Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches

The Hacker News - Nov 11, 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) Tuesday added two security flaws impacting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Details of the vulnerabilities are below - CVE-2026-20320 (CVSS score: 7.5) - An improper restriction of XML external entity

Read full article

More News

Amazon and Google Will See Big Paydays from Anthropic IPO

Amazon and Google Will See Big Paydays from Anthropic IPO

Amazon and Google are the largest investors in the A.I. start-up, and their shares could gain hundreds of billions of dollars in value.

Nov 10, 2026See more

Giant UFO with dangling tentacles hovers near US military base before vanishing: 'Only God and the government know what it is'

Giant UFO with dangling tentacles hovers near US military base before vanishing: 'Only God and the government know what it is'

A mysterious object was spotted soaring over a US military base. Eyewitnesses said it had dangling appendages and hovered from side to side.

Nov 10, 2026See more

What we know so far about Jensen Huang's affair with suspected Chinese spy

What we know so far about Jensen Huang's affair with suspected Chinese spy

The billionaire tech executive finds himself mired in a personal and national security scandal.

Nov 10, 2026See more

Who Is Alice Huang, the Woman in the Middle of Nvidia’s Spy Scandal?

Who Is Alice Huang, the Woman in the Middle of Nvidia’s Spy Scandal?

Alice Huang, who U.S. intelligence determined is a Chinese asset, emerged from the high-flying world of Shanghai finance to work with tech titans and obtain essential A.I. chips.

Nov 10, 2026See more

Tech Life

We investigate internet-connected device flaws worldwide, plus US election tech fallout.

Nov 10, 2026See more

What Is Congress’s Plan to Speed Up Energy Permits?

What Is Congress’s Plan to Speed Up Energy Permits?

The sprawling bill, which has divided Democrats, would overhaul major environmental laws to streamline the permitting process.

Nov 10, 2026See more

Schumer says Trump support of Nvidia CEO a 'dereliction of duty'

Schumer says Trump support of Nvidia CEO a 'dereliction of duty'

Senate Minority Leader Chuck Schumer (D-N.Y.) slammed President Trump over his association with Nvidia CEO Jensen Huang following reports about the tech leader having an intimate relationship with alleged Chinese...

Nov 10, 2026See more

From Climate Activism to the House of Representatives

From Climate Activism to the House of Representatives

William Lawrence, a co-founder of the Sunrise Movement, flipped a seat in Michigan for the Democrats.

Nov 10, 2026See more

Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones

Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones

A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fixed it this...

Nov 10, 2026See more

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI's inference servers last Sunday. The attacker could also have...

Nov 10, 2026See more

Urgent warning to Gmail users about new hacking threat exposing private messages: Act now

Urgent warning to Gmail users about new hacking threat exposing private messages: Act now

Gmail users are being warned about a disturbing new hacking threat that could allow cybercriminals to secretly access their private messages and banking details.

Nov 10, 2026See more

Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access

Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access

French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild. The authentication bypass flaw, which does...

Nov 10, 2026See more

Recommended