Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes Vulnerability / Windows SecurityMicrosoft on Tuesday released patches for a total of 1,259 vulnera... 2026-11-11 08:17:53 | 阅读: 1 | 收藏 | The Hacker News - thehackernews.com microsoft 2026 windows attacker exploited

Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges AI provider keys that customers stored on Railway were stolen in an October breach and used to comm... 2026-11-11 07:49:4 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com attacker refund database railway machine

Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons An AI model can be given a hidden backdoor by editing fewer than 10 of its rarely used neurons, wit... 2026-11-11 07:21:5 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com edited neurons microsoft tuned checkpoint

Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches Vulnerability / Enterprise SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA... 2026-11-11 06:4:2 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com 2026 security broadworks exploited

Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones Vulnerability / Software SecurityA flaw in Git can let a malicious repository run an attacker's co... 2026-11-10 19:23:10 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com github 2026 repository attacker submodules

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users Vulnerability / Cloud SecurityAn attacker exploited a remote code execution flaw in SGLang, an ope... 2026-11-10 19:19:39 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com attacker sglang agents cloud inference

Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access Vulnerability / Cyber AttackFrench software company Vates VMS has warned of a critical security vu... 2026-11-10 18:12:21 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com vates vms exploited xen

Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Three distinct threat activity clusters with shared infrastructure and malware code similarities ha... 2026-11-10 17:43:23 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com windows sparrowdoor copperdoor backdoors copperdns

Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor Vulnerability / Cyber AttackCybersecurity researchers have disclosed details of an attack that exp... 2026-11-10 16:0:55 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com 2026 xmrig shells backup

Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America Threat Intelligence / MalwareThe threat actor known as Blind Eagle has resurfaced with a new campa... 2026-11-10 15:58:44 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com zenox lures spanish phishing judicial

Fireworks AI Breach Widens to Expose Customer Billing Data and Incomplete Model Weights Fireworks AI disclosed on Monday that its investigation into a security incident first reported ear... 2026-11-10 15:33:59 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com fireworks datasets development 2026 billing

Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed Vulnerability / Mobile SecurityAn iOS sandbox escape published on GitHub lets an app read other ap... 2026-11-10 12:15:31 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com worse exchange developers security yesterday

Beyond the Alert: The Case for Rich Network Data Network Security / Security OperationsAt some point your security will fail. This isn’t pessimism.... 2026-11-10 11:38:13 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com network security corelight detections shallow

Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities Vulnerability / Mobile SecurityAn iMessage flaw could let a remote attacker join a group chat and... 2026-11-10 10:16:51 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com attacker brotli security imessage 2026

Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers Cyber Espionage / MalwareThe Russia-aligned state-sponsored threat actor known as Turla (aka Snake... 2026-11-10 10:7:29 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com exchange cereal toolset

SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution Vulnerability / Enterprise SecurityFour flaws that attackers could exploit without logging in were... 2026-11-10 10:2:40 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com 2026 dispatcher icm attacker saml2

France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites Cyber Attack / Industrial SabotageAn October cyberattack on refrigeration controllers at about 700... 2026-11-10 09:8:20 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com france iran attackers danfoss

Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark Artificial Intelligence / Application SecurityAnthropic on Monday released Claude Fable 5.2 and Cl... 2026-11-10 08:16:14 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com claude anthropic fable gpt gemini

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026 Vulnerability / Browser SecurityGoogle on Monday released updates to patch nine security vulnerabi... 2026-11-10 06:52:54 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com 2026 chrome security advised 8103

N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits Vulnerability / Enterprise SecurityN-able said it has taken N-central Hosted Environments offline... 2026-11-10 06:44:36 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com security premise apac americas