This Sunday’s threat summary is led by Microsoft’s November Patch Tuesday release, which includes a patch for a zero-day vulnerability already under active exploitation. We are also tracking significant security incidents, including a reported data breach at Logitech resulting from another zero-day attack and serious allegations regarding Coinbase’s breach disclosure timeline. Stay informed on these critical developments and other emerging threats.
Top 3 Critical Security Alerts
- Microsoft Patch Tuesday, November 2025 Edition: Microsoft’s November patches address over 60 flaws, including a zero-day vulnerability that is confirmed to be under active exploitation across all Windows versions. Read more
- Logitech leaks data after zero-day attack: Tech peripheral giant Logitech has reportedly suffered a significant data leak following a zero-day attack on its systems. Read more
- I have recordings proving Coinbase knew about breach months before disclosure: A researcher alleges that cryptocurrency exchange Coinbase was aware of a major security breach for months before notifying the public. Read more
Threat Intelligence
- Finger.exe & ClickFix, (Sun, Nov 16th): The SANS Internet Storm Center reports that the legacy finger.exe command is being utilized in recent ‘ClickFix’ attacks. Read more
- Browser fingerprinting via favicon — A novel tracking technique has emerged that leverages website favicons to create persistent fingerprints of users’ browsers for tracking purposes. Read more
Security Breaches & Incidents
- Logitech leaks data after zero-day attack: Tech peripheral giant Logitech has reportedly suffered a significant data leak following a zero-day attack on its systems. Read more
- I have recordings proving Coinbase knew about breach months before disclosure: A researcher alleges that cryptocurrency exchange Coinbase was aware of a major security breach for months before notifying the public. Read more
Security Tools & Best Practices
- Google to flag Android apps with excessive battery use on the Play Store: Google will now identify and flag Android applications in the Play Store that cause excessive battery drain due to high background activity. Read more
Emerging Security Technologies
- DeepEyesV2 outperforms bigger rivals by favoring tools over sheer knowledge: Researchers in China have developed DeepEyesV2, a multimodal AI that intelligently uses external tools to enhance performance and analytical capabilities. Read more
