Apple security flaw, Bose battery recall, cryptocurrency transfer restrictions
CISA has added an actively exploited Apple authentication flaw to the catalog used to guide federal security priorities, while Apple says earlier software updates included a fix. Bose is recalling certain removable speaker batteries because they can overheat and ignite, with free replacements available. Nubank has suspended cryptocurrency deposits and withdrawals in Brazil, but trading remains available.
Also in this edition
- Bose owners can check battery serial numbers and remove affected packs; the speakers can still run on wall power.
- Nubank says cryptocurrency transfers will return when its provider’s service is restored.
- Microsoft says an agent signed in to dozens of applications across multiple cloud tenants, opening paths to stored secrets and organizational data.
- The UK Home Office plans a cloud-hosting procurement provisionally valued at £881.62 million, with a formal contract notice expected in January 2027.
Written by AveNews superintelligence (SI) from AveNews articles and their sources.

Table of contents
Software
US agency adds exploited Apple authentication flaw to catalog
CISA has listed an actively exploited Apple authentication flaw, bringing it into a catalog that guides federal security priorities. Apple says a fix was included in earlier software updates.
Suspected North Korean workers hand access to malware teams, CrowdStrike says
CrowdStrike says suspected North Korean IT workers have handed company access to malware teams when a target offered intelligence value. The company did not say whether the teams collected sensitive information; employers have also uncovered impostors before they began sensitive work.
Nubank suspends cryptocurrency deposits and withdrawals in Brazil
Nubank halted cryptocurrency deposits and withdrawals on 6 November 2026, but trading remains available. The lender says customers’ assets and information remain protected and ties the return of transfers to restoration of its provider’s service.
Mercado Pago blocks some crypto transfers to external wallets
Mercado Pago has restricted some cryptocurrency transfers after an incident involving a service provider, and says it will notify users when operations return to normal.
Consumer Tech
Bose recalls S1 Pro and S1 Pro+ batteries over fire risk
Bose is recalling certain removable speaker batteries that can overheat and ignite. Owners can check the battery’s serial number, remove affected packs and register for a free replacement; the speakers can still run on wall power without the batteries.
Snapchat starts turning off Find Friends for UK children
Snapchat has begun disabling friend suggestions by default for children in Britain, following a commitment made in May. Users can still turn the feature on, and the company has told Ofcom that effective age checks for under-18s should be in place by the end of 2026.
Infrastructure
UK Home Office plans £881.62 million (about $1.2 billion) cloud procurement
The UK Home Office has set a provisional value for its next cloud-hosting procurement, following a smaller three-year contract with Amazon Web Services. A formal contract notice is expected in January 2027.
Updated since this editionAzerbaijan and Ukraine sign cooperation protocol
Azerbaijan and Ukraine signed a protocol and adopted a cross-sector plan after the commission’s first meeting in Ukraine since Russia’s full-scale invasion. Officials also confirmed an equipment delivery for energy repairs, while transit and investment proposals remain under discussion.
Superintelligence
Forever Security makes Claude install a package that opens Calculator
Forever Security demonstrated local code execution through Claude Dispatch on one computer. The researchers recommend turning off cross-device Dispatch when it is not needed and reviewing extension permissions.
US Agriculture Department plans crop data check after corn errors
The US Agriculture Department plans an additional validation check for its crop production data after a file combined corn acreage figures incorrectly. Officials say the tool would have flagged the error and will supplement existing checks.
US Justice Department says superintelligence task force is operating
The US Justice Department says its new task force is operating, giving it a dedicated structure to coordinate cases and recommend enforcement priorities. Its vice chair says regulatory details will follow later in November.
Microsoft says agent signed in to dozens of applications
Microsoft says an agent signed in to dozens of applications across multiple cloud tenants after attackers searched for exposed credentials, giving them paths to stored secrets and organizational data.
Also today
Reports on this date
AveNewsIndia’s custody deadline, stock-market falls, Somalia’s presidential term ruling
India’s Supreme Court has ruled that detention, rather than the later recording of a formal arrest, starts the 24-hour deadline for bringing an accused person before a magistrate. The Nasdaq entered correction territory, while Japan’s Nikkei closed down 6%. Somalia’s Supreme Court rejected the president’s term extension and set an election deadline earlier than the commission’s timetable.
Daily report · covering
3 min26 sources
ScienceDelhi pollution controls, Armenia’s sweets ban, space station power upgrade
India has restricted diesel generators and fuel burning in Delhi as winter air quality worsens. Wisconsin officials report the state’s first measles death in 36 years, involving an infant. Armenia’s food inspectorate has prohibited sales of identified Kinder-labelled sweets after inspections at Surmalu and Petak.
Daily report · covering
3 min20 sources
BusinessNasdaq correction, Asian market losses, Canada’s tariff-aid proposal
The Nasdaq fell 5.5% as technology shares sold off, putting the index in correction territory. South Korea’s Kospi closed down 6% after a temporary trading halt as selling spread from US markets. Canada’s budget proposes C$44 billion for businesses and workers affected by tariffs.
Daily report · covering
3 min28 sources
CultureRTÉ evacuations, Trump arch pause, Pissarro return order
A bomb threat interrupted RTÉ’s radio schedule as staff evacuated and authorities worked to identify those responsible. A federal judge barred construction of Trump’s proposed arch for 14 days without deciding its legality. A Paris court ordered a Pissarro painting returned to Salomon Flavian’s heirs; Mondex’s James Palmer says an appeal will be filed.
Daily report · covering
3 min29 sources
SportsTiafoe’s Finals place, Ruotolo’s second title, Armenia’s Nations League squad
Shelton’s win over Paul secured Tiafoe’s ATP Finals place, leaving Fritz’s match against Alcaraz to decide the final berth. Ruotolo won ONE’s lightweight mixed martial arts title by submission. Melikyan named 28 players for Armenia’s final Nations League group matches.
Daily report · covering
4 min47 sources
PoliticsUN agencies say funding shortages limit Sudan shelter response
UN agencies say 15.4 million people in Sudan urgently need shelter and household items, and are seeking flexible funding to replenish emergency stocks before winter. Democrats have reached 253 US House seats, with 22 races unresolved. Somalia’s Supreme Court has rejected the president’s term extension, leaving only the cabinet with limited caretaker authority.
Daily report · covering
3 min59 sources













