Tech IT News Today: Security Alerts (Nov 5, 2026)

Top story

Two security items need attention this week. Attackers are exploiting a flaw in Zyxel GS1900 network switches that an earlier patch did not fix, and Synology NAS devices running outdated software are being targeted by ransomware. Both are reminders that network and storage hardware sitting quietly in offices is a constant target.

Security and cloud

According to a Cyber Security News report of November 4, 2026, attackers are exploiting a zero-day in Zyxel's GS1900 switch series that allows unauthenticated root command execution. The report says an earlier patch (for a previous flaw) did not fix the exploited issue, and that Binarly found all ten fixed firmware releases it checked still vulnerable on September 28. GreyNoise reported that one actor hit 996 GS1900 switches in 48 countries around August 17. The attackers reportedly stole hashed root credentials, so any exposed switch should be treated as possibly compromised.

The report's advice: update to Zyxel's October 22 fix or newer, remove the web management pages from the internet and limit them to trusted admin networks, change default passwords, check devices for unusual admin activity, and rotate passwords on any switch that may have been exposed.

TechRadar reported that Synology NAS devices could be under attack from a new ransomware threat and urged owners to update now. Security Affairs, covering Synology's own warning, says the C3RB3R ransomware is hitting NAS units that run outdated DSM versions through a flaw that has already been patched. Recommended steps in the coverage include installing the latest DSM update, keeping the management interface off the public internet and verifying that backups are intact and offline.

Switches and NAS boxes often run for long stretches without close oversight, which is why problems can stay unpatched for a long time.

Industry and policy

TechRepublic reported that the AI data center boom is facing backlash after the US election results, but argues that the vote does not signal the end of construction.

TechTarget reported on November 4, 2026 that enterprise software spending is rising more slowly than inflation, eroding purchasing power. Companies are pressing IT services providers for lower prices, arguing that AI-driven efficiency gains should be passed on, and some are bringing software development, support and customer service back in-house to cut external costs.

A TradingView market piece (from Invezz) says Synopsys, a chip-design software and IP company, is drawing investor interest because it offers exposure to AI, high-performance computing and data-center growth without manufacturing chips. The piece cites recurring software revenue and the larger footprint after the Ansys acquisition, while noting that integration and regulatory risks remain. This is market commentary, not investment advice.

Why it matters

On the security side, a patch is not always the end of the story: the earlier Zyxel fix did not close the exploited hole, so admins should confirm that their switches run the October 22 firmware or newer. On the business side, enterprise software budgets are under pressure while AI-era data-center growth meets political friction.

The immediate action items are concrete: update Zyxel GS1900 firmware to the October 22 release or newer and rotate passwords on exposed switches, update Synology DSM, and expect continued pressure on software and services pricing as enterprises review their 2027 budgets.