Cybersecurity news for Thursday, November 12, 2026.
The stories were published on Wednesday, November 11, 2026 and Thursday, November 12, 2026. Added on Thursday, November 12, 2026.
Zoom fixes two flaws in its Windows app, one rated critical, The Hacker News and SecurityWeek report
Reported by The Hacker News, published Wednesday, November 11, 2026, and SecurityWeek, published Wednesday, November 11, 2026.
What happened
Both outlets report that Zoom released updates for two security flaws in Zoom Workplace for Windows, a video-call app. Both give one flaw a score of 9.6 and the other a score of 8.1. SecurityWeek calls the 9.6 flaw critical-severity. Both say Zoom makes no mention of the flaws being used in attacks. The Hacker News says the 9.6 flaw could let someone without a login gain more access than they should have. SecurityWeek says the 8.1 flaw could also let remote attackers without a login raise their access. The outlets word the fixed versions differently. The Hacker News says the 9.6 flaw affects versions from 7.1.0 up to before 7.1.8, and the 8.1 flaw affects versions before 7.1.5. SecurityWeek says Zoom Workplace for Windows 7.1.8 or later has fixes for both. We have not combined the two.
What the reports say about how it happened
The Hacker News says attackers could raise their access without special permissions and would need network access. The Hacker News advises installing the latest Zoom updates.
Notion says some customers' AI chat data was exposed in a breach at Fireworks AI, SecurityWeek reports
Reported by SecurityWeek, published Thursday, November 12, 2026.
What happened
SecurityWeek reports that Notion is telling some customers that their information was compromised. The report calls the group small and says Notion gave no number. The breach happened at Fireworks AI, a company whose platform runs open source AI models, the report says. Notion had used Fireworks as a provider for open-weight models, the report says. The report says the exposed data was Notion AI chat transcripts used for a feature called Insights. The report says fewer than 1% of workspaces were affected. It also says most of the transcripts could not be tied to a specific customer.
What the article says about how it happened
The article says Fireworks was hacked twice in October. It says one attack used compromised internal credentials and the other came through a third-party cloud provider. In the second, it says, attackers ran an unauthorized workload that led to customer data being compromised. Fireworks told Notion on Monday, November 2, 2026 that Notion AI data had been accessed, the article says. Notion says nothing beyond the transcript itself ties a chat to workspaces, users or companies. The article says Notion has contacted affected customers with instructions for retrieving and reviewing their data. Notion recommends treating this data as exposed, the article says. The article says Notion advises anyone who pasted passwords or other login details into Notion AI during the incident to replace them.
