آرشیو ۹۰ روزه
جست‌وجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحهٔ اصلی خودش لینک دارد.
متا و اسنپ در دادگاه لس‌آنجلس با شکایت دو جوان درباره تأثیر قابلیت‌های اعتیادآور شبکه‌های اجتماعی بر سلامت روان نوجوانان روبه‌رو می‌شوند. The post دادگاه مهم متا و اسنپ‌چت در پرونده اعتیاد نوجوانان به شبکه‌های اجتماعی امروز آغاز می‌شود appeared first on دیجیاتو.
دادگاهی درباره شکایت متا و شرکت مادر اسنپ درباره اعتیادآوری پلتفرم هایشان برای نوجوانان آغاز می شود.این دادگاه براساس شکایت دو نوجوان برگزار می شود.
Attackers are distributing malware through fake ChatGPT and Claude desktop applications, using legitimate, digitally signed executables from OpenAI and Anthropic to load malicious code onto victims’ Windows systems, according to Check Point Research. The campaign, tracked as Yoba, uses fake GitHub repositories and websites promoting purported AI applications, including “GPT-5.6 Sol,” “GPT-6 Astra” and “Claude Opus.”…
Tailscale, the company behind the popular software-defined mesh networking and connectivity platform of the same name, has shipped fixes for several vulnerabilities, including some in Tailscale SSH that could let an attacker who already had access to a device in the network gain more privileges on other machines that are part of it. “Based on our investigation, an attacker could reach only machines the tailnet policy…
AbuseBox is a free, open-source tool that checks IP addresses and domains against 60 DNS blacklists, pulls reputation scores from AbuseIPDB, inspects DNS, SSL and email-authentication records, and sends an alert when something changes. A DNS blacklist, or DNSBL, is a list that mail servers and other services consult when deciding whether to trust an address. The dashboard keeps one list of what needs attention: black…
مرکز پژوهش‌های مجلس پیشنهاد کرده است بانک مرکزی با تدوین دستورالعملی الزام‌آور، برای تمامی تراکنش‌های بانکی در شبکه پرداخت کشور […] نوشته مرکز پژوهش‌های مجلس خواستار اختصاص شناسه یکتا به تمام تراکنش‌های بانکی شد اولین بار در آی تی رسان منتشر شد.
On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical operations such as the Brotli decoder, DNS resolution, and TLS certificate validation. The vulnerabilities pose risks for remote code execution and traffic interception. For more information, see Node.js Security Release…
On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical operations such as the Brotli decoder, DNS resolution, and TLS certificate validation. The vulnerabilities pose risks for remote code execution and traffic interception. For more information, see Node.js Security Release…
A nonprofit service that protects internet users’ privacy is leaving France. Quad9, a free DNS resolver, has said it will reluctantly stop serving users in France on November 24. This follows a French court order that Quad9 must block access to websites that are accused of infringing the copyrights of a sports broadcaster. Forcing a responsible privacy service out of an important market is a predictable result of try…
Eight max-severity security defects could lead to remote code execution and authentication bypass. The post HPE Patches Dozens of Critical Flaws in Networking Products appeared first on SecurityWeek.
DNSFilter has launched LUMINATE by DNSFilter, a security platform that allows organizations to deliver five security solutions from one agent, one console and one policy. Shadow AI is now one of the fastest-growing risks in business. Employees are adopting AI tools and agents faster than security teams can approve them, often without any visibility from existing security technology. Nearly a third of employees using…
This blog post presents a LibAFL-Qemu based way to explore state machines and why we failed to find CVE-2026-9539.
