Tech news today, 14 November 2026
IT, cloud, AI model and device updates from official sources on 14 November 2026. Each item links to its source.
Cursor confirms security breach led to malicious Claude Code extension
Cursor confirmed it suffered a security breach that let hackers distribute a malicious Claude Code extension through its marketplace after stealing credentials from AI infrastructure provider Fireworks AI. [...]
Reported by BleepingComputer; not yet confirmed on an official page.
Uber drivers' information stolen in a third-party hack
Uber sends warning to drivers whose information was stolen in a data breach.
Reported by Engadget; not yet confirmed on an official page.
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection
Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a high-severity security flaw impacting UnrealIRCd, an open-source Internet Relay Chat (IRC) server, to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation.
Reported by The Hacker News; not yet confirmed on an official page.
Samsung Galaxy A18 4G launched in Singapore, but with a different chip
The Samsung Galaxy A18 4G, unveiled in Europe in September, has debuted in Singapore, but with a different chip under the hood.
The Galaxy A18 4G available in Europe is powered by Samsung's Exynos 1610 SoC, while the Singapore model uses MediaTek's Helio G99+ SoC.
Reported by GSMArena news; not yet confirmed on an official page.
Users may be unable to access or perform several actions in Microsoft 365 services
Users may have been unable to access or perform several actions in Microsoft 365 services.
The issue started November 12, 2026, at 10:05 AM UTC and ended November 13, 2026, at 4:10 PM UTC.
Microsoft confirmed that services in the previously affected environments have fully recovered and the email backlog has been processed.
MC1461529: Release Planner Retirement: D365, Power Platform, and Dataverse Move to AI at Work
Microsoft has retired Release Planner.
Starting this fall, Dynamics 365, Power Platform, and Dataverse roadmap content moves to the AI at Work roadmap.
A new Learn page provides product availability for Dynamics 365, Power Platform, and Copilot Studio.
MC1552394: Microsoft Viva Engage: Retirement of Teams town hall event creation
Starting December 7, 2026, users cannot create Teams town hall events from Viva Engage. Previously scheduled events will continue.
Organizers must use the new Events experience in Viva Engage or Microsoft Teams.
Organizations should inform teams and update documentation before December 7, 2026.
Upcoming deprecation of selected GitHub Copilot models in December
GitHub will deprecate selected GitHub Copilot models on December 14, 2026.
The deprecation applies across all GitHub Copilot experiences, including Copilot Chat, inline edits, ask and agent modes, and code completions.
Teams that rely on the affected models should plan for the change before that date.
Retirement: Azure Data Share will be retired on November 12, 2029
Azure Data Share will retire on November 12, 2029.
Microsoft recommends moving data sharing workloads to Microsoft Fabric before that date, which offers External data sharing and Cross tenant delegated shortcuts.
Trezor confirms crypto-stealing implants in three wallets, releases fix
Reported by BleepingComputer: Trezor confirmed that three Safe 5 devices sold by Southeast Asian reseller CryptoBilis contained malicious hardware implants.
The implants were designed to steal wallet recovery phrases and send them to attackers over cellular networks.
Trezor released a fix.
GitHub Enterprise Server support in the GitHub Copilot app
GitHub Enterprise Server (GHES) work can now be used in the GitHub Copilot app.
Users can add a GHES account to work with remote repositories, issues, and pull requests.
Gemini 4 Hydrogen in GitHub Copilot
Gemini 4 Hydrogen, Google's latest Flash model, is now generally available in GitHub Copilot.
The model is designed for fast, efficient agentic coding, tool use, and multistep workflows.
Developers and IT teams managing GitHub Copilot can evaluate the model for agentic coding tasks.
MC1551898: Out-of-band update released to address Windows licensing and activation errors
Microsoft released an out-of-band Windows update on November 13, 2026, to address Windows licensing and activation errors.
The issue affects a limited number of enterprise devices after the November 2026 Windows security update is installed.
Certain SLMGR licensing and activation operations might fail with error 0x80041008 (Invalid parameter), mainly for organizations using slmgr.vbs commands or automated processes.
MC1551897: 60-Day Reminder: Windows 10 Enterprise LTSC 2021 will reach end of updates on January 13, 2027
On January 13, 2027, Windows 10 Enterprise LTSC 2021 reaches the end of mainstream support.
The January 2027 Windows security update is the last update provided during mainstream support.
After that date, monthly security updates continue only for devices enrolled in Extended Security Updates (ESU). Microsoft recommends updating to the latest Long-Term Servicing Channel release.
MC1551896: 60-Day Reminder: Windows Server 2016 reaches the end of extended support on January 13, 2027
On January 13, 2027, all editions of Windows Server 2016 reach the end of extended support.
The January 2027 Windows security update is the last update provided during extended support. After that date, monthly security updates continue only for devices enrolled in ESU.
Support for Windows Server 2016 Essentials features, including Remote Web Access, also ends on January 13, 2027.
Announcing new builds for 13 November 2026
Microsoft released new Windows 11 Insider Preview builds to the Beta (26H1), Experimental (26H1), and Experimental (Future Platforms) channels only.
Microsoft said it will provide updates on the regular Beta and Experimental channels.
IT teams testing Windows Insider builds should note which channels received this release.
Connect Google Wallet to Gemini for personal finance insights
Google added the ability to connect Google Wallet to the Gemini app.
All Gemini app users in the U.S. can connect Google Wallet to get responses informed by their spending habits.
