{"updated":1794410104293,"items":[{"title":"Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits","summary":"Threat actors have been observed targeting Qlik Sense servers to unsuccessfully deliver PowerShell reverse shell commands against multiple environments in October 2026. Cynet's CyOps and Research team","cat":"vulnerability","ts":1794405660000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/hackers-target-qlik-sense-servers-with.html"},{"title":"Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords","summary":"Of the 37,571 Grok-built apps that security company Claroc found online, 35,578 were open to anyone without a sign-in, the researchers said yesterday. They included 24 apps built by staff at the socia","cat":"breach","ts":1794399580000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/over-35000-grok-built-apps-exposed.html"},{"title":"We Built An Agent That Broke All of Our Security Rules. Here's What We Learned.","summary":"We tell customers three things about securing AI agents: they need their own identities, access that fits the job they’re given, and traceability that’s separate from any human’s. That was true for us","cat":"research","ts":1794398519000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/we-built-agent-that-broke-all-of-our.html"},{"title":"eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise","summary":"The in-house Python script behind eMudhra's October key compromise has now cost the company 8 more of its intermediate certificate authorities (CAs), even though it did not weaken their keys. Each int","cat":"research","ts":1794398453000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/emudhra-revokes-8-more-cas-it.html"},{"title":"Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes","summary":"Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume has exceeded 1,000 flaws. These cover 72","cat":"vulnerability","ts":1794385073000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/microsoft-patches-1259-flaws-including.html"},{"title":"Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges","summary":"AI provider keys that customers stored on Railway were stolen in an October breach and used to commit an estimated $740,000 in unauthorized spending, the platform-as-a-service provider said yesterday.","cat":"breach","ts":1794383344000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/railway-says-stolen-customer-ai-keys.html"},{"title":"Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons","summary":"An AI model can be given a hidden backdoor by editing fewer than 10 of its rarely used neurons, without retraining the model, Microsoft researchers have shown. When a chosen trigger appears, the model","cat":"malware","ts":1794381665000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/microsoft-researchers-show-ai-agents.html"},{"title":"Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches","summary":"The U.S. Cybersecurity and Infrastructure Security Agency (CISA) Tuesday added two security flaws impacting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulne","cat":"vulnerability","ts":1794377042000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/cisco-broadworks-and-openwave-flaws.html"},{"title":"November Patch Tuesday: An Overflowing Cornucopia of CVEs","summary":"Microsoft serves up an actively exploited Outlook zero-day, and a wave of critical Exchange, SharePoint, Windows Search, and LDAP bugs that exhausted defenders need to prioritize fast.","cat":"vulnerability","ts":1794349611000,"source":"Dark Reading","link":"https://www.darkreading.com/vulnerabilities-threats/november-patch-tuesday-cornucopia-cves"},{"title":"Microsoft Fixes Nearly 1,100 Security Vulnerabilities","summary":"Microsoft did another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in its Windows operating systems and supported software. This month's Patch Tuesday ad","cat":"vulnerability","ts":1794347703000,"source":"Krebs on Security","link":"https://krebsonsecurity.com/2026/11/microsoft-fixes-nearly-1100-security-vulnerabilities/"},{"title":"Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon","summary":"Forks of the open source Artex framework, along with 45 similar pen-testing tools, remain capable of executing credential attacks and cloud breaches at machine speed across multiple industries.","cat":"breach","ts":1794344474000,"source":"Dark Reading","link":"https://www.darkreading.com/cyberattacks-data-breaches/artex-ai-pen-test-tool-hackers-weapon"},{"title":"F-Secure Identifies 26 Ways AI Can Harm Consumers, and Where to Stop Them","summary":"New AI Harms Taxonomy traces how harm moves through AI systems, from misleading chatbot answers to compromised autonomous agents, and identifies where defenses can intervene.","cat":"research","ts":1794343305000,"source":"Dark Reading","link":"https://www.darkreading.com/application-security/f-secure-26-ways-ai-harm-consumers-where-to-stop-them"},{"title":"Checkmarx Appoints Kobi Sivilya as Chief Information Security Officer","summary":"Sivilya brings deep cybersecurity and technology leadership to Checkmarx as AI transforms software development.","cat":"research","ts":1794342934000,"source":"Dark Reading","link":"https://www.darkreading.com/cybersecurity-careers/checkmarx-appoints-kobi-sivilya-chief-information-security-officer"},{"title":"How to Assess OT Incident Response Preparedness","summary":"Cloud Range's free 28-question OT Cyber Readiness Assessment helps organizations identify gaps in operational technology (OT) incident response.","cat":"research","ts":1794341923000,"source":"Dark Reading","link":"https://www.darkreading.com/ics-ot-security/assess-ot-incident-response-preparedness"},{"title":"Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones","summary":"A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fixed it this week in Git 2.56.1, with