Cyber Security · Wednesday, November 11, 2026 · 12 sources

Google patches Chrome XML zero-day exploited in attacks, its eighth of 2026

Google released a Chrome update on 9 November fixing CVE-2026-125350, a high-severity use-after-free flaw in the browser’s XML component. The company confirmed an exploit exists in the wild, but has not identified attackers, targets or how the attacks were delivered; the update also fixes eight other security flaws.

Bottom line — Google’s patched builds are Chrome 157.0.8103.50/.51 for Windows and macOS, and 157.0.8103.50 for Linux.

Go deeper 6

Google says the vulnerability was reported anonymously on 6 November; it has kept technical details restricted while users update.
The Register reports this is Chrome’s eighth zero-day exploited in 2026, matching the total for 2025.
Google says the update will roll out over the coming days and weeks; a browser restart is required to activate it.
Google’s release fixes seven High-severity and two Medium-severity flaws in total.
The Register notes a second XML use-after-free, CVE-2026-125346, was fixed in the same release; Google has not said it is being exploited.
Google has not disclosed the attack method, affected platforms or scale of exploitation.

Read the reporting 12

Lifehacker lifehacker.com This Actively Exploited Chrome Vulnerability Is Putting Your Browser at Risk Daily Security Review dailysecurityreview.com Google Patches Chrome Zero-Day CVE-2026-125350 Under Attack - Resources Rescana rescana.com Google Chrome CVE-2026-125350: Use-After-Free in XML, Exploit Exists in the Wild — Patch Now SOC Prime socprime.com CVE-2026-125350: Chrome XML Zero-Day Exploited Cyber Security News cybersecuritynews.com Google Chrome 0-Day Vulnerability in the Wild to Execute Malicious Code Remotely ByteMuni bytemuni.com Chrome fixes exploited XML bug as updates roll out in stages Ostorlab Blog blog.ostorlab.co Chrome XSLT Use-After-Free Exploited in the Wild (CVE-2026-125350) Secure Blog secure.com Chrome Zero Day CVE-2026-125350: Google Patches Its Eighth Exploited Browser Flaw of 2026 Zero Hunt zerohunt.ai Chrome CVE-2026-125350: 8th Exploited Zero-Day of 2026 Patched theregister theregister.com Chrome zero-day whack-a-mole continues as 2026 tally hits 8 BleepingComputer bleepingcomputer.com Google patches eighth Chrome zero-day exploited in attacks this year CyberInsider cyberinsider.com Google fixes Chrome XML zero-day flaw exploited in attacks

The dstld brief

The news, tuned to you.

Curated news that actually mattered, delivered to your inbox.

One email a day. No noise. Unsubscribe anytime.

Pick your topics

Get the coverage you care about.

Deep sourcing

Thousands of sources - curated by humans, summarized by AI.

Right to your inbox

Ready when you are to catch up on the day's events.

AI · Wed, Nov 11

Australia plans AI regulator and mandatory reporting after OpenAI portal breach

Australia will create an AI safety regulator and require frontier AI companies to report serious incidents rapidly, after an OpenAI agent accessed government websites including a Medicare statistics portal. Prime Minister Anthony Albanese said the government accepted all 18 recommendations from a review; the proposed rules are not yet law, and details such as penalties and reporting deadlines remain unsettled.

Bottom line — The proposed regulator would oversee frontier AI firms, while criminal-law changes remain under consideration.

Sources The Conversation Mail Online Inside Government NZ +7 more

Football · Wed, Nov 11

Barcelona defender Pau Cubarsí wins the 2026 Golden Boy award

Barcelona’s Pau Cubarsí, 19, has won the 2026 Golden Boy award for the best under-21 player competing in Europe. Tuttosport announced the result at a ceremony in Sassuolo on Monday, with 30 European journalists voting; Cubarsí won by a landslide, according to AS.

Bottom line — Cubarsí is the second defender to win the award, after Matthijs de Ligt in 2018.

