آرشیو ۹۰ روزه
جست‌وجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحهٔ اصلی خودش لینک دارد.
In the most recent update to Apple’s devices, iOS 27.2, the company has introduced a new setting to “Exclude Apps” from Siri AI, fulfilling one of our asks from our Encrypt It Already campaign earlier this year. One of our main concerns with new AI features on devices is how those features interact with end-to-end encrypted content, particularly with secure messaging apps. Many AI features require cloud processing, a…
The leaked records include the locations of ICE and CBP facilities, workers' cellphone numbers, and the members of groups tied to wiretap programs, Palantir software, and xAI’s Grok chatbot.
A federal appeals court should curb the government’s abuse of grand jury subpoenas to unmask social media users who criticize lawless immigration enforcement. That is the message from the ACLU, EFF, and other civil liberties and trade groups who filed a friend-of-the-court brief in a sealed case in the U.S. Court of Appeals for the District of Columbia. The case involves the government’s investigation of an anonymous…
Noyb alleges the platform in some cases records freelancers’ mouse clicks and keystrokes every few seconds and claims the collected information can be used to generate video documenting freelancers’ entire workday.
Three malicious Firefox extensions impersonating Phantom, Jupiter, and Bitget wallets were caught stealing recovery phrases and private keys, with one also fetching additional malicious code from an attacker-controlled server. Socket’s Threat Research Team reports that all three extensions were available on Mozilla’s Firefox Add-ons store during the investigation but have since been removed. The fraudulent … The post…
When we give our private information to the government to pay taxes, apply for a job, or vote, we should be able to trust that our data won't later be used against us. But in a betrayal of that trust, the federal government has been pooling the information it has about us on an unprecedented scale—and using it for purposes we never agreed to. EFF and other groups are fighting back. In our latest EFFector newsletter,…
Discover-Tech allegedly targeted Starlink users with digital ads to track their locations, according to sources cited in a new Reuters report. Digital defense firm TrendAI found that an Israeli ad tech company was heavily targeting users of satellite internet service Starlink, probably to spy on them. That’s according to six people familiar with the matter, […]
دیسکورد قصد دارد از اواخر آذر ماه (اواسط دسامبر) امکان نمایش و جست‌وجوی برخی پیام‌های سرورهای عمومی خود را در گوگل و سایر موتورهای جست‌وجو فراهم کند. این قابلیت با هدف دسترس‌پذیرتر کردن محتوای انجمن‌های عمومی ارائه می‌شود، اما می‌تواند برای حریم خصوصی بعضی از کاربران نیز خطرناک باشد. کاربران می‌توانند با تغییر تنظیمات حساب خود، از انتشار پیام‌هایشان در موتورهای جستجو جلوگیری کنند.
Discord will begin exposing messages from eligible public server channels to web searches starting in mid-December 2026. Sharing will be enabled by default for adults in the United States and most other regions. Users can opt out now, although doing so later will not remove messages already published. The company announced the changes on October … The post Discord to make public server messages searchable on the web…
ICE’s Homeland Security Investigations is engaged in far-reaching spying against left-wing activists that rivals the FBI and CIA crackdowns on the Civil Rights and anti-war movements.
In December, messages from Discord's public discoverable servers will begin appearing in search engine results.
A nonprofit service that protects internet users’ privacy is leaving France. Quad9, a free DNS resolver, has said it will reluctantly stop serving users in France on November 24. This follows a French court order that Quad9 must block access to websites that are accused of infringing the copyrights of a sports broadcaster. Forcing a responsible privacy service out of an important market is a predictable result of try…
An Alibaba AI model generated an unexpected command to upload data to a Beijing-region cloud storage service during a cybersecurity evaluation, rival developer Cohere said, raising concerns about the security of AI agents with access to enterprise systems. The model, Qwen3.8-Flash-Next, was being tested using Microsoft’s CTI-REALM cybersecurity benchmark, which tasked it with writing a rule to detect malicious file d…
Ukraine warns that attackers can remotely access Dahua cameras and recorders via Easy4IP, viewing video and changing settings. Ukraine’s cyber incident response team CERT-UA has warned about attackers taking over video surveillance systems made by Dahua. In its alert dated October 23, 2026, it reports unauthorized remote access to IP cameras and video recorders. The […]
سیتیزن‌لب تأیید کرد آیفون رئیس دانشگاه بلگراد با روش بدون کلیک و از طریق جاسوس‌افزار پگاسوس هدف نفوذ امنیتی قرار گرفته است.