match","cat":"vulnerability","ts":1794338590000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/git-patches-flaw-that-lets-malicious.html"},{"title":"SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users","summary":"An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI's inference servers last Sunday. The attacker could also have seen request","cat":"breach","ts":1794338379000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/sglang-rce-exploit-breaches-near-ai.html"},{"title":"AI Coding Agents Leak Thousands of Secrets to GitHub","summary":"A command in Claude Code inadvertently saves files with credentials and other sensitive data to public Git repositories, creating security gaps for organizations.","cat":"breach","ts":1794336382000,"source":"Dark Reading","link":"https://www.darkreading.com/cyber-risk/ai-coding-agents-leak-secrets-github"},{"title":"Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access","summary":"French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild. The authentication bypass flaw, which does not ","cat":"vulnerability","ts":1794334341000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/hackers-exploit-critical-xen-orchestra.html"},{"title":"Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem","summary":"Three distinct threat activity clusters with shared infrastructure and malware code similarities have been observed targeting telecommunications providers, government organizations, military entities,","cat":"nation-state","ts":1794332603000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/three-china-nexus-espionage-campaigns.html"},{"title":"Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor","summary":"Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in early ","cat":"vulnerability","ts":1794326455000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/attackers-exploit-ahsaycbs-flaws-to.html"},{"title":"Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America","summary":"The threat actor known as Blind Eagle has resurfaced with a new campaign targeting organizations in Latin America through judicial and administrative-themed phishing lures to deliver a remote access t","cat":"malware","ts":1794326324000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/blind-eagle-uses-fake-court-notices-to.html"},{"title":"Fireworks AI Confirms Wider Breach Affecting Customer Datasets, Model Weights and Notion AI Chats","summary":"Fireworks AI disclosed on Monday that its investigation into a security incident first reported early last month uncovered further malicious activity, affecting account and billing information, alongs","cat":"breach","ts":1794324839000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/fireworks-ai-breach-widens-to-expose.html"},{"title":"AI Makes Reverse Engineering Mainstream Software Malware Far Easier","summary":"Researchers unpacked, mapped, and recreated complex software and the Turla malware, raising opportunities and concerns for organizations and cybersecurity analysts.","cat":"malware","ts":1794315600000,"source":"Dark Reading","link":"https://www.darkreading.com/application-security/ai-reverse-engineering-apps"},{"title":"Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed","summary":"An iOS sandbox escape published on GitHub lets an app read other apps' files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login credentials at risk of exposure to malici","cat":"research","ts":1794312931000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/binance-warns-of-ios-sandbox-escape.html"},{"title":"Beyond the Alert: The Case for Rich Network Data","summary":"At some point your security will fail. This isn’t pessimism. It’s not because your team and tools aren’t sophisticated enough. It’s the reason we have detections in the first place. And, it’s why once","cat":"research","ts":1794310693000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/beyond-alert-case-for-rich-network-data.html"},{"title":"Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities","summary":"An iMessage flaw could let a remote attacker join a group chat and receive its messages, Apple said yesterday, and it released updates to fix it. The updates also fix a separate iMessage flaw that cou","cat":"vulnerability","ts":1794305811000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/apple-patches-imessage-group-chat.html"},{"title":"Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers","summary":"The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that's used to break into victims' Microsoft Exch","cat":"nation-state","ts":1794305249000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/russian-turla-hackers-use-new-cereal.html"},{"title":"SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution","summary":"Four flaws that attackers could exploit without logging in were fixed today as part of SAP's monthly Security Patch Day—the vendor rates all four 10.0, the maximum CVSS score. Three are in the SAP Net","cat":"vulnerability","ts":1794304960000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/sap-patches-four-cvss-100-flaws.html"},{"title":"France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites","summary":"An October cyberattack on refrigeration controllers at about 700 French retail sites was carried out by a cyber unit of Iran's Islamic Revolutionary Guard Corps (IRGC), the French government said yest","cat":"nation-state","ts":1794301700000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/france-blames-iran-for-sabotage-attack.html"},{"title":"Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark","summary":"Anthropic on Monday released Claude Fable 5.2 and Claude Mythos 5.2 models, which it said exhibit improvements in coding, reasoning, and vision. During pre-release training, the large language models ","cat":"research","ts":1794298574000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/anthropics-claude-fable-52-beats-gpt-6.html"}]}