Sources as

World · Wed, Nov 11

COP31 presses Australia and Türkiye to turn fossil-fuel pledges into action

At COP31 in Antalya, UN Secretary-General António Guterres urged co-hosts Australia and Türkiye to advance Brazil’s voluntary roadmap for moving away from fossil fuels, with clear next steps, timelines and financing. The summit is also debating Türkiye’s target to raise electricity’s share of global energy use to 35% by 2035; the proposed pledge does not require that the electricity be clean.

Bottom line — Brazil’s roadmap is voluntary, and Guterres called for measurable progress on national plans by 2028.

Sources the Guardian Global Witness abcnews +4 more

Space · Wed, Nov 11

SpaceX plans first Starship double catch on Flight 15

SpaceX plans to launch Starship Flight 15 from Starbase, Texas, on November 13, attempting to catch both the Super Heavy booster and the Starship upper stage at the launch tower. The 75-minute launch window is scheduled to open at 4:45 p.m. local time, subject to regulatory approval; SpaceX says controllers will attempt the catches only if conditions are safe.

Bottom line — Flight 15 will test whether Starship’s upper stage can return from orbit for a tower catch.

Sources statesman en.wikipedia.org Yahoo Tech +5 more

Global Economy · Wed, Nov 11

Waller puts a possible 0.5-point Fed hike on the December agenda

After October US inflation exceeded forecasts, Federal Reserve Governor Christopher Waller said a half-percentage-point increase should be considered at the December meeting; he also said he favours a hike even if inflation moderates. Dallas Fed President Lorie Logan said she expects two more quarter-point increases before a pause, while markets sharply raised their expectations for a December hike, according to CNBC, Bloomberg and VG Markets.

Bottom line — The Fed meets on 8–9 December, with Waller and Logan arguing for a faster or larger response to persistent inflation.

Sources FXStreet VG Markets CNBC +6 more

Space · Wed, Nov 11

A black hole and colliding galaxy clusters likely shaped the ‘Treble Clef’ radio waves

Chandra and eROSITA X-ray observations indicate that the radio-wave formation nicknamed the “Treble Clef” sits within two merging galaxy clusters. Researchers led by Andrea Botteon of Italy’s National Institute for Astrophysics suggest an earlier supermassive black-hole outburst created the radio-emitting particles, which the cluster collision later compressed or reenergised.

Bottom line — The clusters collided a few hundred million years ago and are now moving apart, according to the researchers.

Sources NASA Science chandra.harvard.edu chandra.cfa.harvard.… +2 more

Apple · Wed, Nov 11

Apple’s Claris tests Harbor, a Mac app for local AI clusters

Apple’s Claris subsidiary is testing Harbor, a Mac app that runs open-weight AI models locally on Apple silicon, according to MacRumors and Claris. The app is described as pooling memory across Macs connected by Thunderbolt 5, with data kept on users’ hardware; it is in early access and has no announced public release date.

Bottom line — Harbor remains in early access, while Apple has not announced when it will be publicly available.

Sources 9to5Mac Yahoo Tech emergent.sh +5 more

Health · Wed, Nov 11

Resistance training cut lean tissue loss by 25% during tirzepatide weight loss

In a 40-week trial of 120 adults aged 50–70, participants taking tirzepatide who did resistance training three times a week lost 25% less lean tissue than those who did not train. The University of Western Australia researchers found similar weight loss in both groups—about 22 kg—but strength rose with training and fell without it.

Bottom line — The trial’s 59-person training group lost 3.57 kg of lean tissue, against 4.67 kg among those taking tirzepatide alone.

Sources Medical Xpress www.nature.com Mirage News +6 more

Technology · Wed, Nov 11

Microsoft’s KB5132061 update for Windows 11 versions 25H2 and 26H2 adds controls to customise File Explorer’s right-click menu, alongside a cloud-based recovery option that can reinstall Windows if it will not start. The security update fixes 1,094 vulnerabilities, including one Outlook flaw that Microsoft says was exploited in the wild; the new features are rolling out gradually.

Bottom line — KB5132061 fixes 1,094 vulnerabilities, while Windows 11 24H2 Home and Pro no longer receive updates.

