نبض سایبری اخبار امنیت سایبری، با ذکر منبع

آرشیو ۹۰ روزه

همهٔ اخبار

جست‌وجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحهٔ اصلی خودش لینک دارد.

دسته: سیستم‌عامل پاک کردن فیلترها

۹۶۵ خبر

صفحهٔ ۲ از ۳۳
SOCRadar

Node2Shell: Brotli Flaw Hits Python Packages

[Update] October 27, 2026: PHP Ships Windows Builds With Brotli Fix The Node2Shell Brotli flaw (CVE-2026-111497), disclosed alongside Node.js fixes on October 21, 2026, also reaches Python through the PyPI Brotli and brotlicffi packages. Both compile Google’s vulnerable Brotli C decoder, and popular HTTP clients such as requests, httpx and aiohttp use them to decompress […]

آسیب‌پذیری و روز صفر برنامه‌نویسی و زبان‌ها سیستم‌عامل
منبع
CSO Online

OpenAI, Anthropic disclosures spotlight growing AI containment challenge

Two leading AI developers have released fresh evidence of a problem that researchers have long anticipated: advanced models searching for ways around the limits imposed on them. New disclosures from OpenAI and Anthropic detail how frontier systems exploited weaknesses in their environments or exceeded the intended scope of assigned tasks. OpenAI is now tightening internet access in its internal model-training environ…

آسیب‌پذیری و روز صفر امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین
منبع
Cyble

Know How Cyble Brand Intelligence Can Help Stop ClickFix Campaigns in its Tracks

Booking.com's systems were never breached. Its name was. Storm-1865 spent months borrowing Booking.com's identity to get into hotel computers, and every step of that borrowing left traces on the open internet. The open internet is exactly where Cyble Brand Intelligence & Protection works. Walk through the campaign one step at a time, and at each step there is a point where it could have spotted the attacker, cut the…

بدافزار و آلودگی فیشینگ هوش تهدید
منبع
GitLab Blog

Pillow CVE-2026-112900: How to find and fix it with GitLab

GitLab is not affected by CVE-2026-112900 or the other vulnerabilities fixed in Pillow 13.0.0. GitLab products do not include the Pillow library, and our Security team has found no evidence of impact to GitLab-managed infrastructure. GitLab.com, GitLab Self-Managed, and GitLab Dedicated are not impacted.Pillow is one of the most widely used image libraries in the Python ecosystem. It often sits several layers down in…

آسیب‌پذیری و روز صفر امنیت ابری برنامه‌نویسی و زبان‌ها
منبع
CyberInsider

Popcorn Time updater flaw exposed millions of devices to hijacking

Eye Research delivered more than two million update downloads in an operation to disable an abandoned Popcorn Time updater that could have allowed attackers to hijack Windows and macOS systems with full privileges. The vulnerability, tracked as CVE-2026-30612, affected the Time4Popcorn fork. Its update mechanism trusted unsigned executables delivered over unencrypted HTTP, including through domains … The post Popcorn…

آسیب‌پذیری و روز صفر سیستم‌عامل
منبع
The Hacker News

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated by a China-linked state-sponsored hacking group known as APT41, Kaspersky said in a technical report

امنیت اینترنت اشیا و صنعتی سیستم‌عامل
منبع
CSO Online

Dual BIOS: The laptop security feature SMBs don’t know they need

Every security checklist starts with the basics: strong passwords, multifactor authentication, spotting phishing, and keeping software up to date. All four protect what happens after a laptop starts. But some attackers are more focused on what happens before. That’s the domain of the BIOS, the first code that runs when a laptop powers on. It checks the hardware, then hands control to the operating system. Malware pla…

بدافزار و آلودگی فیشینگ نشت داده
منبع
Rapid7 Blog

Metasploit Wrap Up: Langflow, MongoDB, and More

This release adds multiple new modules, and 6 of those modules point at a single target: Langflow, the open-source LLM workflow builder. Together they cover an authentication bypass (CVE-2026-93680), 3 unauthenticated remote code execution paths (CVE-2026-0768, CVE-2026-0769, and CVE-2026-10134), and 2 authenticated code execution flaws (CVE-2026-7873 and CVE-2026-93674), spanning Langflow releases from 1.0.0 through…

آسیب‌پذیری و روز صفر امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین
منبع
SecurityWeek

In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware

Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotiator probe. The post In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware appeared first on SecurityWeek.

بدافزار و آلودگی باج‌افزار سیستم‌عامل
منبع
Microsoft Security Response Center

CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability

Corrected the CVSS Attack Vector metric from Network (AV:N) to Adjacent (AV:A) to reflect the requirement for Layer 2 network adjacency. The CVSS base score has decreased from 9.8 to 8.8. This is an informational change only. Customers who have successfully installed the update do not need to take any further action.

آسیب‌پذیری و روز صفر سیستم‌عامل
منبع