TechCrunch Security
Discord is making its public communities more searchable, and people have concerns
In December, messages from Discord's public discoverable servers will begin appearing in search engine results.
آرشیو ۹۰ روزه
همهٔ اخبار
جست‌وجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحهٔ اصلی خودش لینک دارد.
دسته: حریم خصوصی
پاک کردن فیلترها
۳۴۱ خبر
صفحهٔ ۱ از ۱۲
EFF
French Court’s Site-Blocking Orders Drive Quad9 Out Of France
A nonprofit service that protects internet users’ privacy is leaving France. Quad9, a free DNS resolver, has said it will reluctantly stop serving users in France on November 24. This follows a French court order that Quad9 must block access to websites that are accused of infringing the copyrights of a sports broadcaster. Forcing a responsible privacy service out of an important market is a predictable result of try…
CSO Online
Alibaba AI model tried to send data to Beijing server, Cohere says
An Alibaba AI model generated an unexpected command to upload data to a Beijing-region cloud storage service during a cybersecurity evaluation, rival developer Cohere said, raising concerns about the security of AI agents with access to enterprise systems. The model, Qwen3.8-Flash-Next, was being tested using Microsoft’s CTI-REALM cybersecurity benchmark, which tasked it with writing a rule to detect malicious file d…
Security Affairs
Attackers Take Control of Dahua Cameras and Video Recorders Via Easy4IP
Ukraine warns that attackers can remotely access Dahua cameras and recorders via Easy4IP, viewing video and changing settings. Ukraine’s cyber incident response team CERT-UA has warned about attackers taking over video surveillance systems made by Dahua. In its alert dated October 23, 2026, it reports unauthorized remote access to IP cameras and video recorders. The […]
زومیت
جاسوسی از یک رئیس دانشگاه با پگاسوس؛ آیفون به‌سادگی هک شد
سیتیزن‌لب تأیید کرد آیفون رئیس دانشگاه بلگراد با روش بدون کلیک و از طریق جاسوس‌افزار پگاسوس هدف نفوذ امنیتی قرار گرفته است.
زومیت
اپل ۱۶۰ آسیب‌پذیری امنیتی آیفون را برطرف کرد؛ iOS 27.2 را همین‌حالا نصب کنید
اپل با انتشار به‌روزرسانی‌های iOS 27.2 و iPadOS 27.2، بیش از ۱۶۰ آسیب‌پذیری امنیتی خطرناک را در دستگاه‌های خود برطرف کرد.
EFF
Lessons Learned From 'AdFection' and What To Do Next
Last week, researchers at Citizen Lab revealed a horrifying new malware campaign, dubbed “AdFection.” It used an ad network to distribute spyware to journalist’s devices to infect them without the target ever needing to click anything. This sort of attack on journalists is dangerous and incredibly concerning, especially since it’s built on the backbone of a technology we already object to: behavioral advertising. Alt…
زومیت
هکر پلی استیشن ۵ جایزه ۱۳٫۵ میلیارد تومانی را به خانه برد
گزارش حفره‌ای امنیتی که اجرای لینوکس روی PS5 را ممکن می‌کرد، برای یک هکر ۵۰ هزار دلار (۱۳٫۵ میلیارد تومان) پاداش به‌همراه آورد.
Cyble
Know How Cyble Brand Intelligence Can Help Stop ClickFix Campaigns in its Tracks
Booking.com's systems were never breached. Its name was. Storm-1865 spent months borrowing Booking.com's identity to get into hotel computers, and every step of that borrowing left traces on the open internet. The open internet is exactly where Cyble Brand Intelligence & Protection works. Walk through the campaign one step at a time, and at each step there is a point where it could have spotted the attacker, cut the…
زومیت
چرا دولت‌ها برای مقابله با دو باگ خطرناک، سایت‌های خودشان را خاموش کردند؟
کشف دو نقص امنیتی بحرانی با نام PHP2Shell در موتور PHP، باعث شد سازمان‌ها و وب‌سایت‌ها برای پیشگیری از نفوذ، برخی خدمات دیجیتال خود را خاموش کنند.
