Cybersecurity news for Tuesday, November 10, 2026.
The stories were published on Tuesday, November 10, 2026 and Monday, November 9, 2026. Added on Tuesday, November 10, 2026.
Google reportedly updates Chrome to fix an exploited flaw, The Hacker News and SecurityWeek report
Reported by The Hacker News and SecurityWeek, both published Tuesday, November 10, 2026.
What happened
Both outlets report that Google released a Chrome update that fixes a flaw already used in attacks. They describe a high-severity bug in Chrome's XML component, reported anonymously on November 6. Both count it as the eighth Chrome flaw exploited in attacks this year. The Hacker News says Google released updates for nine flaws on Monday. Both say Google has shared no details about the attacks.
What the reports say about how it happened
Both outlets say the flaw is a use-after-free bug inside Chrome's XML component. The Hacker News says Google may keep bug details restricted until most users have updated. Both say the fixed versions are 157.0.8103.50 or .51 for Windows and Mac, and 157.0.8103.50 for Linux. The Hacker News advises updating Chrome: open More, then Help, then About Google Chrome, and choose Relaunch. It says users of other Chromium-based browsers should apply fixes when they become available. SecurityWeek gives no explicit advice.
Apple reportedly fixes iMessage group chat and Bluetooth pairing flaws, The Hacker News reports
Reported by The Hacker News, published Tuesday, November 10, 2026.
What happened
The Hacker News reports that Apple has patched flaws in iMessage group chats and in Bluetooth pairing. It says one iMessage flaw might let a remote attacker slip into a group chat and see its messages. It says another might let someone added to a group read messages sent before they joined. It says two Bluetooth flaws might let a harmful Bluetooth device, or an attacker nearby, pair with a device without user interaction.
What the article says about how it happened
The Hacker News says Apple describes the group chat flaw as an authorization issue, fixed with improved validation. It says Apple's notes leave open whether either flaw has been used in attacks. It says other updates, for older iPhones, do not list either fix. The article gives no advice, and we pass none on.
Revolve reports a data breach affecting about 1.5 million people, SecurityWeek reports
Reported by SecurityWeek, published Monday, November 9, 2026.
What happened
SecurityWeek describes Revolve as an online fashion retailer. It says Revolve told Indiana's Attorney General's Office that 1,515,073 people were affected. It says the attack hit on September 11, Revolve learned of it on September 29, and disclosed it on October 29. SecurityWeek says the stolen data included names, mailing addresses, and card numbers and expiration dates. It says only shoppers who had stored a payment method in their accounts are affected.
What the article says about how it happened
SecurityWeek says Revolve has yet to explain how the hackers got in. It says the intruder may have used "automated means" to collect customer data. It says no hacker group has claimed the attack. It says Revolve told federal law enforcement and hired outside cybersecurity help. The article gives no advice for affected people, and we pass none on.
