Tech IT News Roundup: Selloff & Zyxel Zero-Day (Nov 6, 2026)

Top story

Tech stocks suffered their biggest selloff since the Covid crash on Thursday, November 5, 2026, Fortune reported. In midday trading the Nasdaq was down more than 5%, and chipmakers such as Micron, AMD and Nvidia, data-centre companies, software firms and consumer tech names all fell. The drop followed the U.S. midterm elections held on November 3: Fortune says voters also approved candidates and ballot measures aimed at curbing the build-out of AI data centres, and investors fear this could slow the AI spending boom. One analyst quoted expects tech capital spending growth to peak sooner than previously thought, while another warns that markets can over-react in the short term. A slowdown would ripple well beyond any single company, because so much recent IT growth, from chip orders to networking gear and cloud contracts, is tied to that spending.

Hardware

A stock-pick article published on November 6, 2026 pointed to Broadcom as a company that sits at the centre of AI infrastructure demand. It says Broadcom supplies chips and infrastructure software that help data centres move and manage data, is expanding its custom silicon business, and is generating substantial free cash flow. This is a bullish opinion piece, not a forecast, and nothing here is investment advice. The practical point for IT readers is simple: even when sentiment around AI spending wobbles, chips, networking gear and data-centre hardware remain the backbone that cloud and software depend on.

Software

Reports on November 5, 2026 say OpenAI announced GPT-6 Cyber, a cybersecurity-focused model that is rolling out first to a select group of approved customers for authorised defensive work. We could not open OpenAI's own announcement, so details such as benchmarks are left out.

Do not confuse this with a new bug. The Brotli compression library flaw (CVE-2026-111497) that has been linked to OpenAI's security researchers was disclosed in October 2026. Node.js published fixes on October 21, patched Brotli versions followed, and exploit traffic was reported in the wild by October 27, according to Help Net Security. Brotli sits inside many applications, including Node.js, Bun, .NET and Envoy Proxy, so check that your dependencies have the fixed versions. We could not confirm that GPT-6 Cyber itself found this particular flaw.

Security and cloud

SecurityWeek reported on November 5, 2026 that attacks on Zyxel GS1900-series switches, earlier blamed on a flaw patched in June, actually used a separate, previously unknown zero-day. Binarly says the flaw was exploited in the wild to hack almost 1,000 devices; Zyxel released fixes on October 23 and published its advisory on November 3. Earlier reporting linked the activity to a Chinese threat actor. The lesson is that patching one known bug does not protect you if an unrelated hole is being exploited at the same time, so apply the latest Zyxel firmware.

Separately, CYFIRMA's weekly intelligence report (November 6, 2026) described a claim by the Everest ransomware group on its leak site against an unnamed Japanese industrial manufacturer based in Hiroshima. The group reportedly exposed approximately 90 GB of data, including internal engineering documentation, proprietary technical developments, project archives, file inventories, email communications and manufacturing, welding and inspection records. These are the group's claims as relayed by CYFIRMA, not a confirmed breach disclosure.

On the cloud-security side, a comparison updated on November 5, 2026 looked at four platforms: Google's Wiz, Microsoft Defender for Cloud, Palo Alto's Cortex Cloud and Upwind. Google acquired Wiz for $32 billion in cash, and the deal closed on March 11, 2026. The same piece cites Palo Alto Networks' Unit 42 as reporting that ransomware groups including Qilin and Inc have exploited a PAN-OS vulnerability tracked as CVE-2026-0257. The takeaway: security vendors' own products need disciplined patching too.

Industry and policy

A sponsored article published by Help Net Security on November 6, 2026 previews the sixth Cyber Security Summit in Sarajevo, which takes place on November 18 and 19, 2026, so it has not happened yet. The article argues that a serious cyber incident does not have to start in an organisation's core network: a compromised supplier account, an exposed edge device or a cloud provider outage can be enough to cut off a critical application, delay transactions or halt production. It adds that many teams lack a reliable view of the systems they depend on. These are discussion topics for the event, not its findings.

Why it matters

Taken together, this week's stories show an industry at a crossroads: markets are nervously questioning whether AI-driven infrastructure spending can keep accelerating, while attackers keep finding zero-days, exploiting already-disclosed bugs and digging deep into victims' systems. Resilience, both financial and technical, is being tested. Details and prices change quickly, so rely on vendor advisories for patching decisions.