{"updated":1794330860739,"items":[{"title":"Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor","summary":"Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in Octobe","cat":"vulnerability","ts":1794326455000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/attackers-exploit-ahsaycbs-flaws-to.html"},{"title":"Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America","summary":"The threat actor known as Blind Eagle has resurfaced with a new campaign targeting organizations in Latin America through judicial and administrative-themed phishing lures to deliver a remote access t","cat":"malware","ts":1794326324000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/blind-eagle-uses-fake-court-notices-to.html"},{"title":"Fireworks AI Breach Widens to Expose Customer Billing Data and Incomplete Model Weights","summary":"Fireworks AI disclosed on Monday that its investigation into a security incident first reported early last month uncovered further malicious activity, affecting account and billing information, alongs","cat":"breach","ts":1794324839000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/fireworks-ai-breach-widens-to-expose.html"},{"title":"AI Makes Reverse Engineering Mainstream Software Malware Far Easier","summary":"Researchers unpacked, mapped, and recreated complex software and the Turla malware, raising fresh concerns for defenders.","cat":"malware","ts":1794315600000,"source":"Dark Reading","link":"https://www.darkreading.com/application-security/ai-reverse-engineering-apps"},{"title":"Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed","summary":"An iOS sandbox escape published on GitHub lets an app read other apps' files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login credentials at risk of exposure to malici","cat":"research","ts":1794312931000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/binance-warns-of-ios-sandbox-escape.html"},{"title":"Beyond the Alert: The Case for Rich Network Data","summary":"At some point your security will fail. This isn’t pessimism. It’s not because your team and tools aren’t sophisticated enough. It’s the reason we have detections in the first place. And, it’s why once","cat":"research","ts":1794310693000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/beyond-alert-case-for-rich-network-data.html"},{"title":"Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities","summary":"An iMessage flaw could let a remote attacker join a group chat and receive its messages, Apple said yesterday, and it released updates to fix it. The updates also fix a separate iMessage flaw that cou","cat":"vulnerability","ts":1794305811000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/apple-patches-imessage-group-chat.html"},{"title":"Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers","summary":"The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that's used to break into victims' Microsoft Exch","cat":"nation-state","ts":1794305249000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/russian-turla-hackers-use-new-cereal.html"},{"title":"SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution","summary":"Four flaws that attackers could exploit without logging in were fixed today as part of SAP's monthly Security Patch Day—the vendor rates all four 10.0, the maximum CVSS score. Three are in the SAP Net","cat":"vulnerability","ts":1794304960000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/sap-patches-four-cvss-100-flaws.html"},{"title":"France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites","summary":"An October cyberattack on refrigeration controllers at about 700 French retail sites was carried out by a cyber unit of Iran's Islamic Revolutionary Guard Corps (IRGC), the French government said yest","cat":"nation-state","ts":1794301700000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/france-blames-iran-for-sabotage-attack.html"},{"title":"Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark","summary":"Anthropic on Monday released Claude Fable 5.2 and Claude Mythos 5.2 models, which it said exhibit improvements in coding, reasoning, and vision. During pre-release training, the large language models ","cat":"research","ts":1794298574000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/anthropics-claude-fable-52-beats-gpt-6.html"},{"title":"Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026","summary":"Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, assigned the CVE identifie","cat":"vulnerability","ts":1794293574000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/google-issues-chrome-security-update.html"},{"title":"N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits","summary":"N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice following the public disclosure of over 30 vulnerabil","cat":"vulnerability","ts":1794293076000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/n-able-takes-hosted-n-central-offline.html"},{"title":"CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws","summary":"The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added four security flaws impacting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Expl","cat":"vulnerability","ts":1794292302000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/cisa-warns-of-active-exploitation-of.html"},{"title":"CISA Announces Enhanced Reporting Form for Cyber Incidents","summary":"New questionnaire captures critical data and information that improves the agency’s ability to assess incidents, identify trends and prioritize response actions.","cat":"research","ts":1794260300000,"source":"Dark