ALERT: 33 N-able Zero-Days, Chrome Exploit, SAP CVSS 10.0 Flaws, Apple iMessage Bugs, and More

THN Daily Updates Learn How to Secure GitHub Actions Beyond SHA Pinning Discover the hidden limits of GitHub Actions SHA pinning and how provenance, dependency locking, and curated actions can strengthen software supply chain security. Download Now Sponsored LATEST NEWS Nov 10, 2026 Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed An iOS sandbox escape published on GitHub lets an app read other apps' files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login credentials at risk of exposure to malicious apps, Binance w... Read More Beyond the Alert: The Case for Rich Network Data At some point your security will fail. This isn’t pessimism. It’s not because your team and tools aren’t sophisticated enough. It’s the reason we have detections in the first place. And, it’s why once we accept that pre... Read More Agent360: See Which Agents Run in Your Environment and What They Can Reach Free and read-only. No installs. Get a written summary and a prioritized remediation plan. Read More Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities An iMessage flaw could let a remote attacker join a group chat and receive its messages, Apple said yesterday, and it released updates to fix it. The updates also fix a separate iMessage flaw that could let someone adde... Read More SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution Four flaws that attackers could exploit without logging in were fixed today as part of SAP's monthly Security Patch Day—the vendor rates all four 10.0, the maximum CVSS score. Three are in the SAP NetWeaver application... Read More France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites An October cyberattack on refrigeration controllers at about 700 French retail sites was carried out by a cyber unit of Iran's Islamic Revolutionary Guard Corps (IRGC), the French government said yesterday. The attacke... Read More Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026 Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, assigned the CVE identifier CVE-2026-125350 ... Read More N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice following the public disclosure of over 30 vulnerabilities collectively... Read More Learn How to Secure GitHub Actions Beyond SHA Pinning Discover the hidden limits of GitHub Actions SHA pinning and how provenance, dependency locking, and curated actions can strengthen software supply chain security. Download Now Sponsored This email was sent to sikubaycom.s3cr3tz@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from THN. To manage your email newsletter preferences, please click here. Contact THN: info@thehackernews.com Unsubscribe THN | K.P BLock, Pitampura, Delhi