340 results
Zoom published two security bulletins on November 10, 2026, saying improper input validation flaw CVE-2026-108186 in Zoom Workplace for Windows may let an unauthenticated user escalate privileges via network access, rated Critical with CVSS 9.
Fortinet disclosed FortiOS flaw CVE-2026-126259 on November 10, 2026: on devices using HA FGSP with standalone-config-sync or autoscale, an unauthenticated attacker can send crafted HA packets to run commands as super admin, rated Critical with CVSSv3 9.
According to FTV News, Kang Chiao International School's Linkou campus confirmed to parents that its network systems were breached, and several parents and staff received threatening emails signed by the "Osiris ransomware group" .
The Japan Chamber of Commerce and Industry (JCCI) announced on Nov 10 that the external exam management server used for its online tests was accessed without authorization, and data of up to about 980,000 examinees (about 1.
OTC-listed Shen's (8921) said in a November 10 filing that customers of its Jcolor e-commerce platform reported that a third party appears to have improperly obtained data and contacted them by email .
ESET said on November 10 that it found a previously undocumented modular .
Apple released iOS and iPadOS 27.
According to iThome, servers of NETivism, the vendor behind netiCRM, a donation management system used by Taiwanese nonprofits, were breached by an external attacker, and more than 20 organizations including the Awakening Foundation, Citizen Congress Watch, the Judicial Reform Foundation and Taiwan Tongzhi Hotline have issued notices .
CNA reports that Taiwanese online travel agency ezTravel detected an external attack on its member center on Nov 7, and some historical order contact data was improperly obtained, affecting more than 690,000 people .
The Roundcube team released Webmail security updates 1.
NTT Data announced on Nov 9 that the sign-up service for Sumitomo Life's standalone Vitality programs, which it builds and operates under contract, was accessed by a third party and personal data of about 80,000 users leaked .
Japanese furniture retailer Nitori Holdings said on November 9 that it confirmed unauthorized third-party access to a system it manages on November 6 and that up to 37.
BleepingComputer reports that researcher Sean Bales publicly disclosed more than 30 N-able N-central vulnerabilities on Nov 8 without notifying the vendor and released proof-of-concept exploits in a GitHub repository called Able2Shell, the most critical chain using an unauthenticated XXE flaw to run commands on the server and create an admin account .
BleepingComputer reports that a threat actor using the ShinyHunters handle, believed to be impersonating the extortion gang, is selling what they claim are records of 335 million Binance users on a new underground forum and asking $900,000 .
Vanderbilt University said on Nov 9 it is responding to an active cybersecurity incident that may impact university devices, systems and cloud-based services, and that its IT team is investigating and working to contain it .
Ethersphere maintainers said on GitHub that Swarm Desktop 0.
Wiz says an attacker used IAM credentials from an AWS account associated with Qubole between Oct 14 and 26, 2026 to assume IAM roles that multiple customers had created to trust Qubole and enter their AWS environments .
According to United Daily News, a 38-year-old man surnamed Lin in Kaohsiung used AI to write scripts to illegally breach the website backends of government agencies and private enterprises, stealing over 230,000 personal data records of citizens and selling them on the dark web .
Japanese indoor golf school operator Step Golf said in a second notice on Nov 10 that it was accessed without authorization on Oct 23 and 25, and database backup files containing personal data were very likely leaked .
Amplifon Americas said an unauthorized third party obtained files from certain systems between Jan 18 and Feb 8, 2026; it detected suspicious activity on Feb 11 and determined on Oct 6 that personal information may have been affected .