{"updated":1794252452181,"items":[{"title":"Attackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux","summary":"Attackers can exploit a flaw in Claude's document-processing tool by creating a temporary file that Anthropic's AI assistant can access and run on a user's machine.","cat":"vulnerability","ts":1794247710000,"source":"Dark Reading","link":"https://www.darkreading.com/endpoint-security/attackers-claude-office-party-flaw-malicious-code-linux"},{"title":"Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data","summary":"An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today. The attacker used","cat":"breach","ts":1794246681000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/hackers-exploit-quboles-trusted-aws.html"},{"title":"Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware","summary":"Attackers used the Ethersphere project's own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: bee-js 13.3.0 and Swarm Desktop 0.56.2. B","cat":"malware","ts":1794245788000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/hackers-compromise-etherspheres-bee-js.html"},{"title":"PwC's CISO on AI, Robots What's Next for Security","summary":"As AI accelerates change across the enterprise, PwC's James Shira explains why security teams must rethink their approach to risk and adapt their strategies.","cat":"research","ts":1794244643000,"source":"Dark Reading","link":"https://www.darkreading.com/cybersecurity-operations/pwc-ciso-ai-robots-security"},{"title":"NIST: Solo Shouldn't Mean Less Secure","summary":"New guidance provides a basic framework for less-technical solo business owners, but it may miss the mark on how to secure technology that requires no human oversight.","cat":"research","ts":1794239170000,"source":"Dark Reading","link":"https://www.darkreading.com/cybersecurity-operations/nist-solo-shouldnt-mean-less-secure"},{"title":"Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia","summary":"The South Asian cyber espionage group known as Bitter (aka APT-C-08, APT-Q-37, Hazy Tiger, Orange Yali, T-APT-17, and TA397) has been observed targeting South Asian organizations with a previously unr","cat":"nation-state","ts":1794234689000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/bitter-hackers-deploy-new-paprat.html"},{"title":"⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More","summary":"A system doesn't always need a complicated bug to let someone in. Sometimes, a blank password is enough. That's one of the bigger stories this week. And it gets worse when the tools meant to keep syst","cat":"vulnerability","ts":1794230905000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/weekly-recap-sshole-exploited-apt-root.html"},{"title":"Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars","summary":"The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected c","cat":"research","ts":1794223673000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/default-adminadmin-server-password.html"},{"title":"Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety","summary":"Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The att","cat":"breach","ts":1794221785000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/web3auth-flaw-exploited-to-steal-keplr.html"},{"title":"LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks","summary":"Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said yesterday. It has several security fixes","cat":"research","ts":1794218481000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/lnbits-urges-all-operators-to-shut-down.html"},{"title":"Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records","summary":"A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis's Threat Research Unit said last week. The agents also found a Taipei fire d","cat":"vulnerability","ts":1794214910000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html"},{"title":"Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting Room","summary":"The OpenAI engineer who was arrested and charged last month for planting a covert audio recording device in the company's office has pleaded not guilty. According to reports from Bloomberg and CNBC, S","cat":"research","ts":1794207948000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/former-openai-engineer-pleads-not.html"},{"title":"U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses","summary":"U.S. government agencies have warned that threat actors are actively targeting industrial refrigeration and cold-chain monitoring systems globally with an aim to cause service disruptions, fire hazard","cat":"research","ts":1794204910000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/us-agencies-warn-refrigeration.html"},{"title":"CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation","summary":"The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog, following rep","cat":"vulnerability","ts":1794204324000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/cisa-flags-sonicwall-sonicos-mfa-bypass.html"},{"title":"Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub","summary":"Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. When a user selects \"Yes, and don't ask a","cat":"research","ts":1794033857000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html"},{"title":"UK Wades Into Tech Sovereignty Amid AI Policy