern web designer that simplifies configuration and reduces design iterations. The Screen layout designer is modernized as a React-based web experience embedded in Commerce headquarters, with a JSON-based layout ba…
-
📆 Dynamics 365 Project Operations: Support larger invoices in Project Operations — Microsoft 365 Roadmap · Read Announcement → The dual-write asynchronous integration feature in Project Operations enhances the customer invoicing process by enabling scalable and reliable data synchronization between Dataverse and Dynamics 365 Finance. This feature addresses the limitations of real-time dual-write sync,…
-
📆 Dynamics 365 Commerce: Apply bulk actions to multiple transaction lines — Microsoft 365 Roadmap · Read Announcement → Store associates can select multiple eligible transaction lines and apply common updates in one action, including voiding items, changing the delivery mode, and changing the fulfillment location. This capability reduces repetitive work and errors on large orders while preservi…
-
📆 Dynamics 365 Commerce: Design and print A4 and thermal receipts in a modern designer — Microsoft 365 Roadmap · Read Announcement → Applies to : Point of Sale (Store Commerce app, Store Commerce for web), headquarters (Commerce headquarters receipt format designer), Hardware Station, Commerce Scale Unit. Modern designer in headquarters : A new React-based receipt designer is embedded in headquarters under …
-
📆 Dynamics 365 Commerce: Map keyboard shortcuts to common POS operations — Microsoft 365 Roadmap · Read Announcement → Applies to : Point of Sale (Store Commerce); configured in Commerce headquarters. Assign keyboard shortcuts to buttons in the Commerce headquarters button grid designer. Shortcuts are defined on buttons, not directly on operations, and can be applied to any button. Use shortcu…
-
📆 Dynamics 365 Customer Insights - Journeys: Marketing tools, skills and plugin are now available in Copilot Cowork — Microsoft 365 Roadmap · Read Announcement → The Customer Insights plugin brings Dynamics 365 Customer Insights context, actions, and guided workflows to Copilot Cowork. Marketers and other customer-facing teams can understand customer profiles, author brand-compliant content, and prepare consent-aware outreach using exi…
-
📆 Dynamics 365 Commerce: Guide shoppers through an intuitive self-checkout flow — Microsoft 365 Roadmap · Read Announcement → Guide shoppers with clearer self-checkout flows, configurable assistance, and register-specific settings across supported Store Commerce devices. Store Commerce guides shoppers from item entry through payment and completion on Windows, web, iOS, and Android. The experience inc…
-
📆 Dynamics 365 Commerce: Assign functionality profiles to self-checkout registers — Microsoft 365 Roadmap · Read Announcement → This feature lets organizations assign a functionality profile directly to a self-checkout register in Commerce headquarters. The register-specific profile can control device settings, transaction reason codes, receipt numbering, and fiscal defaults for each kiosk. If no profi…
-
📆 Dynamics 365 Commerce: Extend the phone Cart with custom app-bar commands — Microsoft 365 Roadmap · Read Announcement → Add phone Cart commands and configurable sales-line details so Store Commerce extensions work consistently across device sizes. This feature applies to Store Commerce point of sale (POS) and the Commerce headquarters Screen layout designer. Extensions can register Cart command…
-
📆 Dynamics 365 Commerce: Inventory view modernization on the Store Commerce app — Microsoft 365 Roadmap · Read Announcement → Store Commerce inventory screens are being modernized with a new, responsive experience built on Fluent UI and React. The modern inventory views give store associates a consistent look and feel and fewer clicks across everyday inventory tasks, and they extend the modern invent…
-
📆 Dynamics 365 Commerce: Inventory validation and fulfillment options on the Store Commerce transaction grid — Microsoft 365 Roadmap · Read Announcement → When store and trade-counter associates add items to a sale, they need to know right away whether the item can be fulfilled, and if not, what the options are. This feature brings real-time inventory validation and fulfillment options directly into the Store Commerce transactio…
-
📆 Power Apps: Form fill assistance using Microsoft 365 files in model-driven apps — Microsoft 365 Roadmap · Read Announcement → We’re expanding form fill assistance in Power Apps to use Microsoft 365 files as a source, helping users turn existing content into form entries with less manual effort. Availability Field Value Release Channel Monthly Version 2701.1 Applies to Model-driven apps Feature Scope …
✅ Official Updates & Security Advisories
Feature announcements, security blogs, and official releases.
- Fake-download campaign uses trojanized installers to deliver monetization payloads — Microsoft Security Blog · Read Article → Microsoft Threat Intelligence tracks a fake-download campaign that uses trojanized Inno installers to deliver multiple monetization offers and provides detection and investigation guidance across the complete installer session. The post Fake-download campaign uses trojanized i…
🐛 IT SecOps Community Buzz
What IT SecOps teams and sysadmins are discussing today.
- Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit — The Hacker News · View Thread →
Cybersecurity researchers have disclosed details of an OpenAI Codex jailbreak bundle that’s designed to modify an artificial intelligence (AI) agent’s trusted instructions to insert advertisements for a third-party AI…
Generated automatically at November 4, 2026 at 06:24 PM UTC · View all IT SecOps news →