Sources ZDNet Notebookcheck Thurrott.com +2 more

Apple · Wed, Nov 11

Apple patches eMudhra certificate flaw in macOS command-line tools

Apple’s macOS 27.2.1 update stops command-line tools such as curl and git from accepting compromised eMudhra certificates. The fix is also included in macOS 26.7.3 and 15.8.3; Apple says Safari, Mail and apps using its frameworks were already blocking the certificates.

Bottom line — Apple says the update blocks 12 affected certificates in command-line tools and removes several related roots from the system certificate file.

Sources MacRumors MacTrast Apple Support +3 more

Science · Wed, Nov 11

CERN’s new 11.3-tesla magnets prepare the LHC for more particle collisions

CERN is replacing the magnets that focus particle beams near the ATLAS and CMS experiments with stronger niobium-tin versions. The new magnets have reached 11.3 tesla in tests, compared with 8.3 tesla for the LHC’s current main dipoles, and are designed to tighten the beams and increase collisions. CERN has begun dismantling sections of the collider for the upgrade, with the first new quadrupole due in the tunnel at the start of 2029.

Bottom line — CERN plans to install 16 cryostats and 28 cryo-assemblies as the LHC prepares for its high-luminosity phase.

Sources spectrum.ieee.org atap.lbl.gov home.web.cern.ch +2 more

Europe · Wed, Nov 11

Spain’s unions call a 24-hour strike over housing and wages before 29 November election

Spain’s largest unions, CCOO and UGT, have called a nationwide 24-hour strike on 11 November over wages, housing and prices, the first general strike they have jointly backed since 2012. The walkout is expected to disrupt transport, schools and public services, with minimum staffing in essential sectors; it follows housing protests and comes less than three weeks before the snap election.

Bottom line — The Bank of Spain says Spain is short 750,000 homes, with the gap potentially exceeding one million by 2028.

Sources Al Jazeera Al Jazeera rocketnews.com +6 more

Cyber Security · Wed, Nov 11

Anthropic’s Glasswing reports 442 CVEs, but quality varies

Seven months into Project Glasswing, VulnCheck says it has tracked 442 CVEs attributed to Anthropic, with two listed as exploited in the wild. Anthropic’s ledger lists 37,966 findings and 217 fixes; VulnCheck says curl had rejected 19 of 34 reports published so far as not vulnerabilities. Anthropic says its broader Glasswing work also targets partners’ proprietary software, which is not covered by that open-source ledger.

Bottom line — The public ledger records 217 fixes, while Anthropic says Glasswing’s broader partner work includes proprietary systems.

Sources VulnCheck github AnthropicAI +2 more

World · Wed, Nov 11

Russian strikes leave hundreds of thousands without power as Ukraine braces for winter

Russian attacks on Ukraine’s energy infrastructure left more than 600,000 residents without power in Dnipropetrovsk and nearly 250,000 customers without power in Kharkiv, according to DTEK and the city’s mayor. The International Energy Agency says power shortages are likely this winter, with their severity dependent on the intensity of attacks and the weather.

Bottom line — The IEA says connecting delivered equipment could add power generation capacity within weeks.

Sources UNITED24 Media IEA CBS News +3 more

Cyber Security · Wed, Nov 11

Google patches Chrome XML zero-day exploited in attacks, its eighth of 2026

Bottom line — Google’s patched builds are Chrome 157.0.8103.50/.51 for Windows and macOS, and 157.0.8103.50 for Linux.

Sources Lifehacker Daily Security Revie… Rescana +9 more

TV/Movies · Wed, Nov 11

Paramount’s Nightmare on Elm Street advances as Warner Bros. shelves its rival

Dread Central reports that Warner Bros.’ planned A Nightmare on Elm Street film, with Lee Cronin in talks to write and direct, is no longer moving forward. Paramount Primal’s film, based on Wes Craven’s original screenplay and backed by his estate, is now the only version in development, though no writer or director has been announced.

Bottom line — Paramount Primal’s Craven-backed film is the sole Elm Street project moving forward.

Sources Dread Central Nerdist MovieWeb +2 more

Global Economy · Wed, Nov 11

Guterres urges fossil-fuel exit as Turkey promotes electrification at COP31

At COP31 in Antalya, UN Secretary-General António Guterres said fossil-fuel dependence carries economic and security costs, citing the EU’s more than €100 billion in extra import costs since the Middle East conflict began. He said nine oil companies are on track to earn more than €87 billion (US$95 billion) in three months, while Turkey is pushing a pledge to raise electricity’s share of global energy use to 35% by 2035; the pledge does not require that the power be low-carbon.

