November 2026 News & Updates

Signature: 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

CTC News

  • MyIT just evolved, again – As targeted threats against organizations, endpoints and identities continue to evolve, so has the MyIT Program and today I’m excited to announce that we’ve partnered with Huntress to bring managed EDR and ITDR into the MyIT program. Additional information on Huntress and how we’re integrating it into the MyIT Program is available here.
  • 2026 Holiday Schedule
    • Thanksgiving – We will be closed on Thursday, 26 November and Friday, 27 November 2026 for the holiday and will reopen during normal business hours on Monday, 30 November 2026.
    • Christmas – We will be closed on Thursday, 24 December and Friday, 25 December 2026 for the Christmas holiday and will reopen during normal business hours on Monday, 28 December 2026
    • New Year – We will be closed on Thursday, 31 December and Friday, 1 January 2027 for the holiday and will reopen during normal business hours on Monday, 4 January 2027.

Industry News

  • N-able Takes N-central Offline After 33 Zero-Day Disclosures – On November 9, N-able took its hosted N-central platform completely offline after security researcher Sean Bales publicly disclosed 33 zero-day vulnerabilities with proof-of-concept exploit code. The flaws include unauthenticated XXE injection chains that lead to remote code execution and root privilege escalation. N-able urged on-premises customers to shut down their servers until patches are validated. If your MSP or internal IT uses N-central for remote monitoring, this affects you directly.
  • Google Patches Actively Exploited Chrome Zero-Day – Google confirmed on November 9 that CVE-2026-125350, a use-after-free vulnerability in Chrome’s XML component, is being actively exploited in the wild. The flaw can lead to data corruption, crashes, or arbitrary code execution. Google released patched builds for Windows, macOS, and Linux the same day. If your organization runs managed Chrome or Chromium-based Edge deployments, verify updates are applied.
  • FortiGate 60E End of Life — December 29, 2026 – Fortinet has set December 29, 2026 as the End of Life date for the FortiGate 60E series. After that date, Fortinet will no longer provide firmware updates, security patches, or technical support for these units. If you are still running a 60E, now is the time to plan a replacement — demand for the successor models (60F/61F/90G) has already created backorders and availability is tightening. Contact us if you need help sizing a replacement or want to get ahead of the holiday crunch.
  • Upcoming End of Life for Windows Server 2016 – Extended support ends January 12, 2027, just over two months away. If you’re still running Server 2016 on era appropriate hardware, realistically you’re not going to have new hardware provisioned, migrated, and tested before the holidays — and that’s manageable, as long as you have a plan. The immediate priority is risk mitigation: inventory what workloads are still on Server 2016, determine which are internet-facing or hold sensitive data, and decide whether to isolate, decommission, or purchase Extended Security Updates through Azure Arc for the systems that can’t move yet. Getting the project on the calendar now is what matters. If you need help auditing what you have or building a transition timeline, let us know.

Updates

MicrosoftMicrosoft released between 1,093 and 1,235 updates (depending on the source) in their November 2026 Patch Tuesday release. In that release, 63 are rated critical, 1,029 are important and 1 is listed as moderate and attack vectors include 22 Spoofing, 27 Security Feature Bypass, 46 Denial of Service, 142 in Microsoft Edge / Chromium, 157 Information Disclosure, 296 Remote Code Execution and 536 Elevation of Privilege with 636 specifically affecting Windows products and / or components and at least one zero day CVE-2026-124194, a spoofing vulnerability in Outlook. Tenable has a really good breakdown of what’s getting the most attention, showing that Word (65 CVEs), Excel (64 CVEs) and SQL Server (53 CVEs).

Microsoft releases regular updates the second Tuesday of each month, often referred to as ‘Patch Tuesday’. These updates are categorized as Low, Moderate, Important or Critical. Details on the categories are available here. The updates can include any supported Microsoft product from Windows to Office to Internet Explorer and server products like Exchange and SQL Server. If you have one or more of these products installed, especially if the update is listed as Important or Critical, it’s important that the updates are installed.

Additional details on this month’s Microsoft updates are available from Bleeping Computer, Tenable.

Adobe has moved their security updates from their Security Bulletin page to the new Adobe Trust Center and, according to that page, released nine updates on 10 November including two Priority 2 (act within 30 days) and seven Priority 3 (act at your admin’s discretion) .

Like Microsoft, Adobe now releases updates to their products on the second Tuesday of each month. Adobe will also release ‘out of band’ updates if necessary to address critical vulnerabilities in their products. Adobe products include Adobe Reader (for viewing PDF files), the Adobe Creative Suite (Photoshop, Illustrator, Acrobat, Lightroom, etc.), and the Adobe Experience Cloud. Additional details are available from Adobe Here including links to download the update(s) and instructions for installation.

Additional details are available from Adobe Here including links to download the update(s) and instructions for installation.

Need IT Support for your Home or Business? We’d love to help!

Are you a small to medium sized business looking to leverage technology and enable your business and workforce to work smarter and more efficiently? Do you already have computers, servers, firewalls, VPNs or other technology that you’re not taking full advantage of? Are you looking for an IT Service Provider who understands small to medium sized businesses needs and the challenges that we face that can work with you to grow your business rather than just sell you time?

Cyber Tech Cafe is an IT Service Company with a focus on helping small to medium business get the most out of their technology investment. As a small business ourselves, we understand the challenges you face and have designed our service offerings to help you get the most out of your technology dollar. We offer on-call, as needed support if you just need a quick fix or extra set of hands right now. We also offer maintenance plans that we call “MyIT” that are designed to address the most common concerns (patch management, disaster recovery / backup, log review, etc.) that are based on the number of workstations and servers that you have and have no term contract. We believe that, if you find value in what we’re doing, you’ll find a way to keep us around without a contract saying that you have to.

If you have questions about the MyIT plans or have an IT need that you need addressed right now, let us know. We look forward to the opportunity to earn your business.

Article Submitted by Nathan J. Underwood, CEH