The Hacker News چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۷:۳۱

Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits

Threat actors have been observed targeting Qlik Sense servers to unsuccessfully deliver PowerShell reverse shell commands against multiple environments in October 2026. Cynet's CyOps and Research teams said they identified the suspicious activity in October 2026 against several E.U.-based customers within a narrow window of just over three minutes. The activity has been found to share some

Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

The Hacker News چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۵:۴۹

Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords

Of the 37,571 Grok-built apps that security company Claroc found online, 35,578 were open to anyone without a sign-in, the researchers said yesterday. They included 24 apps built by staff at the social network X and at SpaceXSI, the company that makes the Grok AI assistant. Most of the open apps were games, landing pages, and calculators, but about 1 in 10 contained internal business or

Source

The Hacker News چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۵:۳۱

We Built An Agent That Broke All of Our Security Rules. Here's What We Learned.

We tell customers three things about securing AI agents: they need their own identities, access that fits the job they’re given, and traceability that’s separate from any human’s. That was true for us at Token as well. Then, we built an agent that broke all three by default. This helped us think through how such agents should be defended. When a browser agent acts inside a user’s authenticated

Source

The Hacker News چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۵:۳۰

eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise

The in-house Python script behind eMudhra's October key compromise has now cost the company 8 more of its intermediate certificate authorities (CAs), even though it did not weaken their keys. Each intermediate CA has its own private key, which the company uses to sign the certificates it issues. The 8 intermediate CAs compromised in October had a different problem: a single line in the script

Programming & Languages

Source

The Hacker News چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۱:۴۷

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume has exceeded 1,000 flaws. These cover 726 flaws in Windows, 174 in Office, 61 in Developer Tools, 59 in SQL Server, 53 in Developer Tools, and 27 in SharePoint Server. The patches also include 165 non-Microsoft-issued CVE identifiers.

Vulnerabilities & Zero-Day Databases Operating Systems

Source