Good morning. Fixed kernels for the Linux TCP bug we listed yesterday are arriving from Red Hat and AWS, with Ubuntu’s in testing, and every one needs a reboot. TeamViewer fixed a bug that lets the computer you support attack yours, Google’s November Android update fixes a no-tap flaw, and Shadowserver counts more than 1,000 GitLab servers still open to the exploited bug we covered Friday.
Lead Story
Red Hat and AWS have fixed kernels for the Linux TCP bug that can give an outsider root, and Ubuntu’s are in testing. Plan the reboots →
Also Worth Your Attention
A TeamViewer bug lets a hacked customer computer take over the technician’s machine during a support session. Get to 15.83 →
Don’t Miss the Policy Changes That Affect Security Decisions
Get the key CISA actions, new regulations, guidance, and risk shifts in a quick daily brief.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Google’s November Android update fixes a Framework flaw that needs no tap from the phone’s owner. Check the patch level →
More than 1,000 GitLab servers are still open to the exploited CI/CD bug we flagged on Friday. Upgrade, then update Runner →
Also on the radar: CISA’s deadlines for the exploited Plex Media Server flaws (CVE-2026-96652, CVE-2026-96655) and the Siemens Software Center flaw (CVE-2026-110936) fall today (KEV catalog). Electrum 4.8.3 fixes a bug that let a malicious server trick users into paying an attacker through a fee bump; the maintainers know of two users hit, one of whom lost funds (GitHub advisory). Langflow has fixes for critical flaws that let attackers with no login run code on its servers (The Hacker News).
Patching Linux by hand this week? Our GSEC exam guide walks through the Linux hardening and patch basics that make a kernel week routine.
Source: Red Hat bulletin; Ubuntu status; TeamViewer bulletin; Android bulletin; BleepingComputer on GitLab
Slack paste: Linux: install the fixed kernel and reboot, internet-facing first, nftables IP-options rule until then; TeamViewer clients, Portable and Android app to 15.83; Android fleet to patch level 2026-11-05; GitLab to 19.5.3 (or branch equivalent) and Runner to 19.5.1.
Go Deeper
- Cybersecurity tools for patch tracking and server checks
- Identity and access management: remote access and technician accounts
Get this in your inbox every weekday morning: subscribe to the Daily Brief.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.
