https://technewsexplained.com/en/ What happened in tech, and why it matters en Sun, 08 Nov 2026 10:00:00 GMT https://technewsexplained.com/en/guides/how-to-disable-ssh-password-login-use-keys/ https://technewsexplained.com/en/guides/how-to-disable-ssh-password-login-use-keys/ Sun, 08 Nov 2026 10:00:00 GMT Guides Logging in to a server with an SSH key instead of a password blocks password guessing and flaws like this week's OpenSSH bypass on Alpine. Here is how to create a key, test it, switch passwords off without locking yourself out, and check that the change worked. https://technewsexplained.com/en/ai/openai-images-2-6-gifs-flare-sunburst/ https://technewsexplained.com/en/ai/openai-images-2-6-gifs-flare-sunburst/ Sun, 08 Nov 2026 09:00:00 GMT Artificial Intelligence OpenAI released Images 2.6 on November 4 in ChatGPT, Codex and the API. It can make animated GIFs, generates images 50% faster according to OpenAI and adds SVG export to the API, where it comes as two models, Flare and Sunburst. Three older image models stop working on December 1. https://technewsexplained.com/en/technology/tablet-shipments-fall-23-percent-q3-2026/ https://technewsexplained.com/en/technology/tablet-shipments-fall-23-percent-q3-2026/ Sun, 08 Nov 2026 08:30:00 GMT Technology Manufacturers shipped 32 million tablets worldwide in the third quarter of 2026, 23% fewer than a year earlier, according to the research firm Omdia. Apple and Samsung fell sharply, Lenovo grew, and Omdia expects no real recovery before 2028. https://technewsexplained.com/en/cve-watch/cve-2026-123158-openssh-sshole-alpine-password-bypass/ https://technewsexplained.com/en/cve-watch/cve-2026-123158-openssh-sshole-alpine-password-bypass/ Sun, 08 Nov 2026 08:00:00 GMT CVE Watch On Linux systems that use musl libc without PAM, such as Alpine, a password of 257 to 1,024 characters can log in over SSH to accounts that have no password set. OpenSSH 10.6p2 and Alpine's updated packages fix it. GreyNoise saw attackers take over its decoy servers within two days. https://technewsexplained.com/en/ai/tencent-hy4-vision-computer-use/ https://technewsexplained.com/en/ai/tencent-hy4-vision-computer-use/ Sat, 07 Nov 2026 10:00:00 GMT Artificial Intelligence Tencent launched Hy4 on November 4. The model adds image understanding and computer use, the ability to work through command lines and app windows. It costs about $0.90 per million input tokens. Tencent says open weights will follow, but they were not out as of November 7. https://technewsexplained.com/en/cybersecurity/samsung-november-2026-security-update-galaxy/ https://technewsexplained.com/en/cybersecurity/samsung-november-2026-security-update-galaxy/ Sat, 07 Nov 2026 09:30:00 GMT Cybersecurity Samsung's November security package for Galaxy phones applies 177 fixes from Google's Android bulletin, 20 of them critical, plus 24 Samsung items and 4 chip fixes. Samsung says delivery dates vary by model and region. https://technewsexplained.com/en/cve-watch/cve-2026-19868-sonicwall-sslvpn-saml-mfa-bypass/ https://technewsexplained.com/en/cve-watch/cve-2026-19868-sonicwall-sslvpn-saml-mfa-bypass/ Sat, 07 Nov 2026 09:00:00 GMT CVE Watch A flaw in the SonicOS SSL VPN lets someone with valid credentials for another login method get past SAML sign-in, and with it the MFA that SAML enforces. CISA added it to its exploited list on November 6. SonicOS 7.3.4-7013 and 8.2.3-8015 fix it. https://technewsexplained.com/en/cve-watch/cve-2026-58115-siemens-iot2050-node-red/ https://technewsexplained.com/en/cve-watch/cve-2026-58115-siemens-iot2050-node-red/ Fri, 06 Nov 2026 13:00:00 GMT CVE Watch A Siemens advisory rates CVE-2026-58115 at the maximum CVSS score of 10.0. Since October 30, VulnCheck has seen attackers use it against decoy systems to drop a Linux bot and backdoors. Headlines say hackers are backdooring Siemens devices, but no compromise of a real device has been confirmed. https://technewsexplained.com/en/technology/macbook-pro-proled-xdr-touchscreen-on-sale/ https://technewsexplained.com/en/technology/macbook-pro-proled-xdr-touchscreen-on-sale/ Fri, 06 Nov 2026 12:30:00 GMT Technology Apple's MacBook Pro with a tandem OLED touch display and M5 Pro or M5 Max chips goes on sale on November 6. It is the first Mac with a touchscreen and brings the Dynamic Island to macOS. Prices start at $2,899 in the US. https://technewsexplained.com/en/cybersecurity/chrome-157-security-update-213-fixes/ https://technewsexplained.com/en/cybersecurity/chrome-157-security-update-213-fixes/ Fri, 06 Nov 2026 12:00:00 GMT Cybersecurity Google moved Chrome 157 to the stable channel on November 3 with 213 security fixes, seven of them critical. None is reported as exploited. Twenty-one of the flaws were credited to researchers working with Claude or to OpenAI's Codex Security. https://technewsexplained.com/en/ai/gemini-api-changes-november-2026/ https://technewsexplained.com/en/ai/gemini-api-changes-november-2026/ Fri, 06 Nov 2026 11:30:00 GMT Artificial Intelligence Google's Gemini API release notes for early November bring a generally available video model, Gemini Omni 1.2 Flash, and the retirement of Gemini 2.5 Pro and 2.5 Flash. From December 1, requests to the old names go to newer models, with breaking changes. New paid projects also store requests by default. https://technewsexplained.com/en/cve-watch/ivanti-connect-secure-exploited-cve-2026-118527/ https://technewsexplained.com/en/cve-watch/ivanti-connect-secure-exploited-cve-2026-118527/ Fri, 06 Nov 2026 11:00:00 GMT CVE Watch CISA says attackers are chaining flaws in Ivanti Connect Secure VPN appliances to run commands without logging in, steal credentials and take data. Two more flaws joined its exploited list on October 30, and one of their CVE records was published on November 3. https://technewsexplained.com/en/cve-watch/cve-2024-27834-apple-pointer-authentication-exploited/ https://technewsexplained.com/en/cve-watch/cve-2024-27834-apple-pointer-authentication-exploited/ Fri, 06 Nov 2026 10:30:00 GMT CVE Watch CISA added CVE-2024-27834 to its list of exploited vulnerabilities on November 4, 2026. The bug lets an attacker who can already read and write memory bypass Pointer Authentication. Apple fixed it in May 2024, so updated devices are protected. https://technewsexplained.com/en/cve-watch/cisa-exploited-vulnerabilities-october-26-29-2026/ https://technewsexplained.com/en/cve-watch/cisa-exploited-vulnerabilities-october-26-29-2026/ Fri, 06 Nov 2026 10:00:00 GMT CVE Watch Between October 26 and 29, 2026, CISA added eight vulnerabilities to its list of flaws used in real attacks. They hit code servers, online stores, PHP sites, a compression library, Cisco firewalls, the Linux kernel and VMware hosts. Here is what each one affects and what to install. https://technewsexplained.com/en/cybersecurity/android-november-2026-security-bulletin/ https://technewsexplained.com/en/cybersecurity/android-november-2026-security-bulletin/ Fri, 06 Nov 2026 08:00:00 GMT Cybersecurity Google's November bulletin covers Android 14 through 17. The worst bug, CVE-2026-58868, could let an attacker run code on a phone without any tap from the owner. Google has not reported any of the flaws as exploited. https://technewsexplained.com/en/cve-watch/cve-2026-119977-wordpress-upgrade-rce/ https://technewsexplained.com/en/cve-watch/cve-2026-119977-wordpress-upgrade-rce/ Fri, 06 Nov 2026 07:30:00 GMT CVE Watch A race condition in the WordPress Core updater lets an unauthenticated attacker run code on the server while an upgrade is in progress. CISA confirmed active exploitation on November 3. WordPress 7.1.4 fixes it. https://technewsexplained.com/en/ai/mistral-large-4-open-weights-release/ https://technewsexplained.com/en/ai/mistral-large-4-open-weights-release/ Fri, 06 Nov 2026 07:00:00 GMT Artificial Intelligence Mistral AI published the weights of its flagship model on October 29 under a modified MIT license. The company highlights coding and cyber-defense results, and also says it sees "a potential for uplift" for real attacks. https://technewsexplained.com/en/technology/firefox-159-security-fixes/ https://technewsexplained.com/en/technology/firefox-159-security-fixes/ Fri, 06 Nov 2026 06:30:00 GMT Technology Mozilla released Firefox 159 on October 27 with fixes for 167 vulnerabilities, 108 of them rated high impact. The update also changes keyboard shortcuts and lets the Smart Window watch pages for price drops. https://technewsexplained.com/en/guides/how-to-check-android-security-patch-level/ https://technewsexplained.com/en/guides/how-to-check-android-security-patch-level/ Fri, 06 Nov 2026 06:00:00 GMT Guides The security patch level is a date in your phone's settings. It tells you which monthly Android security fixes are installed. Here is where to find it, how to read it, and what to do if it is out of date.