# BleepingComputer: latest headlines

> HelixNews · Web page: https://helixnews.one/source/bleepingcomputer · All pages for agents: https://helixnews.one/llms.txt

- Type: Specialist
- Country: United States
- Website: https://bleepingcomputer.com
- About 3.9 headlines a day
- First to report 75% of 4 shared stories (last 36 hours)

Mostly covers: Tech (93%)

## Latest headlines

- Nov 11, 2026, 9:12 AM: [Hackers use AntiFox AI agents in AWS credential-theft attacks](<https://www.bleepingcomputer.com/news/security/hackers-use-antifox-ai-agents-in-aws-credential-theft-attacks/>) · [All coverage](https://helixnews.one/story/1050242.md)
  Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services and AWS environments.
- Nov 11, 2026, 9:01 AM: [eBPF Rootkits: Why Underground Actors Are Taking Notice](<https://www.bleepingcomputer.com/news/security/ebpf-rootkits-why-underground-actors-are-taking-notice/>) · [All coverage](https://helixnews.one/story/1039815.md)
  Linux eBPF rootkits can hide malicious activity and evade traditional detection methods without loading kernel modules. Flare reveals how these techniques are spreading through underground forums, where threat actors are sharing rootkit source code, tutorials, and exploits targeting Linux systems.
- Nov 11, 2026, 6:32 AM: [N-able releases security hotfixes for zero-day vulnerabilities](<https://www.bleepingcomputer.com/news/security/n-able-releases-security-hotfixes-for-zero-day-vulnerabilities/>) · [All coverage](https://helixnews.one/story/920643.md)
  N-able released hotfixes to address zero-day bugs affecting its N-central remote monitoring and management (RMM) platform, which were publicly disclosed over the weekend and forced it to take vulnerable hosted environments offline.
- Nov 11, 2026, 5:18 AM: [Microsoft fixes audio issues caused by September security updates](<https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-usb-audio-issues-caused-by-september-security-updates/>) · [All coverage](https://helixnews.one/story/863403.md)
  Microsoft says the November 2026 cumulative updates resolve USB audio issues plaguing Windows users who have installed security updates released since September.
- Nov 11, 2026, 4:12 AM: [CISA flags Cisco BroadWorks flaw as actively exploited in attacks](<https://www.bleepingcomputer.com/news/security/cisa-flags-cisco-broadworks-flaw-as-actively-exploited-in-attacks/>) · [All coverage](https://helixnews.one/story/810073.md)
  The US Cybersecurity and Infrastructure Security Agency (CISA) warned on Tuesday that hackers are now exploiting a high-severity Cisco BroadWorks vulnerability in attacks.
- Nov 11, 2026, 3:07 AM: [Microsoft fixes Exchange sign-ins broken by Windows Server updates](<https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-exchange-sign-ins-broken-by-october-windows-server-updates/>) · [All coverage](https://helixnews.one/story/761621.md)
  Microsoft has fixed Outlook sign-in and mail delivery issues on Exchange Server systems after installing the October 2026 Windows Server security updates.
- Nov 10, 2026, 4:20 PM: [Railway breach leads to $740,000 in fraudulent AI charges](<https://www.bleepingcomputer.com/news/apple/railway-breach-leads-to-740-000-in-fraudulent-ai-charges/>) · [All coverage](https://helixnews.one/story/263594.md)
  Cloud hosting provider Railway says hackers exploited vulnerabilities in its infrastructure to steal customer authentication secrets and generate approximately $740,000 in fraudulent AI usage, potentially exposing credentials for up to 100,000 workspaces.
- Nov 10, 2026, 2:54 PM: [Japanese furniture giant Nitori says hackers stole 37.6M customer records](<https://www.bleepingcomputer.com/news/security/japanese-furniture-giant-nitori-says-hackers-stole-376m-customer-records/>) · [All coverage](https://helixnews.one/story/192107.md)
  Nitori, a major Japanese furniture and home accessories retailer, discovered that an attacker accessed a system on its network and may have stolen 37.62 million customer records.
- Nov 10, 2026, 2:04 PM: [Microsoft releases Windows 10 KB5131096 extended security update](<https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5131096-extended-security-update/>) · [All coverage](https://helixnews.one/story/153727.md)