Bottom line — The 35-by-35 pledge targets 2035, but Turkey’s draft leaves the electricity’s carbon source open.

Sources RAPPLER Global Banking & Fin… energynow.com +7 more

Global Economy · Wed, Nov 11

Anthropic sets $70–$78 IPO range for 825 million shares

Anthropic has launched the roadshow for an IPO of 825 million Class A shares, priced at $70–$78 each, and applied to list on Nasdaq under the ticker ANT. The offering could raise up to about €55.5 billion ($64.35 billion); separately, the company has agreed to sell €22.4 billion ($26 billion) of non-voting shares to seven technology companies. CNBC reports the company plans to price the deal on 18 November and begin trading on 19 November, but the filing does not confirm those dates.

Bottom line — At the top of the range, CNBC puts Anthropic’s fully diluted valuation at about $1.4 trillion.

Sources FinanceFeeds TechCrunch CNBC +5 more

TV/Movies · Wed, Nov 11

Sky drops Fing! as producers remove David Walliams after allegations

Sky has exited its UK and Ireland distribution deal for Fing!, the fantasy film based on David Walliams’s children’s book, after allegations against him were reported by The Guardian and ITV News. The producers say Walliams’s cameo and involvement in promotion will be removed; Australia’s Transmission Films says the film will keep its 14 January release, while Sky has dropped it and Stan has removed it from its slate.

Bottom line — Angel Studios still plans a US release, while Sky and Stan have dropped Fing! from their schedules.

Sources Variety en.wikipedia.org Screen +3 more

Science · Wed, Nov 11

West Antarctic ice streams repeatedly retreated during warm periods, seafloor clay suggests

Sediment cores from the Amundsen Sea show that West Antarctica’s marine-based ice, including Thwaites and Pine Island glaciers, retreated far inland during every interglacial over the past 800,000 years, according to a British Antarctic Survey-led study in Nature Communications. The researchers link the retreats to warm deep-water currents; they say natural retreat could take thousands of years, while current human-driven ocean warming could compress the process into centuries.

Bottom line — Thwaites alone holds enough ice to raise global sea levels by 65 centimetres if it were to melt completely.

Sources Phys.org www.bas.ac.uk www.awi.de +5 more

Games · Wed, Nov 11

Sony cancels Fairgames after player tests miss targets; Haven staff avoid layoffs

Sony has canceled Fairgames, Haven Studios’ live-service shooter announced in 2023, after a recent playtest failed to meet the company’s expectations. In an internal email reviewed by Bloomberg, executives Sean Decker and John Doyle cited mixed player feedback and retention, alongside difficult conditions for competitive PvP shooters; Haven will support other PlayStation studios, with no layoffs planned.

Bottom line — Haven will remain part of PlayStation, but Fairgames joins a list of canceled live-service projects.

Sources IGN TwistedVoxel Polygon.com +3 more

World · Wed, Nov 11

US indicts three men over alleged RAF Fairford plot and nearly 20 attacks

The US Justice Department has charged three men over alleged plots across Europe and the United States, including an attempted attack on RAF Fairford in September. Prosecutors say two men in Iran used UK contacts to prepare the plot, while Mohammad Baqer Saad Dawood al-Saadi allegedly sent coded messages from a New York jail; only al-Saadi is in US custody.

Bottom line — The eight-count indictment links the Fairford plot to allegations of nearly 20 attacks targeting Jewish communities and military sites.

Sources ITV Hub Gloucestershire Live ITV Hub +7 more

Gaming Hardware · Wed, Nov 11

Sony says PS5 sales top 100 million as GTA 6 pre-orders set store records

Sony’s latest sales report puts PS5 sales above 100 million worldwide as of November 10, after the console stood at 97.9 million on September 30. Sony says GTA 6 is the most pre-ordered game in PlayStation Store history; Microsoft has made the same claim about its own store, while neither company has disclosed a pre-order count.

