Mid-Week Intel: DarkWatch Alerts and Critical Patches You Need
It's Wednesday, 11 November 2026, and we're back with your mid-week intel roundup. DarkWatch is tracking over 200,000 captures and more than 3,400 alerts. One recent capture shows a new ransomware-as-a-service operation starting up. This means someone is renting out ransomware tools to others. For households, the best defence is to keep your backups offline or in the cloud with two-factor authentication enabled. That way, even if your device is compromised, you can recover your important files.
In patch news, Microsoft has fixed nearly 1,100 security vulnerabilities in its latest update. That's a big number, but the action is simple: make sure your devices are set to update automatically, or check for updates manually today. A few minutes now can prevent a lot of trouble later.
Developers should also note that Git has patched a flaw that could let malicious repositories run code during recursive clones. If you work with code, update your Git client.
There's also a report of a remote code execution flaw in SGLang, an AI tool, which was exploited to breach NEAR AI and steal data from 18 agents and about 100 users. While most of us don't run such systems, it's a reminder that any online service needs regular patching.
Finally, hackers are exploiting a critical authentication bypass in Xen Orchestra to gain admin access. This is mainly a concern for businesses using virtual machines. If you're a small business owner, ensure your IT team is aware and applies the fix promptly.
Our one actionable takeaway today: take five minutes to check for updates on all your devices and turn on automatic updates if they're not already on. It's the easiest way to stay safe online.
Stay tuned for more tomorrow.
Related reading