Microsoft patches 1,259 flaws, including an actively exploited Outlook vulnerability that could expose NTLMv2 hashes through crafted files.
Get the latest international news and world events from around the world.
Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges
Railway says stolen AI API keys caused $740,000 in unauthorized charges after attackers decrypted secrets in up to 100,000 workspaces.
Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons
Microsoft demonstrates how editing as few as six AI model neurons can plant backdoors that trigger command execution by agents.
Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones
Git fixes six flaws, including CVE-2026–111760, which lets malicious repositories execute code during recursive clones via submodule hooks.
SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI’s inference servers last Sunday.
The attacker could also have seen requests being processed on that server that day, including requests sent in confidential mode, the company said earlier this week. That mode processes requests inside a trusted execution environment (TEE) designed to keep them private even from the company itself.
But the TEE “does not protect against a vulnerability in the software running inside the environment,” the company said. SGLang runs inside the TEE, which is how the attacker could reach requests there.
Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
Hackers are exploiting a critical Xen Orchestra authentication bypass that can grant admin access and lead to XCP-ng node takeover.
Ransomware recovery is now a client retention metric
The ransomware attack is over. Your team has restored the client’s data, brought systems back online and put business operations back on track. From a technical standpoint, the recovery was a success.
But the client still has questions. Why did updates go quiet for two days? What drove the recovery costs up? And where did the 31 hours of emergency labor on the invoice come from?
Recovering from ransomware is only part of the job. Clients also need to know what happened, what recovery involved and what it cost them. When communication falls short or unexpected charges appear, even a technically successful recovery can leave clients questioning the value of their MSP relationship.
Microsoft fixes Exchange sign-ins broken by Windows Server updates
Microsoft has fixed Outlook sign-in and mail delivery issues on Exchange Server systems after installing the October 2026 Windows Server security updates.
Microsoft acknowledged this known issue in mid-October, confirming that users had trouble accessing email or signing in to Outlook after installing the latest updates on systems running Windows Server 2019 and later.
As explained at the time, the sign-in and mail flow issues are caused by a new default limit on the amount of memory Endpoint Mapper uses when handling Endpoint Lookup calls, introduced by the October 2026 updates.
Japanese furniture giant Nitori says hackers stole 37.6M customer records
Nitori, a major Japanese furniture and home accessories retailer, discovered that an attacker accessed a system on its network and may have stolen 37.62 million customer records.
The intrusion was detected on November 6, and the company blocked the unauthorized access. However, an investigation into the incident revealed that the attacker likely had access to the system since mid-October.
Nitori, often called the “IKEA of Japan,” is a major furniture and home furnishings retailer that operates 879 stores in Japan and another 219 stores across China, South Korea, Taiwan, Thailand, Singapore, and Hong Kong. The firm has an annual revenue of $5.8 billion.
Artex: The AI Pen-Test Tool Hackers Turned into a Weapon
Forks of the Artex framework, along with 45 similar pen-testing tools, remain capable of executing attacks and breaches at machine speed.