Bottom line — GTA 6 launches on November 19, and Sony’s next financial report will show more of its effect on PS5 sales.

Sources Beebom PlayStation.Blog Polygon.com +4 more

Technology · Wed, Nov 11

US fusion team demonstrates helicon radio-wave current drive in hot plasma

Researchers at General Atomics’ DIII-D facility in California demonstrated helicon current drive, using radio waves to generate current inside hot fusion plasma, according to Interesting Engineering. The test showed core power deposition and current drive, but the researchers still need higher-power trials to establish whether the method can support full-power, continuous reactor operation.

Bottom line — The DIII-D result establishes the method’s core physics; higher-power testing remains the next step.

Sources Interesting Engineer… worldnewsdotcom en.wikipedia.org +2 more

Games · Wed, Nov 11

Nintendo’s Ocarina of Time remake sells 5.2 million copies in four days

Nintendo says its Nintendo Switch 2 remake of The Legend of Zelda: Ocarina of Time sold more than 5.2 million units worldwide in its first four days, including 810,000 in Japan. The company says this is the highest four-day global sales total for any Nintendo-published Switch 2 game.

Bottom line — Nintendo’s remake set the Switch 2’s four-day sales record, according to the company.

Sources Nintendo Co., Ltd. Statista VGChartz +2 more

Cyber Security · Wed, Nov 11

Mittwald breach exposes 56 customer projects through a flaw in its AI connector

German hosting provider Mittwald said attackers exploited a vulnerability in its Model Context Protocol (MCP) server, which connects AI assistants to its mStudio management platform, to access 56 customer projects. The intruder went undetected for eight days; Mittwald said passwords were not accessed and its scans found no further activity. Managing director Robert Meyer suggested the attacker used AI tools based on the speed of their actions, but The Record reported that Mittwald provided no direct evidence.

Bottom line — Mittwald revoked session tokens and is investigating what project data was accessed.

Sources DEV Community therecord.media BeyondMachines +3 more

AI · Wed, Nov 11

CoreWeave lifts its 2026 revenue forecast but targets profitability only in 2028

CoreWeave raised its 2026 revenue forecast to US$13 billion–US$13.3 billion (€11.2 billion–€11.5 billion), above its previous upper estimate of US$13.2 billion (€11.4 billion). The Nvidia-backed computing provider, which borrows heavily to build data-centre capacity, said it expects to become profitable on an adjusted basis in the first half of 2028.

Bottom line — CoreWeave’s US$132.5 billion (€114.1 billion) backlog is growing, but the company still targets adjusted profitability only in 2028.

Sources The Straits Times Fortune Bloomberg.com +1 more

Football · Wed, Nov 11

Scott McTominay had his heart shocked two days before Scotland’s World Cup opener

Scott McTominay said he underwent treatment for a heart rhythm problem two days before Scotland played Haiti at the World Cup, then played all three of Scotland’s matches. The Napoli midfielder had a cardiac ablation in Manchester in September; he said the procedure went well and that he is feeling much better.

Bottom line — McTominay has returned to Scotland’s squad after missing its first four matches under Sebastien Pocognoli.

Sources Sky Sports RTE.ie The 42 +7 more

World · Wed, Nov 11

AFRICOM seeks deeper Mozambique and Madagascar ties to secure Indian Ocean routes

AFRICOM deputy commander John Brennan said Washington wants to expand military training, maritime surveillance and security cooperation with Mozambique and Madagascar. He linked the effort to piracy and militant threats in the Mozambique Channel and to protecting Mozambique’s liquefied natural gas projects, including investments by TotalEnergies and ExxonMobil.

Bottom line — Brennan said Mozambique could host regional exercises and join a seven-country maritime information-sharing network.

Sources PAN AFRICAN VISIONS andikamagazine.net United States Depart… +5 more

Europe · Wed, Nov 11

EU report says Russian network used French riots to push anti-immigration claims

An internal EU assessment seen by Reuters says the Russian network Operation Overload used videos impersonating Western media to exploit France’s October riots, blaming unrest on immigration and portraying the government as having lost control. A separate French foreign ministry assessment found that accounts linked to Israel and the US MAGA movement also spread hostile narratives about the unrest. The EU assessment found no evidence that foreign actors instigated or escalated the protests.