Reading","link":"https://www.darkreading.com/cyberattacks-data-breaches/cisa-announces-enhanced-reporting-form-cyber-incidents"},{"title":"Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion","summary":"Last month, Microsoft disclosed a vulnerability in Microsoft Paint, but messaging regarding a patch was unclear.","cat":"vulnerability","ts":1794258744000,"source":"Dark Reading","link":"https://www.darkreading.com/application-security/microsoft-rce-bug-windows-paint-confusion"},{"title":"Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India","summary":"Inaugural edition by Informa Markets in India brings together leading researchers, security practitioners and industry decision makers for four days of cutting-edge research, technical exchange and st","cat":"research","ts":1794255596000,"source":"Dark Reading","link":"https://www.darkreading.com/cybersecurity-operations/black-hat-india-2026-landmark-debut"},{"title":"Attackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux","summary":"Attackers can exploit a flaw in Claude's document-processing tool by creating a temporary file that Anthropic's AI assistant can access and run on a user's machine.","cat":"vulnerability","ts":1794247710000,"source":"Dark Reading","link":"https://www.darkreading.com/endpoint-security/attackers-claude-office-party-flaw-malicious-code-linux"},{"title":"Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data","summary":"An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today. The attacker used","cat":"breach","ts":1794246681000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/hackers-exploit-quboles-trusted-aws.html"},{"title":"Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware","summary":"Attackers used the Ethersphere project's own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: bee-js 13.3.0 and Swarm Desktop 0.56.2. B","cat":"malware","ts":1794245788000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/hackers-compromise-etherspheres-bee-js.html"},{"title":"PwC's CISO on AI, Robots What's Next for Security","summary":"As AI accelerates change across the enterprise, PwC's James Shira explains why security teams must rethink their approach to risk and adapt their strategies.","cat":"research","ts":1794244643000,"source":"Dark Reading","link":"https://www.darkreading.com/cybersecurity-operations/pwc-ciso-ai-robots-security"},{"title":"NIST: Solo Shouldn't Mean Less Secure","summary":"New guidance provides a basic framework for less-technical solo business owners, but it may miss the mark on how to secure technology that requires no human oversight.","cat":"research","ts":1794239170000,"source":"Dark Reading","link":"https://www.darkreading.com/cybersecurity-operations/nist-solo-shouldnt-mean-less-secure"},{"title":"Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia","summary":"The South Asian cyber espionage group known as Bitter (aka APT-C-08, APT-Q-37, Hazy Tiger, Orange Yali, T-APT-17, and TA397) has been observed targeting South Asian organizations with a previously unr","cat":"nation-state","ts":1794234689000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/bitter-hackers-deploy-new-paprat.html"},{"title":"⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More","summary":"A system doesn't always need a complicated bug to let someone in. Sometimes, a blank password is enough. That's one of the bigger stories this week. And it gets worse when the tools meant to keep syst","cat":"vulnerability","ts":1794230905000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/weekly-recap-sshole-exploited-apt-root.html"},{"title":"Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars","summary":"The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected c","cat":"research","ts":1794223673000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/default-adminadmin-server-password.html"},{"title":"Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety","summary":"Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The att","cat":"breach","ts":1794221785000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/web3auth-flaw-exploited-to-steal-keplr.html"},{"title":"LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks","summary":"Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said yesterday. It has several security fixes","cat":"research","ts":1794218481000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/lnbits-urges-all-operators-to-shut-down.html"},{"title":"Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records","summary":"A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis's Threat Research Unit said last week. The agents also found a Taipei fire d","cat":"vulnerability","ts":1794214910000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/taiwan-based-hacker-used-bossai-ai.html"},{"title":"Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting Room","summary":"The OpenAI engineer who was arrested and charged last month for planting a covert audio recording device in the company's office has pleaded not guilty. According to reports from Bloomberg and CNBC, S","cat":"research","ts":1794207948000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/former-openai-engineer-pleads-not.html"},{"title":"U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses","summary":"U.S. government agencies have warned that threat actors are actively targeting industrial refrigeration and cold-chain monitoring systems globally with an aim to cause service disruptions, fire hazard","cat":"research","ts":1794204910000,"source":"The Hacker News","link":"https://thehackernews.com/2026/11/us-agencies-warn-refrigeration.html"}]}