News Flayer

The Singapore healthcare provider says personal data was leaked in a malicious cyber incident. The Straits Times reports that an affected-customer email listed identity and bank-account details among the information involved.

WorkOS says an AI security agent being evaluated by a researcher unintentionally accessed an internal customer-facing tool. Its update identifies exposed APIs, weak credentials and monitoring gaps.

Revolve says an unauthorized actor may have obtained information about certain shoppers with saved payment cards. SecurityWeek reports that an Indiana notification lists more than 1.5 million affected individuals.

Taiwan travel agency ezTravel says some past booking information was improperly accessed. CNA reports that more than 690,000 members were affected.

York University says an unauthorized actor stole personal information from some departmental forms. Affected submission periods vary, with the earliest listed beginning in 2007.

WPScan says a flaw in WP Duplicate through version 1.1.11 is being exploited and can allow unauthenticated file uploads and code execution. Its advisory lists no known fix.

QNAP says some users reported apparent Plex Media Server compromises on their NAS devices. Plex confirms active exploitation and recommends updating to build 1.43.3.10861 or later.

A breach involving Frontline Central and School Health Management affected school employees and students. SecurityWeek reports that an Indiana filing puts the total above 3 million.

Global News | November 11, 2026 The N-able N-central vulnerabilities prompted the software provider to take its hosted…

CISA has flagged an exploited IBM Aspera Faspex authorization flaw. IBM identifies the affected versions and recommends a patched release, while key details about the attacks remain unknown.

A critical FreeSWITCH flaw can allow commands to run through accepted SIP messages. The project reports exploitation and recommends an update to version 1.11.3 or later.

An actively exploited GPUStack authentication flaw can allow unauthenticated administrators to take control of vulnerable AI infrastructure. Here is what the project and CISA have confirmed and what operators should do.

The Singapore healthcare provider says personal data was leaked in a malicious cyber incident. The Straits Times reports that an affected-customer email listed identity and bank-account details among the information involved.

WorkOS says an AI security agent being evaluated by a researcher unintentionally accessed an internal customer-facing tool. Its update identifies exposed APIs, weak credentials and monitoring gaps.

Revolve says an unauthorized actor may have obtained information about certain shoppers with saved payment cards. SecurityWeek reports that an Indiana notification lists more than 1.5 million affected individuals.

Taiwan travel agency ezTravel says some past booking information was improperly accessed. CNA reports that more than 690,000 members were affected.

York University says an unauthorized actor stole personal information from some departmental forms. Affected submission periods vary, with the earliest listed beginning in 2007.

WPScan says a flaw in WP Duplicate through version 1.1.11 is being exploited and can allow unauthenticated file uploads and code execution. Its advisory lists no known fix.

QNAP says some users reported apparent Plex Media Server compromises on their NAS devices. Plex confirms active exploitation and recommends updating to build 1.43.3.10861 or later.

A breach involving Frontline Central and School Health Management affected school employees and students. SecurityWeek reports that an Indiana filing puts the total above 3 million.

Global News | November 11, 2026 The N-able N-central vulnerabilities prompted the software provider to take its hosted…

The Singapore healthcare provider says personal data was leaked in a malicious cyber incident. The Straits Times reports that an affected-customer email listed identity and bank-account details among the information involved.

WorkOS says an AI security agent being evaluated by a researcher unintentionally accessed an internal customer-facing tool. Its update identifies exposed APIs, weak credentials and monitoring gaps.

Revolve says an unauthorized actor may have obtained information about certain shoppers with saved payment cards. SecurityWeek reports that an Indiana notification lists more than 1.5 million affected individuals.

Taiwan travel agency ezTravel says some past booking information was improperly accessed. CNA reports that more than 690,000 members were affected.

York University says an unauthorized actor stole personal information from some departmental forms. Affected submission periods vary, with the earliest listed beginning in 2007.

WPScan says a flaw in WP Duplicate through version 1.1.11 is being exploited and can allow unauthenticated file uploads and code execution. Its advisory lists no known fix.

QNAP says some users reported apparent Plex Media Server compromises on their NAS devices. Plex confirms active exploitation and recommends updating to build 1.43.3.10861 or later.

A breach involving Frontline Central and School Health Management affected school employees and students. SecurityWeek reports that an Indiana filing puts the total above 3 million.