Cybersecurity news for Saturday, November 7, 2026.
The stories were published on Friday, November 6, 2026. Added on Saturday, November 7, 2026.
A Windows Paint flaw has a fix that comes through the Microsoft Store, not Windows Update, The Hacker News reports
Reported by The Hacker News, published Friday, November 6, 2026.
What happened
The Hacker News reports a flaw in Windows Paint, the drawing program on Windows computers. It calls it "a remote code execution flaw", one that could let an attacker run code over a network. The article says Microsoft published the flaw on October 13. It says the flaw was not known to be exploited (used by attackers) or publicly disclosed then. A fix is now available, the article says.
What the article says about how it happened
The article describes an out-of-bounds read. That is a programming mistake where a program reads computer memory it should not. The article says Paint gets the fix only through a Microsoft Store update, not through Windows updates.
Mirax Android malware reportedly spread through streaming-app ads, Cyber Security News reports
Reported by Cyber Security News, published Friday, November 6, 2026.
What happened
Cyber Security News reports on Mirax, a remote access trojan. That is malware that lets criminals control a phone from far away. The article says it lets criminals watch infected phones, intercept security codes and operate banking apps. It says Group-IB researchers identified the campaign in an investigation on November 5. The phones named belong to retail banking customers across the Middle East, Turkey and Africa. The article says the operation "remained active" when the report was published.
What the article says about how it happened
The article says evidence suggests the infection begins in low-reputation streaming apps downloaded from Google Play. It says advertisements and video links then send people to a separate installer, downloaded outside the store. It says Mirax pushes victims to turn on the Accessibility permission, a setting that lets an app read and control the screen. The article then says Mirax uses it to read screen content and control the interface.
For users, Cyber Security News advises rejecting unexpected Accessibility requests from entertainment apps. It also advises avoiding advertised APK downloads (installer files for Android apps). It adds that users should seek removal support when a suspicious app resists uninstallation. The article credits Group-IB's findings for the campaign.
Fake game downloads and cracked software installers turn Windows PCs into money-makers, Cyber Security News reports
Reported by Cyber Security News, published Friday, November 6, 2026. It cites a Microsoft technical report dated Tuesday, November 3, 2026.
What happened
Cyber Security News reports that fake game downloads and cracked software installers are turning Windows PCs into money-making tools for the people behind the campaign. Cracked software is a copy with its paid-for protection removed. The article says the installers are presented as games, cracked apps or utilities. The article says a single installer can attempt several installations.
What the article says about how it happened
The article says the installers "quietly deliver software that shares internet bandwidth." One part routes other people's internet traffic through the affected computers. Another runs distributed-computing workloads. The article says the findings do not establish cryptocurrency mining. Part of Microsoft's advice, as the article gives it, is to stay away from cracked software, unofficial game installers and activation tools.
