Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation

The Hacker News - Nov 11, 2026

Zoom has released software updates to address two security flaws impacting Zoom Workplace for Windows, including a critical bug that could result in privilege escalation on affected systems. The vulnerabilities are listed below - CVE-2026-108186 (CVSS score: 9.6) - An improper input validation vulnerability that could allow an unauthenticated user to conduct an escalation of privilege via

Read full article

More News

Nov 11, 2026

AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets

Cybersecurity researchers have disclosed details of a campaign in which an emerging agentic penetration testing platform called AntiFox has been used to steal Amazon Web Services (AWS) credentials and pivot laterally into compromised environments. "In several recently observed intrusions, Alibaba Cloud systems hosting AntiFox interfaces were associated with confirmed malicious actions against

Nov 11, 2026

Nvidia Scandal Puts Lori Huang, Jensen Huang’s Wife, In the Spotlight

Lori Huang, who has been married to the Nvidia chief executive for more than 40 years, stands out among tech titan spouses for how private she has been.

Nov 11, 2026

Could travel’s AEO opportunity top $120 billion a year?

If AI shapes where travellers spend one dollar in ten online, it could influence $120 billion in annual bookings. Raven’s research across 101 airlines shows why the company that earns the recommendation may be different from the one that makes the sale.

Nov 11, 2026

Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits

Threat actors have been observed targeting Qlik Sense servers to unsuccessfully deliver PowerShell reverse shell commands against multiple environments in October 2026. Cynet's CyOps and Research teams said they identified the suspicious activity in October 2026 against several E.U.-based customers within a narrow window of just over three minutes. The activity has been found to share some

Nov 11, 2026

‘Fight Harder,’ U.N. Chief António Guterres Implores, Rousing Climate Ambassadors at COP31

The United Nations secretary general, António Guterres, spoke at COP31, a meeting aimed at reducing emissions, amid a sharp drop in attendance by world leaders.

Nov 11, 2026

China’s Huawei to roll out new smartphone brand Osta, 6 years after giving up Honor

Huawei Technologies is preparing to launch a new smartphone brand, doubling down on its hard-won domestic comeback six years after spinning off budget marque Honor under the weight of US sanctions. Richard Yu Chengdong, chairman of Huawei’s Consumer Business Group, confirmed in a social media post on Wednesday that the company would officially debut Osta, known as “Xingmang” in Chinese, on November 20. The unveiling will coincide with Huawei’s latest electric vehicle launches, according to Yu’s...

Nov 11, 2026

Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords

Of the 37,571 Grok-built apps that security company Claroc found online, 35,578 were open to anyone without a sign-in, the researchers said yesterday. They included 24 apps built by staff at the social network X and at SpaceXSI, the company that makes the Grok AI assistant. Most of the open apps were games, landing pages, and calculators, but about 1 in 10 contained internal business or

Nov 11, 2026

We Built An Agent That Broke All of Our Security Rules. Here's What We Learned.

We tell customers three things about securing AI agents: they need their own identities, access that fits the job they’re given, and traceability that’s separate from any human’s. That was true for us at Token as well. Then, we built an agent that broke all three by default. This helped us think through how such agents should be defended. When a browser agent acts inside a user’s authenticated

Nov 11, 2026

eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise

The in-house Python script behind eMudhra's October key compromise has now cost the company 8 more of its intermediate certificate authorities (CAs), even though it did not weaken their keys. Each intermediate CA has its own private key, which the company uses to sign the certificates it issues. The 8 intermediate CAs compromised in October had a different problem: a single line in the script

Nov 11, 2026

Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation

More News

AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets

Nvidia Scandal Puts Lori Huang, Jensen Huang’s Wife, In the Spotlight

Could travel’s AEO opportunity top $120 billion a year?

Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits

‘Fight Harder,’ U.N. Chief António Guterres Implores, Rousing Climate Ambassadors at COP31

China’s Huawei to roll out new smartphone brand Osta, 6 years after giving up Honor

Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords

We Built An Agent That Broke All of Our Security Rules. Here's What We Learned.

eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise

India ranked an AI Rising Contender by BCG, built on talent rather than compute

New Indian mega library rocked by scandal over 'AI-generated books'

Analysis-Binance hack reveals cryptos uphill battle against hackers

Recommended

Silicon Valley Tech Allies Support Jensen Huang

Samsung One UI 9.5 May Bring Call Recording to WhatsApp, Telegram

Across Protocol Recovers Website After Hackers Seize Control of Domain

Airtel Beats Jio and BSNL in Internet Speed and Reliability, Says Opensignal Report

Adobe and Google Expand Partnership With Gemini AI Models, Photoshop Features

Google November 2026 Pixel Drop Brings Gemini Intelligence to Pixel 10 Series; Pixel Tag Goes on Sale

Samsung Tipped to Be Working on Vertically Expandable Phone With Sliding Display

Initia Confirms Another Hack as Attackers Steal $3.27 Million in Three Weeks

Bay Raises $50 Million to Control What Enterprise AI Agents Can Do

Telegram’s New Bot API Update Turns Messages Into Interactive Mini-Apps, Adds Support for Crypto Payments

Dreeze Emerges From Stealth With $33M to Rebuild Cloud Apps After Cyberattacks