آرشیو ۹۰ روزه

همهٔ اخبار

جست‌وجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحهٔ اصلی خودش لینک دارد.

دسته: حریم خصوصی پاک کردن فیلترها

۳۴۸ خبر

صفحهٔ ۱ از ۱۲
CyberInsider

Fake Firefox wallets steal crypto recovery phrases and private keys

Three malicious Firefox extensions impersonating Phantom, Jupiter, and Bitget wallets were caught stealing recovery phrases and private keys, with one also fetching additional malicious code from an attacker-controlled server. Socket’s Threat Research Team reports that all three extensions were available on Mozilla’s Firefox Add-ons store during the investigation but have since been removed. The fraudulent … The post…

EFF

💾 Fighting DOGE's Data Grab | EFFector 38.19

When we give our private information to the government to pay taxes, apply for a job, or vote, we should be able to trust that our data won't later be used against us. But in a betrayal of that trust, the federal government has been pooling the information it has about us on an unprecedented scale—and using it for purposes we never agreed to. EFF and other groups are fighting back. In our latest EFFector newsletter,…

Security Affairs

Ads or Surveillance? Researchers Flag Suspicious Targeting of Starlink Users

Discover-Tech allegedly targeted Starlink users with digital ads to track their locations, according to sources cited in a new Reuters report. Digital defense firm TrendAI found that an Israeli ad tech company was heavily targeting users of satellite internet service Starlink, probably to spy on them. That’s according to six people familiar with the matter, […]

شهر سخت‌افزار

پیام‌هایتان در دیسکورد ممکن است به اطلاعات عمومی تبدیل شوند!

دیسکورد قصد دارد از اواخر آذر ماه (اواسط دسامبر) امکان نمایش و جست‌وجوی برخی پیام‌های سرورهای عمومی خود را در گوگل و سایر موتورهای جست‌وجو فراهم کند. این قابلیت با هدف دسترس‌پذیرتر کردن محتوای انجمن‌های عمومی ارائه می‌شود، اما می‌تواند برای حریم خصوصی بعضی از کاربران نیز خطرناک باشد. کاربران می‌توانند با تغییر تنظیمات حساب خود، از انتشار پیام‌هایشان در موتورهای جستجو جلوگیری کنند.

CyberInsider

Discord to make public server messages searchable on the web

Discord will begin exposing messages from eligible public server channels to web searches starting in mid-December 2026. Sharing will be enabled by default for adults in the United States and most other regions. Users can opt out now, although doing so later will not remove messages already published. The company announced the changes on October … The post Discord to make public server messages searchable on the web…

EFF

French Court’s Site-Blocking Orders Drive Quad9 Out Of France

A nonprofit service that protects internet users’ privacy is leaving France. Quad9, a free DNS resolver, has said it will reluctantly stop serving users in France on November 24. This follows a French court order that Quad9 must block access to websites that are accused of infringing the copyrights of a sports broadcaster. Forcing a responsible privacy service out of an important market is a predictable result of try…

CSO Online

Alibaba AI model tried to send data to Beijing server, Cohere says

An Alibaba AI model generated an unexpected command to upload data to a Beijing-region cloud storage service during a cybersecurity evaluation, rival developer Cohere said, raising concerns about the security of AI agents with access to enterprise systems. The model, Qwen3.8-Flash-Next, was being tested using Microsoft’s CTI-REALM cybersecurity benchmark, which tasked it with writing a rule to detect malicious file d…

Security Affairs

Attackers Take Control of Dahua Cameras and Video Recorders Via Easy4IP

Ukraine warns that attackers can remotely access Dahua cameras and recorders via Easy4IP, viewing video and changing settings. Ukraine’s cyber incident response team CERT-UA has warned about attackers taking over video surveillance systems made by Dahua. In its alert dated October 23, 2026, it reports unauthorized remote access to IP cameras and video recorders. The […]

EFF

Lessons Learned From 'AdFection' and What To Do Next

Last week, researchers at Citizen Lab revealed a horrifying new malware campaign, dubbed “AdFection.” It used an ad network to distribute spyware to journalist’s devices to infect them without the target ever needing to click anything. This sort of attack on journalists is dangerous and incredibly concerning, especially since it’s built on the backbone of a technology we already object to: behavioral advertising. Alt…

