The Lab ledger

GTA 6 is now the most pre-ordered game on PS Store and Microsoft Store (Sensor Tower: ~9.69M pre-orders, ~$942M), and Sony says PS5 just passed 100M units shipped. Launch is Nov 19. gamesindustry.biz/gta-6-beco… ign.com/articles/ps5-hits-10… #GTA6 #PS5 #PlayStation #Gaming #GamingNews

Git 2.56.1 fixes six security bugs. The worst is CVE-2026-111760: a malicious repo can run code when you clone it recursively with submodules. Backports in 2.50.2 to 2.55.1. Update Git and apps that bundle it. github.blog/open-source/git/… #cybersecurity #DevOps #GitHub #Git

📱 Galaxy A34 (2023) is getting One UI 9 / Android 17 in Europe, the Middle East, Africa and Asia-Pacific since Nov 9, after Korea on Nov 4. Its 4th major Android upgrade, but it keeps the Oct 5 security patch. samfrew.com/news/28/android-… #Android #Samsung #Android17

Homelab of the Day: u/-_-error404-_- turned a college laptop that sat in a drawer for 4-5 years into a server running Jellyfin, the arr apps and Immich, with charging capped at 60% so it runs off the adapter 24/7. reddit.com/r/homelab/comment… #HomelabOfTheDay #selfhosted #homelab

🚨 Xen Orchestra auth bypass VSA-2026-062 is being exploited: one crafted cookie gives Admin, which Vates says can lead to root on XCP-ng hosts. Update to 6.9.2 (stable) or 6.10.1 (latest) and keep XO off the internet. docs.vates.tech/security-adv… #cybersecurity #infosec #homelab

November Patch Tuesday: Microsoft fixed ~1,090 CVEs. One is exploited: Outlook CVE-2026-124194, where a crafted message file connects to an attacker's server with no warning. Patch Office and Windows. cyberscoop.com/microsoft-pat… #PatchTuesday #Microsoft #Windows #cybersecurity

Android 17 QPR2 is rolling out to Pixel 6a and newer today, a month early, with the 2026-11-05 security patch. New: custom accent colors, status bar icon controls and an Agents privacy dashboard. 9to5google.com/2026/11/10/an… #Android #Google #Pixel

GTA 6 is 9 days out (Nov 19) and Take-Two says pre-orders are "tracking far in excess" of expectations. Q2 bookings fell 18% to $1.6B as NBA 2K27 missed, but the $8B-$8.2B full-year outlook stands. gamesindustry.biz/take-two-q… #GTA6 #GTAVI #RockstarGames #Gaming #GamingNews #PS5

Homelab of the Day: u/DimeTheReptile's de-Googled lab on a handmade shelf. Flint 2, HP EliteDesk 800 G5, OWC enclosure with 2x 2TB in RAID 1. Runs Home Assistant, Immich, SearXNG, AdGuard Home, Donetick, Kavita. reddit.com/r/homelab/comment… #HomelabOfTheDay #selfhosted #homelab

Apiiro found 100K+ Claude Code settings.local.json files on public GitHub; ~1,100 held secrets like DB passwords, API tokens and private keys. "Don't ask again" can store full commands. Gitignore it per repo. arstechnica.com/ai/2026/11/c… #ClaudeCode #Anthropic #GitHub #AI #infosec

Chrome's 8th exploited zero-day of 2026: CVE-2026-125350, a use-after-free in the XML component, has an exploit in the wild per Google. Update to 157.0.8103.50/.51 and relaunch. thehackernews.com/2026/11/go… #cybersecurity #infosec #CVE #Chrome

🚨 CISA added the Alpine/musl OpenSSH password bypass (CVE-2026-123158, "SSHole") to KEV. Attacks since Nov 7 steal root SSH keys and planting authorized_keys backdoors. Update openssh AND restart sshd. thehackernews.com/2026/11/ci… #infosec #cybersecurity #Linux #selfhosted #CVE

Proxmox kernel 7.0.14-29 (changelog Nov 6) fixes NFS 4.2 server-side copy hangs, possible KSM data loss in merged VM memory, Navi 1x/2x passthrough resets, and bugs root in unprivileged containers could trigger. github.com/proxmox/pve-kerne… #Linux #selfhosted #homelab

Apple released iOS 27.2.1 today (Nov 9), a bug-fix and security update for iPhone. Older devices get iOS 26.7.3 or iOS 18.7.12. Update in Settings > General > Software Update. Release list: support.apple.com/en-us/1001… #iPhone #Apple #iOS

Homelab of the Day: u/jatinkrmalik rescued a landfill-bound HP Envy 750 (i7-6700, 16GB). It's now a ZFS NAS on Ubuntu Server running 37 containers (Plex, Immich, Nextcloud, AdGuard Home) behind Tailscale. reddit.com/r/homelab/comment… #HomelabOfTheDay #selfhosted #homelab

🚨 XCP-ng 8.3: Dom0 kernel fix for CVE-2026-98432 (CVSS 9.8) shipped Nov 4. Unauth remote TCP UAF can compromise the host. Update + reboot, or apply the iptables mitigation until you can. xcp-ng.org/blog/2026/11/04/n… #homelab #Linux #CVE #infosec #cybersecurity

⚠️ APT CVE-2026-109518 (CVSS 7.7): a MitM or bad mirror can swap a verified package during download retries and get root on Debian/Ubuntu. Retries are on by default since Debian 12 / Ubuntu 22.04. Update apt now. ubuntu.com/security/notices/… #cybersecurity #Linux #infosec #Ubuntu