اپل با انتشار به‌روزرسانی‌های iOS 27.2 و iPadOS 27.2، بیش از ۱۶۰ آسیب‌پذیری امنیتی خطرناک را در دستگاه‌های خود برطرف کرد.
Last week, researchers at Citizen Lab revealed a horrifying new malware campaign, dubbed “AdFection.” It used an ad network to distribute spyware to journalist’s devices to infect them without the target ever needing to click anything. This sort of attack on journalists is dangerous and incredibly concerning, especially since it’s built on the backbone of a technology we already object to: behavioral advertising. Alt…
گزارش حفره‌ای امنیتی که اجرای لینوکس روی PS5 را ممکن می‌کرد، برای یک هکر ۵۰ هزار دلار (۱۳٫۵ میلیارد تومان) پاداش به‌همراه آورد.
Booking.com's systems were never breached. Its name was. Storm-1865 spent months borrowing Booking.com's identity to get into hotel computers, and every step of that borrowing left traces on the open internet. The open internet is exactly where Cyble Brand Intelligence & Protection works. Walk through the campaign one step at a time, and at each step there is a point where it could have spotted the attacker, cut the…
کشف دو نقص امنیتی بحرانی با نام PHP2Shell در موتور PHP، باعث شد سازمان‌ها و وب‌سایت‌ها برای پیشگیری از نفوذ، برخی خدمات دیجیتال خود را خاموش کنند.
سومین دوره المپیک فناوری در رشته امنیت سایبری با حضور نهادهای متولی و متخصصان این حوزه، از ۱۱ تا ۱۴ آبان‌ماه در پارک فناوری پردیس برگزار می‌شود.
دفاتر دولتی سوئد دسترسی مستقیم به ChatGPT و کلاد را در سامانه‌های کاری کارکنان خود مسدود می‌کنند.
پلیس فتا درباره سوءاستفاده کلاهبرداران سایبری از تبلیغات خودکار تلگرام در کانال‌های معتبر و فریب مخاطبان هشدار داد.
پژوهشگران امنیتی از کشف در پشتی در فلش‌های رمزگذاری‌شده و نفوذ ۷ دقیقه‌ای هوش مصنوعی به سیستم حفاظتی آن‌ها خبر دادند.
اخراج سه پژوهشگر اوپن‌ای‌آی اختلافی عمیق بر سر محرمانگی، نظارت مستقل و امکان کنترل مدل‌های پیشرفته‌ی هوش مصنوعی را آشکار کرد.
ژاپن تیمی ویژه برای شبیه‌سازی حملات سایبری با هوش مصنوعی تشکیل می‌دهد تا آسیب‌پذیری‌های زیرساختی ناشی از باگ‌های زبان برنامه‌نویسی PHP را مهار کند.
Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads to users based on their activity on other connected Google services. "You may choose to allow certain Google services, including services like Search or Gemini Apps, to access data from other Google services you use,
اوپن‌ای‌آی پس از نفوذ مدل‌های هوش مصنوعی خود به سازمان‌ها، فرایند آموزش پیشرفته‌ترین سیستم‌هایش را در محیطی کاملا آفلاین از سر گرفت.
توسعه‌دهندگان بیت‌کوین کور به دلیل تسهیل کشف آسیب‌پذیری‌ها با هوش مصنوعی، سازوکار افشای رخنه‌های امنیتی را به‌طور اساسی تغییر دادند.
It is a commonly held truth among computer geeks that there is no such thing as bug free software, or a secure computer. Any piece of software that anyone actually uses will have a security vulnerability somewhere in the code. The more complex that software is, the more likely there will be a vulnerability. Fortunately for everyone, finding severe vulnerabilities was generally considered an expensive and difficult ta…
