Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones Vulnerability / Software SecurityA flaw in Git can let a malicious repository run an attacker's co... 2026-11-10 19:23:10 | 阅读: 1 | 收藏 | The Hacker News - thehackernews.com github 2026 repository attacker submodules

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users Vulnerability / Cloud SecurityAn attacker exploited a remote code execution flaw in SGLang, an ope... 2026-11-10 19:19:39 | 阅读: 0 | 收藏 | The Hacker News - thehackernews.com attacker sglang agents cloud inference

Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access Vulnerability / Cyber AttackFrench software company Vates VMS has warned of a critical security vu... 2026-11-10 18:12:21 | 阅读: 0 | 收藏 | The Hacker News - thehackernews.com vates vms exploited xen

Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Three distinct threat activity clusters with shared infrastructure and malware code similarities ha... 2026-11-10 17:43:23 | 阅读: 0 | 收藏 | The Hacker News - thehackernews.com windows sparrowdoor copperdoor backdoors copperdns

Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor Vulnerability / Cyber AttackCybersecurity researchers have disclosed details of an attack that exp... 2026-11-10 16:0:55 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com 2026 xmrig shells backup

Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America Threat Intelligence / MalwareThe threat actor known as Blind Eagle has resurfaced with a new campa... 2026-11-10 15:58:44 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com zenox lures spanish phishing judicial

Fireworks AI Breach Widens to Expose Customer Billing Data and Incomplete Model Weights Fireworks AI disclosed on Monday that its investigation into a security incident first reported ear... 2026-11-10 15:33:59 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com fireworks datasets development 2026 billing

Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed Vulnerability / Mobile SecurityAn iOS sandbox escape published on GitHub lets an app read other ap... 2026-11-10 12:15:31 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com worse exchange developers security yesterday

Beyond the Alert: The Case for Rich Network Data Network Security / Security OperationsAt some point your security will fail. This isn’t pessimism.... 2026-11-10 11:38:13 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com network security corelight detections shallow

Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities Vulnerability / Mobile SecurityAn iMessage flaw could let a remote attacker join a group chat and... 2026-11-10 10:16:51 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com attacker brotli security imessage 2026

Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers Cyber Espionage / MalwareThe Russia-aligned state-sponsored threat actor known as Turla (aka Snake... 2026-11-10 10:7:29 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com exchange cereal toolset

SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution Vulnerability / Enterprise SecurityFour flaws that attackers could exploit without logging in were... 2026-11-10 10:2:40 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com 2026 dispatcher icm attacker saml2

France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites Cyber Attack / Industrial SabotageAn October cyberattack on refrigeration controllers at about 700... 2026-11-10 09:8:20 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com france iran attackers danfoss

Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark Artificial Intelligence / Application SecurityAnthropic on Monday released Claude Fable 5.2 and Cl... 2026-11-10 08:16:14 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com claude anthropic fable gpt gemini

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026 Vulnerability / Browser SecurityGoogle on Monday released updates to patch nine security vulnerabi... 2026-11-10 06:52:54 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com 2026 chrome security advised 8103

N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits Vulnerability / Enterprise SecurityN-able said it has taken N-central Hosted Environments offline... 2026-11-10 06:44:36 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com security premise apac americas

CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws Vulnerability / Cyber AttackThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Mo... 2026-11-10 06:31:42 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com 2026 openssh gpustack

Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data Cloud Security / Data BreachAn attacker broke into AWS accounts belonging to multiple Qubole cus... 2026-11-9 17:51:21 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com qubole attacker assumerole cloudtrail cloud

Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware Attackers used the Ethersphere project's own release automation to publish malicious versions of tw... 2026-11-9 17:36:28 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com bee attackers solidity windows

Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia Cyber Espionage / Threat IntelligenceThe South Asian cyber espionage group known as Bitter (aka A... 2026-11-9 14:31:29 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com paprat c2 remote powershell shortcut