Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation Vulnerability / Software SecurityZoom has released software updates to address two security flaws... 2026-11-11 16:12:46 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com 2026 windows workplace 108186 software

AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets Cybersecurity researchers have disclosed details of a campaign in which an emerging agentic penet... 2026-11-11 15:34:27 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com artex antifox agentic wolf arctic

Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits Cyber Attack / RansomwareThreat actors have been observed targeting Qlik Sense servers to unsucces... 2026-11-11 14:1:0 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com reverse qlik powershell cynet cactus

Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords Of the 37,571 Grok-built apps that security company Claroc found online, 35,578 were open to anyone... 2026-11-11 12:19:40 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com grok subdomain spacexsi creator builders

We Built An Agent That Broke All of Our Security Rules. Here's What We Learned. We tell customers three things about securing AI agents: they need their own identities, access tha... 2026-11-11 12:1:59 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com agents rehearsal driving delegation security

eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise The in-house Python script behind eMudhra's October key compromise has now cost the company 8 more... 2026-11-11 12:0:53 | 阅读: 19 | 收藏 | The Hacker News - thehackernews.com cas hsms revoked g1 em

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes Vulnerability / Windows SecurityMicrosoft on Tuesday released patches for a total of 1,259 vulnera... 2026-11-11 08:17:53 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com microsoft 2026 windows attacker exploited

Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges AI provider keys that customers stored on Railway were stolen in an October breach and used to comm... 2026-11-11 07:49:4 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com attacker refund database railway machine

Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons An AI model can be given a hidden backdoor by editing fewer than 10 of its rarely used neurons, wit... 2026-11-11 07:21:5 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com edited neurons microsoft tuned checkpoint

Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches Vulnerability / Enterprise SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA... 2026-11-11 06:4:2 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com 2026 security broadworks exploited

Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones Vulnerability / Software SecurityA flaw in Git can let a malicious repository run an attacker's co... 2026-11-10 19:23:10 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com github 2026 repository attacker submodules

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users Vulnerability / Cloud SecurityAn attacker exploited a remote code execution flaw in SGLang, an ope... 2026-11-10 19:19:39 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com attacker sglang agents cloud inference

Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access Vulnerability / Cyber AttackFrench software company Vates VMS has warned of a critical security vu... 2026-11-10 18:12:21 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com vates vms exploited xen

Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Three distinct threat activity clusters with shared infrastructure and malware code similarities ha... 2026-11-10 17:43:23 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com windows sparrowdoor copperdoor backdoors copperdns

Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor Vulnerability / Cyber AttackCybersecurity researchers have disclosed details of an attack that exp... 2026-11-10 16:0:55 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com 2026 xmrig shells backup

Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America Threat Intelligence / MalwareThe threat actor known as Blind Eagle has resurfaced with a new campa... 2026-11-10 15:58:44 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com zenox lures spanish phishing judicial

Fireworks AI Breach Widens to Expose Customer Billing Data and Incomplete Model Weights Fireworks AI disclosed on Monday that its investigation into a security incident first reported ear... 2026-11-10 15:33:59 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com fireworks datasets development 2026 billing

Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed Vulnerability / Mobile SecurityAn iOS sandbox escape published on GitHub lets an app read other ap... 2026-11-10 12:15:31 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com worse exchange developers security yesterday

Beyond the Alert: The Case for Rich Network Data Network Security / Security OperationsAt some point your security will fail. This isn’t pessimism.... 2026-11-10 11:38:13 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com network security corelight detections shallow

Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities Vulnerability / Mobile SecurityAn iMessage flaw could let a remote attacker join a group chat and... 2026-11-10 10:16:51 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com attacker brotli security imessage 2026