Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry Vulnerability / Cloud SecurityA critical flaw in Red Hat Quay allows an attacker who can access a... 2026-11-12 16:27:1 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com quay robot attacker 2026 underscore

Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass Vulnerability / Network SecurityCitrix has released patches for multiple critical security flaws i... 2026-11-12 15:38:49 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com netscaler 2026 citrix adc

186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence... 2026-11-12 15:15:40 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com island chrome security microsoft lookalike

SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack Paths The ongoing campaign targeting ConnectWise ScreenConnect deployments involves the exploitation of a... 2026-11-12 13:8:28 | 阅读: 1 | 收藏 | The Hacker News - thehackernews.com technician 2026 sckit connectwise

Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Vulnerability / Cloud SecurityGoogle Cloud VMs on AMD Turin chips need a guest OS patch and a stop... 2026-11-12 12:9:14 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com tsa vms processors turin xen

Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them Security Operations / Threat DetectionSecurity teams have more alerts, logs, and monitoring tools... 2026-11-12 12:2:51 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com security agents attacker identities threats

New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access Vulnerability / Cyber AttackN-able on Thursday said it's investigating a new public disclosure con... 2026-11-12 11:51:43 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com 2026 premise dewhurst

Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign Since mid-August 2026, a phishing operation has been stealing live Google sessions from corporate u... 2026-11-12 11:51:31 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com invites attacker reputation phishing cloudfire

PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution Vulnerability / Enterprise SecurityPTC has released patches for a new critical vulnerability impac... 2026-11-12 11:33:15 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com ptc windchill flexplm remote 2026

Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trig... 2026-11-12 09:25:0 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com crash election database replica readconcern

Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data Vulnerability / Web SecurityA flaw fixed in Node.js this week lets unauthenticated clients crash... 2026-11-12 08:20:37 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com 2026 client memory crash stricter

Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a secret s... 2026-11-12 06:42:47 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com stealer github repository wfx attacker

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely Vulnerability / Web SecurityA critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can... 2026-11-12 05:12:26 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com 2026 rhsa http2 security directive

ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients ConnectWise has taken the precautionary step of disabling five third-party extensions in partner... 2026-11-12 04:39:48 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com workstation technician huntress sckit

Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation Vulnerability / Software SecurityZoom has released software updates to address two security flaws... 2026-11-11 16:12:46 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com 2026 windows workplace 108186 software

AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets Cybersecurity researchers have disclosed details of a campaign in which an emerging agentic penet... 2026-11-11 15:34:27 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com artex antifox agentic wolf arctic

Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits Cyber Attack / RansomwareThreat actors have been observed targeting Qlik Sense servers to unsucces... 2026-11-11 14:1:0 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com reverse qlik powershell cynet cactus

Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords Of the 37,571 Grok-built apps that security company Claroc found online, 35,578 were open to anyone... 2026-11-11 12:19:40 | 阅读: 18 | 收藏 | The Hacker News - thehackernews.com grok subdomain spacexsi creator builders

We Built An Agent That Broke All of Our Security Rules. Here's What We Learned. We tell customers three things about securing AI agents: they need their own identities, access tha... 2026-11-11 12:1:59 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com agents rehearsal driving delegation security

eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise The in-house Python script behind eMudhra's October key compromise has now cost the company 8 more... 2026-11-11 12:0:53 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com cas hsms revoked g1 em