New AI agent observability and governance across BigQuery and Looker
Google Cloud announced expanded AI agent observability and evaluation capabilities across Google Data Cloud.
The capabilities cover first-party data agents in BigQuery and Looker and custom third-party agents built with Agent Development Kit (ADK) or LangGraph.
Data and platform teams can see how agents reason, which data they touch, and what they cost to run.
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE
A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server.
Reported by The Hacker News; not yet confirmed on an official page.
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper
Vulnerable Check Point Security Gateway instances have been targeted in PHP2Shell attacks that deployed data-wiping malware on VMware ESXi hosts. [...]
Reported by BleepingComputer; not yet confirmed on an official page.
Aurora PostgreSQL with express configuration now supported in CloudFormation
Aurora PostgreSQL now supports express configuration in AWS CloudFormation.
The new withExpressConfiguration createOnly property on the AWS::RDS::DBCluster resource creates the cluster and its primary database instance from one property declaration.
Teams using infrastructure as code do not need to model or manage the instance separately in their templates.
New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs
Two attacks made public this week allow a malicious host to read data inside AMD SEV-SNP-protected virtual machines (VMs), which are built to keep the server's operator out.
Reported by The Hacker News; not yet confirmed on an official page.
Introducing ChatGPT Wallet
OpenAI introduced ChatGPT Wallet, which lets agents in ChatGPT Work, Codex, and dots complete purchases.
Purchases require user approval and are covered by existing card protections.
Business users planning to use agent-driven purchasing can review how approvals and card protections apply.
Uber confirms hackers stole thousands of drivers’ license information in data breach
The ridesharing giant said drivers' license information stored by AI cloud company Fireworks AI was stolen during a security incident.
Reported by TechCrunch; not yet confirmed on an official page.
FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls
Federal Bureau of Investigation (FBI) has established that threat actors tied to the Democratic People's Republic of Korea (DPRK aka North Korea) have stolen more than $400 million worth of cryptocurrency as part of a social engineering scheme codenamed FaceStealer in the last 18 months.
Reported by The Hacker News; not yet confirmed on an official page.
Introducing Spend Management: Spending limits and alerts for Cloudflare
Cloudflare introduced Spend Management, which adds opt-in spending caps for Cloudflare Workers and Durable Objects.
Cloudflare said more products will be supported soon.
Apple HomeView available today
Customers can now purchase Apple HomeView.
Apple describes HomeView as a way to enjoy entertainment, stay connected, and manage the home.
Grok 4.7 now available on Kiro in AWS GovCloud (US)
Grok 4.7 is now available in the Kiro IDE and CLI for the AWS GovCloud (US) Regions, with experimental support.
The model has a 500K context window. Requests up to 200K tokens use a 2.7x credit multiplier, and requests over 200K tokens are billed at 5.4x.
Kiro administrators control which models their users can access, so organizations can align model access with internal policies.
Manage AI Scan for repositories using the REST API
GitHub added REST API support to turn AI Scan for repositories on or off in code scanning.
The control is available at the organization and repository levels and is in public preview.
SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users
A newly identified spying group used hacked equipment inside Asian mobile operators to intercept the calls and texts of selected people, mostly in Taiwan.
Enea, a telecom and cybersecurity software company based in Stockholm, found the group's attack sources in at least six Asian countries and named it SilentAir this week.
Reported by The Hacker News; not yet confirmed on an official page.
Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins
The Hacker News: Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins.
Reported by The Hacker News; not yet confirmed on an official page.
Check Point warns of zero-day flaw exploited for root access
Check Point Software has released emergency hotfixes to address a high-severity flaw that hackers have been exploiting to gain root privileges and establish persistence on vulnerable devices since late October. [...]
Reported by BleepingComputer; not yet confirmed on an official page.
AWS Security Hub CSPM now supports centralized configuration with AWS Organizations declarative policies
AWS Security Hub CSPM now supports AWS Organizations declarative policies.
The policies can enable Security Hub CSPM across all accounts and Regions and define which security standards and controls are enabled.
Policies can apply automatically to new accounts and help keep each account's configuration aligned with its attached policy.
Amazon Bedrock AgentCore Identity now supports OAuth 2.0 discovery URLs
Amazon Bedrock AgentCore Identity now supports OAuth 2.0 authorization server discovery URLs for inbound JWT authorization and outbound OAuth credential providers.
Previously, AgentCore Identity accepted only OIDC discovery URLs.
Authorization servers that implement OAuth 2.0 without OIDC can now be used with AgentCore.
AWS Secrets Manager now supports cross-account replication
AWS Secrets Manager now supports cross-account replication of a primary secret into a secondary AWS account.
The replica is a full, independent resource encrypted with a customer managed KMS key owned by the replica account, with no shared KMS keys or cross-account secret policies required.
Platform or security teams can rotate a secret centrally while each consuming account keeps a local, current copy.
Amazon SageMaker Unified Studio now supports layout customization for designations
Amazon SageMaker Unified Studio now supports layout customization for designations.
Domain administrators can set which tools and left navigation items project members see based on their designation, and the layout applies across every project in the domain.
Previously, all project members saw the same interface regardless of their role.
How this page is made
Every hour an automated scan reads the official newsrooms, blogs, changelogs and status pages of software, cloud, AI and device makers. Each new item gets two to four short lines written only from the official text, with a link to the source and the time it was published. Items seen only on a news site are marked “reported”. Big launches, outages and retirements also get a full step-by-step guide, linked from the item. Read more in the editorial policy.