Cyble

Know How Cyble Brand Intelligence Can Help Stop ClickFix Campaigns in its Tracks

Booking.com's systems were never breached. Its name was. Storm-1865 spent months borrowing Booking.com's identity to get into hotel computers, and every step of that borrowing left traces on the open internet. The open internet is exactly where Cyble Brand Intelligence & Protection works. Walk through the campaign one step at a time, and at each step there is a point where it could have spotted the attacker, cut the…

زومیت

چرا دولت‌ها برای مقابله با دو باگ خطرناک، سایت‌های خودشان را خاموش کردند؟

کشف دو نقص امنیتی بحرانی با نام PHP2Shell در موتور PHP، باعث شد سازمان‌ها و وب‌سایت‌ها برای پیشگیری از نفوذ، برخی خدمات دیجیتال خود را خاموش کنند.

زومیت

ممنوعیت استفاده از چت‌جی‌پی‌تی و کلاد در ادارات دولتی سوئد؛ بازگشت به ابزارهای مایکروسافت

دفاتر دولتی سوئد دسترسی مستقیم به ChatGPT و کلاد را در سامانه‌های کاری کارکنان خود مسدود می‌کنند.

زومیت

فاجعه امنیتی در فلش‌مموری‌های SecZure؛ هوش مصنوعی رمزگذاری را در ۷ دقیقه شکست

پژوهشگران امنیتی از کشف در پشتی در فلش‌های رمزگذاری‌شده و نفوذ ۷ دقیقه‌ای هوش مصنوعی به سیستم حفاظتی آن‌ها خبر دادند.

زومیت

چت‌های لورفته‌ای که به اخراج ۳ دانشمند اوپن‌ای‌آی انجامید

اخراج سه پژوهشگر اوپن‌ای‌آی اختلافی عمیق بر سر محرمانگی، نظارت مستقل و امکان کنترل مدل‌های پیشرفته‌ی هوش مصنوعی را آشکار کرد.

زومیت

ژاپن در پاسخ به فاجعه PHP، مانور سایبری برگزار می‌کند

ژاپن تیمی ویژه برای شبیه‌سازی حملات سایبری با هوش مصنوعی تشکیل می‌دهد تا آسیب‌پذیری‌های زیرساختی ناشی از باگ‌های زبان برنامه‌نویسی PHP را مهار کند.

The Hacker News

Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads

Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads to users based on their activity on other connected Google services. "You may choose to allow certain Google services, including services like Search or Gemini Apps, to access data from other Google services you use,

زومیت

اوپن‌ای‌آی حالا هوش مصنوعی پرچمدارش را بدون اینترنت آموزش می‌دهد

اوپن‌ای‌آی پس از نفوذ مدل‌های هوش مصنوعی خود به سازمان‌ها، فرایند آموزش پیشرفته‌ترین سیستم‌هایش را در محیطی کاملا آفلاین از سر گرفت.

زومیت

هوش مصنوعی، سیاست امنیتی Bitcoin Core را تغییر داد

توسعه‌دهندگان بیت‌کوین کور به دلیل تسهیل کشف آسیب‌پذیری‌ها با هوش مصنوعی، سازوکار افشای رخنه‌های امنیتی را به‌طور اساسی تغییر دادند.

EFF

Computer Security Is About to Get a Lot Worse, Here’s What You Can Do

It is a commonly held truth among computer geeks that there is no such thing as bug free software, or a secure computer. Any piece of software that anyone actually uses will have a security vulnerability somewhere in the code. The more complex that software is, the more likely there will be a vulnerability. Fortunately for everyone, finding severe vulnerabilities was generally considered an expensive and difficult ta…

CSO Online

Meta hit with $25 billion fine for illegally sharing user data

A judge in New Mexico has fined Meta $25 billion for its flouting of data privacy laws between 2010 and 2021, including its controversial passing of data to Cambridge Analytica. The action serves as a stark reminder to enterprises not to play fast and loose with data protection legislation, as the consequences could be highly damaging. Meta faced the court action after it was revealed that data company Cambridge Anal…

The Cyber Express

Fake Reviews, Deceptive Ads: FTC Targets Alleged Passport Scam

The Federal Trade Commission (FTC) has filed a complaint against GovAssist LLC, Entry LLC and Scott Zuckerman over an alleged government impersonation scheme targeting consumers seeking U.S. passport and travel-related services. The case highlights how paid search advertising, misleading service promises and allegedly fake customer reviews can be used to make commercial websites appear connected to official governmen…