N-able has taken its N-central platform offline after discovering 33 security flaws, including several that are classified as zero-days. These vulnerabilities could allow attackers to take control of systems using the platform. In response to the threat, N-able has released a hotfix to help mitigate the risks associated with these flaws. This situation is significant as it affects users relying on the N-central platform for remote monitoring and management, raising concerns about the security of their systems. Companies using this platform should apply the hotfix as soon as possible to safeguard against potential exploitation.
Maersk has confirmed a data breach after a threat actor accessed a legacy system that the company acquired in a previous purchase. The hackers extracted sensitive data from this system and are demanding a ransom of $5 million in exchange for not releasing the information. This incident raises concerns about how well companies safeguard inherited systems, especially those that may not be fully integrated or updated. The breach could have significant implications for Maersk's operations and reputation, as well as for partners and clients who rely on the company's logistics services. The situation is still developing, and the company is likely assessing the full impact of this breach.
Zoom has issued software updates to fix two security vulnerabilities in Zoom Workplace for Windows, including a critical flaw identified as CVE-2026-108186. This vulnerability has a high severity score of 9.6 and involves improper input validation, which could allow an unauthenticated user to gain elevated privileges on affected systems. Users of Zoom Workplace for Windows should update their software promptly to protect against potential attacks that exploit this vulnerability. The existence of this flaw raises concerns about the security of user data and system integrity, making it crucial for organizations to stay vigilant and ensure their applications are up to date.
Researchers have found that Linux eBPF rootkits are gaining traction among cybercriminals, who are utilizing these advanced techniques to conceal malicious activities on systems without needing to load traditional kernel modules. This method allows attackers to evade detection by conventional security measures. The information is being actively shared in underground forums, where hackers are posting source code, tutorials, and exploits specifically targeting Linux environments. This development is concerning for organizations that rely on Linux systems, as the ability to hide harmful actions makes it significantly harder for security teams to identify and respond to intrusions. As these rootkits become more prevalent, companies using Linux must enhance their security protocols to defend against these stealthy threats.
N-able has released hotfixes to address serious zero-day vulnerabilities in its N-central remote monitoring and management (RMM) platform. These vulnerabilities were publicly disclosed over the weekend, prompting the company to take affected hosted environments offline to mitigate potential risks. Users of the N-central platform should apply these hotfixes promptly to secure their systems against possible exploitation. The situation emphasizes the importance of timely updates in the face of emerging security threats, as attackers often seek to exploit newly discovered vulnerabilities. This incident serves as a reminder for organizations using this platform to remain vigilant and proactive in their cybersecurity practices.
A recent security review by Claroc revealed that over 35,000 apps built using the Grok platform were publicly accessible without any sign-in requirements. Out of 37,571 apps examined, 35,578 were found to be open, including 24 developed by employees of X, the social media network, and SpaceXSI, the company behind the Grok AI assistant. While many of these apps were benign, such as games and calculators, approximately 10% contained sensitive internal business data, raising serious concerns about data exposure. This incident highlights a significant risk for companies that may unintentionally expose confidential information through poorly secured applications. Organizations using Grok-built apps need to take immediate action to secure their applications and protect user data.
Token, a company focused on AI agents, built a new agent that inadvertently violated its own security rules regarding identity, access control, and traceability. This agent operated using a user's authenticated browser session, exposing potential risks associated with AI integration. The team at Token realized that these oversights could lead to significant security vulnerabilities, prompting them to rethink their defensive strategies for AI agents. This incident serves as a cautionary tale for companies developing similar technology, emphasizing the need for strict adherence to security protocols to prevent unauthorized access and data breaches. As AI continues to evolve, ensuring robust security measures is crucial for safeguarding user information.
eMudhra has revoked eight of its intermediate certificate authorities (CAs) following a key compromise incident in October. Initially, the company believed these CAs were unaffected, but a flaw in an internal Python script led to their revocation. Each CA has its own private key, which is used to sign the certificates eMudhra issues. Although the keys themselves were not compromised, the issue with the script raised concerns about the integrity of the certificates. This situation affects users relying on eMudhra's certificates for secure communications, highlighting ongoing challenges in certificate management and security practices.
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about a serious vulnerability in Cisco's BroadWorks platform that is currently being exploited by hackers. This high-severity flaw could allow attackers to compromise systems and access sensitive information. Organizations using Cisco BroadWorks, particularly those in telecommunications, should be on high alert due to the active exploitation of this vulnerability. It's crucial for these companies to take immediate action to safeguard their networks and data from potential breaches. CISA's warning emphasizes the urgency of addressing this issue to prevent any adverse impacts on operations and user security.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged two vulnerabilities in Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder, noting that they are currently being exploited in the wild. The first vulnerability, identified as CVE-2026-20320, has a CVSS score of 7.5 and involves improper restrictions on XML external entities. This means attackers could potentially manipulate XML data to gain unauthorized access or execute malicious commands. Organizations using these products should take immediate action to secure their systems, as the vulnerabilities can lead to significant data breaches or system compromises. Patches are available, but the urgency is heightened due to ongoing exploitation.
The open-source Artex framework, along with 45 other penetration testing tools, has been repurposed by hackers to conduct credential attacks and cloud breaches at unprecedented speeds. This misuse allows attackers to target various industries, raising significant concerns about security among companies that utilize these tools. Researchers have highlighted that the forks of Artex are not just theoretical threats; they are actively being exploited, making it crucial for organizations to be vigilant. As these tools can execute attacks swiftly across different platforms, the risk of widespread breaches increases. Companies using Artex or similar tools should review their security measures to mitigate potential risks.
F-Secure has identified 26 potential ways artificial intelligence can cause harm to consumers. Their new AI Harms Taxonomy outlines various risks, such as misleading information from chatbots and the dangers posed by compromised autonomous agents. The research emphasizes the need for defenses at different points in AI systems to mitigate these risks. By pinpointing where potential harms can occur, the study aims to help developers and companies implement better protective measures. This is crucial as AI technologies become more integrated into daily life, making it essential for users to understand the possible threats and for companies to prioritize security in their AI applications.
Microsoft has released the Windows 10 KB5131096 extended security update, which includes the latest security patches for November 2026. This update addresses several vulnerabilities that could potentially be exploited by attackers, along with various bug fixes and improvements. Users running Windows 10 should prioritize installing this update to ensure their systems are protected against any known threats. Keeping software up to date is crucial for maintaining security and preventing unauthorized access. The update is part of Microsoft's ongoing effort to provide support and security for its operating system.
A vulnerability in Git, tracked as CVE-2026-111760, allows malicious repositories to execute arbitrary code on users' systems during recursive cloning. This issue arises from an integer truncation in how Git manages its index, particularly affecting the cloning of repositories along with their submodules. Git has addressed this flaw in version 2.56.1 and has also released fixes for earlier versions ranging from 2.50 to 2.55. Users who clone repositories recursively should update to the latest version to protect themselves from potential exploitation. This incident highlights the risks associated with open-source software, where malicious actors can exploit vulnerabilities to execute harmful code on unsuspecting users' machines.
Last Sunday, an attacker exploited a remote code execution vulnerability in SGLang, an open-source inference engine, to gain unauthorized access to a NEAR AI inference server. This breach allowed the attacker to execute code and potentially view sensitive requests being processed on the server, including those made in a confidential mode designed to enhance privacy through a trusted execution environment. As a result, data from 18 agents and around 100 users was compromised. This incident raises serious concerns about the security of open-source software and the potential risks involved in handling sensitive data. Companies using SGLang or similar technologies need to assess their security measures to prevent future breaches.