  Microsoft released the Windows 10 KB5131096 extended security update, which includes this month's November 2026 Patch Tuesday fixes and a few bug fixes and changes.
- Nov 10, 2026, 1:31 PM: [Hackers exploit trusted AWS access to breach multiple cloud environments](<https://www.bleepingcomputer.com/news/security/hackers-exploit-trusted-aws-access-to-breach-multiple-cloud-environments/>) · [All coverage](https://helixnews.one/story/126031.md)
  A threat actor used compromised identity and access management (IAM) credentials for a Qubole big data platform's AWS account to access and exfiltrate data from multiple customers' AWS environments.
- Nov 10, 2026, 1:07 PM: [Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day](<https://www.bleepingcomputer.com/news/microsoft/microsoft-november-2026-patch-tuesday-fixes-1-235-flaws-outlook-zero-day/>) · [All coverage](https://helixnews.one/story/105714.md)
  Today is Microsoft's November 2026 Patch Tuesday, with security updates addressing a record-breaking 1,235 flaws, including one actively exploited Microsoft Outlook zero-day vulnerability.
- Nov 10, 2026, 12:33 PM: [Windows 11 KB5132061 & KB5131087 cumulative updates released](<https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5132061-and-kb5131087-cumulative-updates-released/>) · [All coverage](https://helixnews.one/story/80867.md)
  Microsoft has released the Patch Tuesday Windows 11 and cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security vulnerabilities and bugs, and add new features.
- Nov 10, 2026, 10:17 AM: [Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers](<https://www.bleepingcomputer.com/news/security/critical-xen-orchestra-auth-bypass-flaw-exploited-to-hijack-vm-servers/>) · [All coverage](https://helixnews.one/story/6054.md)
  A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts.
- Nov 10, 2026, 9:59 AM: [Binance warns of iOS flaw that could leak crypto wallet secrets](<https://www.bleepingcomputer.com/news/security/binance-warns-of-ios-flaw-that-could-leak-crypto-wallet-secrets/>) · [All coverage](https://helixnews.one/story/6055.md)
  Binance is warning about a vulnerability in Apple's iOS 26.7.1, 27.0.1, and 27.2 that could allow third-party apps to read private files stored by other apps, including cryptocurrency seed phrases, secret keys, and login credentials.
- Nov 10, 2026, 9:01 AM: [Ransomware recovery is now a client retention metric](<https://www.bleepingcomputer.com/news/security/ransomware-recovery-is-now-a-client-retention-metric/>) · [All coverage](https://helixnews.one/story/6056.md)
  Recovering from ransomware doesn't guarantee an MSP will retain its clients, especially when delays, poor communication, and unexpected costs undermine trust. Kaseya examines how disconnected recovery tools create these problems and how integrated workflows can improve response times, transparency, and client retention.
- Nov 10, 2026, 6:07 AM: [SAP patches ICM2SHELL and PROXYGATE maximum severity flaws](<https://www.bleepingcomputer.com/news/security/sap-patches-four-maximum-severity-security-vulnerabilities/>) · [All coverage](https://helixnews.one/story/6057.md)
  SAP patched 35 vulnerabilities in its November 2026 security updates, including four maximum-severity issues affecting its NetWeaver, Web Dispatcher, and Gateway software.
- Nov 10, 2026, 4:10 AM: [Hackers now exploit critical Barracuda ESG flaws to gain root access](<https://www.bleepingcomputer.com/news/security/hackers-exploit-barracuda-email-security-gateway-flaws-to-get-root-access/>) · [All coverage](https://helixnews.one/story/6058.md)
  Cybersecurity company Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway (ESG) vulnerabilities that let them run commands with root privileges.
- Nov 10, 2026, 4:04 AM: [Turla hackers use new Cereal malware to spy on govt Exchange servers](<https://www.bleepingcomputer.com/news/security/turla-hackers-use-new-ceral-malware-to-spy-on-govt-exchange-servers/>) · [All coverage](https://helixnews.one/story/6059.md)
  The Russian state-backed threat group Turla has been using a new malicious toolset called 'Cereal' to intercept emails on Microsoft Exchange servers at government organizations.
