Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access

The Hacker News - Nov 10, 2026

French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild. The authentication bypass flaw, which does not yet have a CVE identifier, is tracked as VSA-2026-062. "REST cookie parsing turns authenticationToken=j:%7B%7D into {}," Vates VMS said in an alert. "REST authentication passes that object to the

Read full article

More News

Giant UFO with dangling tentacles hovers near US military base before vanishing: 'Only God and the government know what it is'

Giant UFO with dangling tentacles hovers near US military base before vanishing: 'Only God and the government know what it is'

A mysterious object was spotted soaring over a US military base. Eyewitnesses said it had dangling appendages and hovered from side to side.

Nov 10, 2026See more

Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones

Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones

A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fixed it this...

Nov 10, 2026See more

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI's inference servers last Sunday. The attacker could also have...

Nov 10, 2026See more

Urgent warning to Gmail users about new hacking threat exposing private messages: Act now

Urgent warning to Gmail users about new hacking threat exposing private messages: Act now

Gmail users are being warned about a disturbing new hacking threat that could allow cybercriminals to secretly access their private messages and banking details.

Nov 10, 2026See more

Appeals court limits Trump DOJ's access to journalists’ private chat logs

Appeals court limits Trump DOJ's access to journalists’ private chat logs

A federal appeals court's three-judge panel unanimously limited Tuesday the Trump administration's broad access to journalists' LinkedIn records as part of a national security leak investigation, suggesting it could impart...

Nov 10, 2026See more

America’s Measles Problem Has Reached Endemic Level

America’s Measles Problem Has Reached Endemic Level

A panel of scientific experts will convene on Tuesday to evaluate the United States’ measles elimination status. But genetic data already shows the virus is once again endemic.

Nov 10, 2026See more

Claude chatbot maker set for $1.3tn stock market debut despite 'catastrophic' AI warning

Claude chatbot maker set for $1.3tn stock market debut despite 'catastrophic' AI warning

The AI company behind the Claude chatbot will offer its shares at between $70 and $78, which is lower than what was expected.

Nov 10, 2026See more

Noah's Ark discovery revealed as first photos show wood buried 30 feet underground

Noah's Ark discovery revealed as first photos show wood buried 30 feet underground

The hunt for Noah's Ark has taken a dramatic turn as the first photographs emerge of wood unearthed deep beneath a mountainside in Turkey.

Nov 10, 2026See more

Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem

Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem

Three distinct threat activity clusters with shared infrastructure and malware code similarities have been observed targeting telecommunications providers, government organizations, military entities, research institutions, and critical infrastructure across Latin America,...

Nov 10, 2026See more

Anthropic Targets Valuation of Up to $1.4 Trillion for Blockbuster I.P.O.

Anthropic Targets Valuation of Up to $1.4 Trillion for Blockbuster I.P.O.

The A.I. company’s pricing would make it one of the biggest ever public listings. It comes at a volatile moment in markets, with investors questioning the sustainability of the A.I....

Nov 10, 2026See more

America's food supply under threat as FBI warns of new cyberattacks that could hit grocery stores nationwide

America's food supply under threat as FBI warns of new cyberattacks that could hit grocery stores nationwide

The FBI and other US agencies are warning that America may soon see attacks on its food supply, sending prices skyrocketing before the holidays.

Nov 10, 2026See more

Recommended