Learn how to use Tenable solutions to find vulnerable PHP versions, prioritize remediation, and patch the critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) faster.Key takeawaysThe PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) put security teams in a race against attackers. PHP runs on more than 70% of websites, so organizations need to quickly find where they’re affected and u…
Overview vsomeip, COVESA's open source implementation of the SOME/IP automotive communication middleware, contained a memory allocation vulnerability present in versions 3.7.3 and below. A vsomeip reliable (TCP) SOME/IP endpoint grows its receive buffer to an attacker-declared message size before validating that the declared bytes have actually been received, allowing a remote, unauthenticated peer to exhaust host me…
HPE heeft 72 kwetsbaarheden verholpen in HPE Networking AOS-8 en AOS-10, waaronder Mobility Conductors, Mobility Controllers, Mobility Gateways en Access Points. De kwetsbaarheden betreffen verschillende beveiligingsproblemen, waaronder authenticatieomzeiling, command- en SQL-injectie, buffer-overflows en onvoldoende toegangscontrole. Van de in totaal 72 kwetsbaarheden zijn 33 als kritiek aangemerkt. Hiervan kunnen 1…
Two leading AI developers have released fresh evidence of a problem that researchers have long anticipated: advanced models searching for ways around the limits imposed on them. New disclosures from OpenAI and Anthropic detail how frontier systems exploited weaknesses in their environments or exceeded the intended scope of assigned tasks. OpenAI is now tightening internet access in its internal model-training environ…
Booking.com's systems were never breached. Its name was. Storm-1865 spent months borrowing Booking.com's identity to get into hotel computers, and every step of that borrowing left traces on the open internet. The open internet is exactly where Cyble Brand Intelligence & Protection works. Walk through the campaign one step at a time, and at each step there is a point where it could have spotted the attacker, cut the…
The number of cybersecurity startups attempting to cash in on the AI boom is staggering. But an analysis of the cybersecurity marketplace indicates that the incumbents, rather than resting on their laurels and opening themselves up for disruption, are quickly adapting to the new AI-centric threat environment. The major players are integrating AI technology throughout their platforms, and offering innovative AI produc…
کشف دو نقص امنیتی بحرانی با نام PHP2Shell در موتور PHP، باعث شد سازمان‌ها و وب‌سایت‌ها برای پیشگیری از نفوذ، برخی خدمات دیجیتال خود را خاموش کنند.
ژاپن تیمی ویژه برای شبیه‌سازی حملات سایبری با هوش مصنوعی تشکیل می‌دهد تا آسیب‌پذیری‌های زیرساختی ناشی از باگ‌های زبان برنامه‌نویسی PHP را مهار کند.
This release adds multiple new modules, and 6 of those modules point at a single target: Langflow, the open-source LLM workflow builder. Together they cover an authentication bypass (CVE-2026-93680), 3 unauthenticated remote code execution paths (CVE-2026-0768, CVE-2026-0769, and CVE-2026-10134), and 2 authenticated code execution flaws (CVE-2026-7873 and CVE-2026-93674), spanning Langflow releases from 1.0.0 through…
Oracle heeft meerdere kwetsbaarheden verholpen in Oracle Java. In Oracle Java SE, JavaFX en GraalVM Enterprise Edition zijn diverse kwetsbaarheden aanwezig die door ongeauthenticeerde netwerkaanvallers kunnen worden misbruikt via blootgestelde API's of sandboxed Java-applicaties. Deze kwetsbaarheden maken het mogelijk om denial of service te veroorzaken, ongeautoriseerde lees- en schrijfacties op data uit te voeren,…
For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.
It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-22217) It was discovered that c-ares incorrectly handled certain sortlist strings. A remote attacker could possibly use this issue to cause c-ares to crash, resulting i…
Updated an acknowledgement. This is an informational change only.
OverviewIn early October 2026, Rapid7 analysts investigated a compromise of a Citrix NetScaler ADC appliance. The appliance was running an affected 14.1 build and was exposed to active exploitation targeting NetScaler authentication and SAML deployments.The intrusion achieved root code execution, deployed multiple persistence mechanisms, installed PHP web shells, created outbound command-and-control and internal tunn…
کارمندان متا در مکاتبات داخلی اذعان کردند حساب‌های اینستاگرام لوئیز ایناسیو لولا داسیلوا، رئیس‌جمهور برزیل، در جریان انتخابات این کشور به‌دلیل محدودیت‌های اعمال‌شده با اختلال مواجه شده بود.
در دنیای امروز سیم‌کارت تنها یک ابزار ارتباطی نیست بلکه دریچه‌ای برای ورود به پیامک‌ها، حساب‌ها، رمزها و حتی شبکه‌های اجتماعی است، اما از آن گذشته سیم‌کارت یک دارایی با ارزش برای مالک آن و حتی بازماندگان به شمار می‌رود و برای جلوگیری از برخی سوءاستفاده‌ها و مشکلات حقوقی لازم است پس از فوت تعیین تکلیف شود.
در این مقاله با مهم‌ترین نکات خرید سرور HP، انتخاب رم سرور HP و هارد سرور HP آشنا می‌شویم. The post راهنمای انتخاب سرور HP و قطعات مناسب برای زیرساخت شبکه appeared first on دیجیاتو.
حمله پهپادهای اوکراینی به مراکز داده روسیه علاوه بر ایجاد اختلال در خدمات بانکی، تاکسی‌های اینترنتی و پلتفرم‌های آنلاین شرکت یاندکس، گمانه‌زنی‌هایی را درباره کاهش فعالیت ربات‌های روسی در شبکه‌های اجتماعی به همراه داشته است.
