Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trig... 2026-11-12 09:25:0 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com crash election database replica readconcern

Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data Vulnerability / Web SecurityA flaw fixed in Node.js this week lets unauthenticated clients crash... 2026-11-12 08:20:37 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com 2026 client memory crash stricter

Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a secret s... 2026-11-12 06:42:47 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com stealer github repository wfx attacker

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely Vulnerability / Web SecurityA critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can... 2026-11-12 05:12:26 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com 2026 rhsa http2 security directive

ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients ConnectWise has taken the precautionary step of disabling five third-party extensions in partner... 2026-11-12 04:39:48 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com workstation technician huntress sckit

Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation Vulnerability / Software SecurityZoom has released software updates to address two security flaws... 2026-11-11 16:12:46 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com 2026 windows workplace 108186 software

AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets Cybersecurity researchers have disclosed details of a campaign in which an emerging agentic penet... 2026-11-11 15:34:27 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com artex antifox agentic wolf arctic

Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits Cyber Attack / RansomwareThreat actors have been observed targeting Qlik Sense servers to unsucces... 2026-11-11 14:1:0 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com reverse qlik powershell cynet cactus

Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords Of the 37,571 Grok-built apps that security company Claroc found online, 35,578 were open to anyone... 2026-11-11 12:19:40 | 阅读: 18 | 收藏 | The Hacker News - thehackernews.com grok subdomain spacexsi creator builders

We Built An Agent That Broke All of Our Security Rules. Here's What We Learned. We tell customers three things about securing AI agents: they need their own identities, access tha... 2026-11-11 12:1:59 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com agents rehearsal driving delegation security

eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise The in-house Python script behind eMudhra's October key compromise has now cost the company 8 more... 2026-11-11 12:0:53 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com cas hsms revoked g1 em

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes Vulnerability / Windows SecurityMicrosoft on Tuesday released patches for a total of 1,259 vulnera... 2026-11-11 08:17:53 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com microsoft 2026 windows attacker exploited

Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges AI provider keys that customers stored on Railway were stolen in an October breach and used to comm... 2026-11-11 07:49:4 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com attacker refund database railway machine

Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons An AI model can be given a hidden backdoor by editing fewer than 10 of its rarely used neurons, wit... 2026-11-11 07:21:5 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com edited neurons microsoft tuned checkpoint

Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches Vulnerability / Enterprise SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA... 2026-11-11 06:4:2 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com 2026 security broadworks exploited

Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones Vulnerability / Software SecurityA flaw in Git can let a malicious repository run an attacker's co... 2026-11-10 19:23:10 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com github 2026 repository attacker submodules

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users Vulnerability / Cloud SecurityAn attacker exploited a remote code execution flaw in SGLang, an ope... 2026-11-10 19:19:39 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com attacker sglang agents cloud inference

Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access Vulnerability / Cyber AttackFrench software company Vates VMS has warned of a critical security vu... 2026-11-10 18:12:21 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com vates vms exploited xen

Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Three distinct threat activity clusters with shared infrastructure and malware code similarities ha... 2026-11-10 17:43:23 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com windows sparrowdoor copperdoor backdoors copperdns

Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor Vulnerability / Cyber AttackCybersecurity researchers have disclosed details of an attack that exp... 2026-11-10 16:0:55 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com 2026 xmrig shells backup