- Nov 10, 2026, 2:51 AM: [Google patches eighth Chrome zero-day exploited in attacks this year](<https://www.bleepingcomputer.com/news/security/google-patches-eighth-chrome-zero-day-exploited-in-attacks-this-year/>) · [All coverage](https://helixnews.one/story/6060.md)
  Google has released emergency security updates to patch a new Chrome vulnerability exploited in zero-day attacks, the eighth such flaw since the start of the year.
- Nov 10, 2026, 1:49 AM: [Fireworks AI discloses new breach after cloud provider hack](<https://www.bleepingcomputer.com/news/security/fireworks-ai-discloses-new-breach-after-cloud-provider-hack/>) · [All coverage](https://helixnews.one/story/6061.md)
  AI infrastructure startup Fireworks has disclosed a new security breach in which attackers accessed its development machines after breaching a third-party cloud provider.
- Nov 9, 2026, 5:52 PM: [Vanderbilt University hit in BYOD ransomware attack, data theft claimed](<https://www.bleepingcomputer.com/news/security/vanderbilt-university-hit-in-byod-ransomware-attack-data-theft-claimed/>) · [All coverage](https://helixnews.one/story/6062.md)
  Vanderbilt University warns it is responding to a cyberattack claimed by the BYOD ransomware gang, which claims to have encrypted the university's databases and stolen sensitive student, employee, and research data.
- Nov 9, 2026, 4:09 PM: [SEGA newsletter data breach exposes 2.2 million email addresses](<https://www.bleepingcomputer.com/news/security/sega-newsletter-data-breach-exposes-22-million-email-addresses/>) · [All coverage](https://helixnews.one/story/6063.md)
  Japanese gaming giant SEGA has disclosed that a data breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2.2 million newsletter subscribers.
- Nov 9, 2026, 3:26 PM: [N-able takes cloud platform offline after 30+ "zero-days" published](<https://www.bleepingcomputer.com/news/security/n-able-takes-cloud-platform-offline-after-30-plus-zero-days-published/>) · [All coverage](https://helixnews.one/story/6064.md)
  N-able has taken its hosted N-central environments offline and urged on-premises customers to shut down their servers after a security researcher publicly disclosed more than 30 alleged zero-day vulnerabilities, including exploits that could let attackers take over vulnerable systems.
- Nov 9, 2026, 3:22 PM: [York University breach exposed personal information dating to 2007](<https://www.bleepingcomputer.com/news/security/york-university-breach-exposed-personal-information-dating-to-2007/>) · [All coverage](https://helixnews.one/story/6065.md)
  York University has announced it suffered a cybersecurity incident in which a threat actor stole personal information people submitted through online forms.
- Nov 9, 2026, 12:32 PM: [France blames Iranian hackers for supermarket attacks that sparked fires](<https://www.bleepingcomputer.com/news/security/france-blames-iranian-hackers-for-supermarket-attacks-that-sparked-fires/>) · [All coverage](https://helixnews.one/story/6066.md)
  France has linked October cyberattacks that disrupted refrigeration systems at more than 700 supermarkets and other retail locations to Iranian state-backed hackers, saying the attacks caused food losses and sparked at least 15 fires.
- Nov 9, 2026, 11:50 AM: [Russian cloud firm Beget rebuilds from scratch after data wiper attack](<https://www.bleepingcomputer.com/news/security/russian-cloud-firm-beget-rebuilds-from-scratch-after-data-wiper-attack/>) · [All coverage](https://helixnews.one/story/6067.md)
  A data-wiping malware attack has forced Russian cloud services provider Beget to rebuild its cloud infrastructure from scratch, the company said.
- Nov 9, 2026, 10:12 AM: [Binance denies data breach after alleged ShinyHunters claims](<https://www.bleepingcomputer.com/news/security/binance-denies-data-breach-after-alleged-shinyhunters-claims/>) · [All coverage](https://helixnews.one/story/6068.md)
  Binance, the world's largest crypto exchange, has denied claims of a new security breach made by a threat actor using the 'ShinyHunters' handle on a newly emerged underground cybercrime forum.