نبض سایبری اخبار امنیت سایبری، با ذکر منبع

آرشیو ۹۰ روزه

همهٔ اخبار

جست‌وجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحهٔ اصلی خودش لینک دارد.

دسته: سیستم‌عامل پاک کردن فیلترها

۹۶۶ خبر

صفحهٔ ۴ از ۳۳
US-CERT Alerts

#StopRansomware: SafePay Ransomware

Advisory at a Glance Title #StopRansomware: SafePay Ransomware Original Publication October 20, 2026 Executive Summary This advisory details recent activity by the SafePay ransomware group. SafePay actors have been highly active since August 2024, targeting businesses and critical infrastructure across North America, South America, Europe, and Australia. SafePay actors typically gain access to networks by stealing or…

بدافزار و آلودگی آسیب‌پذیری و روز صفر فیشینگ
منبع
CyberInsider

AOMEI update servers hijacked in brief bursts to spread Windows malware

Hackers compromised AOMEI’s software distribution infrastructure to deliver Windows backdoors, switching malicious configurations on for just five to ten minutes before restoring legitimate content. The campaign ran between April and July 2026 and affected software delivery channels used by AOMEI Backupper and AnyViewer, according to coordinated reports from Google Threat Intelligence Group (GTIG), Mandiant, and … Th…

بدافزار و آلودگی هوش تهدید سیستم‌عامل
منبع
Security Affairs

Big Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel Flaw

OpenBSD flaws, including a 37-year-old BSD bug, enable local attackers to bypass security protections and gain root access. Patches are available. Cybersecurity firm Calif published a full exploit and write-up this week for a local privilege escalation on OpenBSD 7.9 that chains two separate kernel flaws, one of them a 37-year-old integer overflow inherited from […]

سیستم‌عامل
منبع
The Hacker News

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of

امنیت زنجیره تأمین سیستم‌عامل
منبع
شهر سخت‌افزار

مایکروسافت پای ویندوز دیفندر را به لینوکس باز کرد

مایکروسافت آنتی‌ویروس ویندوز دیفندر را به لینوکس آورده است تا شرکت‌هایی که از هر دو سیستم‌عامل لینوکس و ویندوز در کنار هم استفاده می‌کنند، بتوانند کامپیوترهای خود را با یک برنامه امنیتی واحد مدیریت و ایمن کنند.

سیستم‌عامل
منبع
The Hacker News

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP and SMEP hardware protections. Security firm Calif, which found and reported the flaws, published a detailed writeup and full proof-of-concept code after OpenBSD shipped

سیستم‌عامل سخت‌افزار و تراشه
منبع
AWS Security Bulletins

CVE-2026-109587 & CVE-2026-109588 - Issue with FreeRTOS-Kernel

Bulletin ID: 2026-138-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/16/2026 10:00 AM PDT Description: FreeRTOS-Kernel is a real-time operating system kernel for microcontrollers and small microprocessors, distributed by Amazon. AWS identified two issues with the FreeRTOS-Kernel Arm Cortex-R82 (Armv8-R AArch64) MPU port, affecting multiple versions. CVE-2026-109587: incorrect authori…

آسیب‌پذیری و روز صفر رایانش ابری سیستم‌عامل
منبع
AWS Security Bulletins

CVE-2026-102551 & CVE-2026-102552 - Issue with FreeRTOS-Plus-TCP

Bulletin ID: 2026-139-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/16/2026 10:15 AM PDT Description: FreeRTOS-Plus-TCP is an open-source, thread-safe TCP/IP stack for the FreeRTOS kernel, distributed by Amazon for use on embedded and IoT devices. AWS identified two issues with FreeRTOS-Plus-TCP, affecting multiple versions. CVE-2026-102551: improper verification of the source of a…

آسیب‌پذیری و روز صفر امنیت اینترنت اشیا و صنعتی رایانش ابری
منبع
The Hacker News

Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor

Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor. Google Threat Intelligence Group, Mandiant, and ManageEngine's Threat Analysis

بدافزار و آلودگی هوش تهدید سیستم‌عامل
منبع
CSO Online

Xbow spent $40K on AI and cracked Google Chrome wide open

A chain of vulnerabilities in Google’s Chrome browser could have enabled researchers to take control of one billion Windows machines worldwide — and it cost them just $40,000 in AI compute time to discover it. Researchers at Xbow USA worked for six days on developing the exploit, which earned them a $250,000 bug bounty from Google, the first under the new 2026 rules. They chose OpenAI’s GPT-5.6 Sol for the task to de…

آسیب‌پذیری و روز صفر برنامه‌نویسی و زبان‌ها سیستم‌عامل
منبع
Rapid7 Blog

Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

OverviewOn October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by joaxcar. GitLab assigned it a CVSS score of 10.0 and described possible code execution by an unauthenticated user.The advisory states that CVE-2026-97229 affects GitLab CE and EE from 19.2 before 19.2.8, 19.3 before 19.…

آسیب‌پذیری و روز صفر برنامه‌نویسی و زبان‌ها توسعه وب
منبع