Railway breach leads to $740,000 in fraudulent AI charges

BleepingComputer reports multiple November 2026 cybersecurity incidents and advisories, including cloud and supply-chain breaches, large-scale data theft, actively exploited vulnerabilities and zero-days, ransomware, malware campaigns, and critical enterprise software flaws. Notable risks include Railway customer credential exposure and fraudulent AI charges, AWS environment compromise through trusted IAM access, Xen Orchestra authentication bypass enabling virtualization takeover, actively exploited Barracuda ESG flaws, Turla espionage against Exchange servers, and an iOS flaw potentially dis