Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Vulnerability / Cloud SecurityGoogle Cloud VMs on AMD Turin chips need a guest OS patch and a stop... 2026-11-12 12:9:14 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com tsa vms processors turin xen

Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them Security Operations / Threat DetectionSecurity teams have more alerts, logs, and monitoring tools... 2026-11-12 12:2:51 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com security agents attacker identities threats

New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access Vulnerability / Cyber AttackN-able on Thursday said it's investigating a new public disclosure con... 2026-11-12 11:51:43 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com 2026 premise dewhurst

Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign Since mid-August 2026, a phishing operation has been stealing live Google sessions from corporate u... 2026-11-12 11:51:31 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com invites attacker reputation phishing cloudfire

PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution Vulnerability / Enterprise SecurityPTC has released patches for a new critical vulnerability impac... 2026-11-12 11:33:15 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com ptc windchill flexplm remote 2026

Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trig... 2026-11-12 09:25:0 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com crash election database replica readconcern

Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data Vulnerability / Web SecurityA flaw fixed in Node.js this week lets unauthenticated clients crash... 2026-11-12 08:20:37 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com 2026 client memory crash stricter

Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a secret s... 2026-11-12 06:42:47 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com stealer github repository wfx attacker

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely Vulnerability / Web SecurityA critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can... 2026-11-12 05:12:26 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com 2026 rhsa http2 security directive

ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients ConnectWise has taken the precautionary step of disabling five third-party extensions in partner... 2026-11-12 04:39:48 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com workstation technician huntress sckit

Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation Vulnerability / Software SecurityZoom has released software updates to address two security flaws... 2026-11-11 16:12:46 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com 2026 windows workplace 108186 software

AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets Cybersecurity researchers have disclosed details of a campaign in which an emerging agentic penet... 2026-11-11 15:34:27 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com artex antifox agentic wolf arctic

Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits Cyber Attack / RansomwareThreat actors have been observed targeting Qlik Sense servers to unsucces... 2026-11-11 14:1:0 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com reverse qlik powershell cynet cactus

Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords Of the 37,571 Grok-built apps that security company Claroc found online, 35,578 were open to anyone... 2026-11-11 12:19:40 | 阅读: 18 | 收藏 | The Hacker News - thehackernews.com grok subdomain spacexsi creator builders

We Built An Agent That Broke All of Our Security Rules. Here's What We Learned. We tell customers three things about securing AI agents: they need their own identities, access tha... 2026-11-11 12:1:59 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com agents rehearsal driving delegation security

eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise The in-house Python script behind eMudhra's October key compromise has now cost the company 8 more... 2026-11-11 12:0:53 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com cas hsms revoked g1 em

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes Vulnerability / Windows SecurityMicrosoft on Tuesday released patches for a total of 1,259 vulnera... 2026-11-11 08:17:53 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com microsoft 2026 windows attacker exploited

Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges AI provider keys that customers stored on Railway were stolen in an October breach and used to comm... 2026-11-11 07:49:4 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com attacker refund database railway machine

Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons An AI model can be given a hidden backdoor by editing fewer than 10 of its rarely used neurons, wit... 2026-11-11 07:21:5 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com edited neurons microsoft tuned checkpoint

Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches Vulnerability / Enterprise SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA... 2026-11-11 06:4:2 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com 2026 security broadworks exploited