Changes","summary":"The UK is betting on domestic AI and cyber investment to reduce reliance on US tech — but security leaders question whether the funding is too fragmented and too late.","cat":"research","ts":1794000456000,"source":"Dark Reading","link":"https://www.darkreading.com/cybersecurity-operations/uk-tech-sovereignty-ai-policy"},{"title":"AI Gave Your Incident Archive a Second Job","summary":"Security records are increasingly being used by vendors to train their models, creating new risks for enterprises.","cat":"research","ts":1793989650000,"source":"Dark Reading","link":"https://www.darkreading.com/cyber-risk/ai-gave-your-incident-archive-second-job"},{"title":"Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time","summary":"Some WordPress sites can still be attacked while they install the fix for an actively exploited flaw, according to Umut Bayram, the Picus Security researcher who found it. The update that installs the","cat":"vulnerability","ts":1793981318000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/installing-fix-for-exploited-wordpress.html"},{"title":"Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot","summary":"Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian. The vulnerability, ","cat":"vulnerability","ts":1793978509000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/hackers-exploited-openssh-sshole-flaw.html"},{"title":"OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits","summary":"OpenAI on Thursday unveiled GPT‑6 Cyber, which it described as a major step forward in security research that brings together stronger cybersecurity capabilities with a step-change improvement in mode","cat":"vulnerability","ts":1793977112000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/openai-launches-gpt-6-cyber-after-ai.html"},{"title":"Why Europe's Freezer Hacks Spread So Far, So Fast","summary":"Europe's supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale.","cat":"research","ts":1793973600000,"source":"Dark Reading","link":"https://www.darkreading.com/ics-ot-security/europes-freezer-hacks-spread-so-far-so-fast"},{"title":"Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It","summary":"A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates. The fixed build, 1","cat":"vulnerability","ts":1793966803000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/microsoft-paint-rce-fix-now-available.html"},{"title":"Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers","summary":"A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person's computer, researchers at Forever Security, an endpoint security company, showed in a test. The at","cat":"vulnerability","ts":1793966795000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/malicious-browser-extensions-could-use.html"},{"title":"The Flood is Coming And The Pipes Were Already Full","summary":"An update on Athena, and some unsolicited predictions on what's coming next On Saturday, Dario Amodei published We Must Pace the Frontier. I agree with him. Go read it if you haven't. I've spent the s","cat":"research","ts":1793964600000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/the-flood-is-coming-and-pipes-were.html"},{"title":"UK Warns Its Critical Infrastructure Faces Grave Risk","summary":"Britain's new Labour-led government is making a concerted push to get ahead of the AI risks to its national networks and the industrial complex.","cat":"research","ts":1793955600000,"source":"Dark Reading","link":"https://www.darkreading.com/cybersecurity-operations/uk-warns-critical-infrastructure-grave-risk"},{"title":"Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services","summary":"Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for ","cat":"breach","ts":1793952289000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/chainalysis-breach-exposes-all-users.html"},{"title":"Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs","summary":"A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at QiAnXin's XLab said this week. The backdoored web ","cat":"malware","ts":1793944734000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/hackers-hide-linux-backdoor-in-control.html"},{"title":"Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login","summary":"Two flaws in Barracuda's Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with no login required. The company released p","cat":"vulnerability","ts":1793943550000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/experts-demonstrate-barracuda-email.html"},{"title":"Operação de influência russa tem como alvo generalizado a América Latina","summary":"A operação, que contou com o uso de inteligência artificial, utilizou e-mails falsos, documentos governamentais falsificados e a criação de uma organização local para atacar escolas no Peru e no Equad","cat":"research","ts":1793916803000,"source":"Dark Reading","link":"https://www.darkreading.com/cyberattacks-data-breaches/opera-o-de-influ-ncia-russa-tem-como-alvo-generalizado-a-am-rica-latina"},{"title":"US Government Email Systems Open to Abuse Thanks to Typos","summary":"Erroneous or outdated DNS records can give attackers surprising powers over organizations' email systems.","cat":"research","ts":1793914505000,"source":"Dark Reading","link":"https://www.darkreading.com/cybersecurity-operations/us-government-email-systems-abuse-typos"}]}