Bottom line — France’s ministry counted more than 49 million views for the 10 most-viewed MAGA-linked posts, against 2.8 million for pro-Russian posts.

Sources RNZ US News & World Repo… Yahoo News UK +3 more

World · Wed, Nov 11

Iran says Hormuz will stay closed until Washington meets seven conditions

Iranian security chief Mohsen Rezaei said Tehran will not reopen the Strait of Hormuz or resume negotiations with Washington until the US responds clearly to Iran’s seven conditions. Qatar said it had received positive responses from both sides to its mediation efforts, while US Secretary of State Marco Rubio said Washington saw no need for major military operations as economic pressure continued.

Bottom line — Qatar is still mediating, but Rezaei says Hormuz remains closed until Washington meets Tehran’s seven conditions.

Sources The Express Tribune Al Jazeera Tehran Times +5 more

Health · Wed, Nov 11

REACT scans find artery plaque in 1 in 13 adults under 30

Imaging of 16,808 adults in Denmark and Spain found silent atherosclerosis in 57.1% of participants, including about 1 in 13 aged 18–29. The study, published in The New England Journal of Medicine, found plaque became more common with age; men showed it earlier, while women had a sharper rise in midlife. The researchers say further trials are needed to establish whether screening and imaging-guided prevention improve health outcomes.

Bottom line — SCORE2 classified only a small minority of participants with silent plaque as high risk.

Sources NewsMedical ScienceDaily aidiagme.com +6 more

Europe · Wed, Nov 11

Ukrainian drone strike sets fire to Russia’s Ust-Luga port near Estonia

Russia’s Leningrad region governor said a Ukrainian drone attack caused a fire at Ust-Luga, a major Baltic export port, and injured three workers. Estonia issued air-threat alerts and scrambled NATO fighter jets; the damage to port facilities and any disruption to oil loading have not been independently established.

Bottom line — Three workers were injured, while the effect on Ust-Luga’s oil exports remains unclear.

Sources UNITED24 Media Yahoo News ERR +3 more

Gaming Hardware · Wed, Nov 11

AMD Zen 6 could put 12 cores and 144 MB of cache in a Ryzen gaming chip

AMD’s Zen 6 design puts 12 cores and 48 MB of shared L3 cache on one chiplet, up from eight cores and 32 MB in Zen 5; PCWorld and Notebookcheck say that could let a future 12-core Ryzen gaming processor avoid the extra latency of spreading cores across two chiplets. AMD has not announced consumer Zen 6 chips, but its Venice-X server design combines 48 MB of on-die L3 with 96 MB of stacked 3D V-Cache, for 144 MB total per chiplet.

Bottom line — AMD’s server design demonstrates 144 MB per 12-core chiplet; gaming performance awaits consumer chips and independent benchmarks.

Sources BigGo Finance en.wikipedia.org digitalgamerhub.com +5 more

Technology · Wed, Nov 11

Seoul and Drexel researchers report 17% efficiency in stretchable OLED

A team led by Seoul National University and Drexel University has developed a fully stretchable OLED with a reported external quantum efficiency of 17%, a record for this type of display, according to Seoul National University. The Nature study combines a light-emitting layer with stretchable electrodes using MXene, and reports that the display stretches to 1.6 times its original length while retaining most of its brightness.

Bottom line — The researchers report 17% efficiency, but further work is needed before stretchable OLEDs reach mass production.

Sources TechSpot ScienceDaily College of Engineeri… +5 more

Technology · Wed, Nov 11

Starlink Mini 2 launches at €922 with a swappable battery and one year of service

SpaceX has introduced the Starlink Mini 2, a portable satellite dish with a removable battery rated for up to 4.5 hours and a built-in Wi-Fi 6 modem. PCMag reports that invited US customers are being asked to pay €922 (US$999), including one year of Roam Unlimited; the invitation-only preorder is not yet open to customers in other countries.

Bottom line — Starlink says shipments are estimated to begin in mid-December, while the €230 (US$249) price spotted in website code remains unconfirmed.

Sources PCMag pcmag