زومیت
سومین دوره المپیک امنیت سایبری آبان‌ماه برگزار می‌شود
سومین دوره المپیک فناوری در رشته امنیت سایبری با حضور نهادهای متولی و متخصصان این حوزه، از ۱۱ تا ۱۴ آبان‌ماه در پارک فناوری پردیس برگزار می‌شود.
زومیت
ممنوعیت استفاده از چت‌جی‌پی‌تی و کلاد در ادارات دولتی سوئد؛ بازگشت به ابزارهای مایکروسافت
دفاتر دولتی سوئد دسترسی مستقیم به ChatGPT و کلاد را در سامانه‌های کاری کارکنان خود مسدود می‌کنند.
زومیت
دام جدید کلاهبرداران در کانال‌های پرمخاطب تلگرام؛ مراقب تبلیغات خودکار باشید
پلیس فتا درباره سوءاستفاده کلاهبرداران سایبری از تبلیغات خودکار تلگرام در کانال‌های معتبر و فریب مخاطبان هشدار داد.
زومیت
فاجعه امنیتی در فلش‌مموری‌های SecZure؛ هوش مصنوعی رمزگذاری را در ۷ دقیقه شکست
پژوهشگران امنیتی از کشف در پشتی در فلش‌های رمزگذاری‌شده و نفوذ ۷ دقیقه‌ای هوش مصنوعی به سیستم حفاظتی آن‌ها خبر دادند.
زومیت
چت‌های لورفته‌ای که به اخراج ۳ دانشمند اوپن‌ای‌آی انجامید
اخراج سه پژوهشگر اوپن‌ای‌آی اختلافی عمیق بر سر محرمانگی، نظارت مستقل و امکان کنترل مدل‌های پیشرفته‌ی هوش مصنوعی را آشکار کرد.
زومیت
ژاپن در پاسخ به فاجعه PHP، مانور سایبری برگزار می‌کند
ژاپن تیمی ویژه برای شبیه‌سازی حملات سایبری با هوش مصنوعی تشکیل می‌دهد تا آسیب‌پذیری‌های زیرساختی ناشی از باگ‌های زبان برنامه‌نویسی PHP را مهار کند.
The Hacker News
Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads
Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads to users based on their activity on other connected Google services. "You may choose to allow certain Google services, including services like Search or Gemini Apps, to access data from other Google services you use,
زومیت
اوپن‌ای‌آی حالا هوش مصنوعی پرچمدارش را بدون اینترنت آموزش می‌دهد
اوپن‌ای‌آی پس از نفوذ مدل‌های هوش مصنوعی خود به سازمان‌ها، فرایند آموزش پیشرفته‌ترین سیستم‌هایش را در محیطی کاملا آفلاین از سر گرفت.
زومیت
هوش مصنوعی، سیاست امنیتی Bitcoin Core را تغییر داد
توسعه‌دهندگان بیت‌کوین کور به دلیل تسهیل کشف آسیب‌پذیری‌ها با هوش مصنوعی، سازوکار افشای رخنه‌های امنیتی را به‌طور اساسی تغییر دادند.
EFF
Computer Security Is About to Get a Lot Worse, Here’s What You Can Do
It is a commonly held truth among computer geeks that there is no such thing as bug free software, or a secure computer. Any piece of software that anyone actually uses will have a security vulnerability somewhere in the code. The more complex that software is, the more likely there will be a vulnerability. Fortunately for everyone, finding severe vulnerabilities was generally considered an expensive and difficult ta…
CSO Online
Meta hit with $25 billion fine for illegally sharing user data
A judge in New Mexico has fined Meta $25 billion for its flouting of data privacy laws between 2010 and 2021, including its controversial passing of data to Cambridge Analytica. The action serves as a stark reminder to enterprises not to play fast and loose with data protection legislation, as the consequences could be highly damaging. Meta faced the court action after it was revealed that data company Cambridge Anal…
Security Affairs
Meta Faces $25 Billion Penalty Linked to Cambridge Analytica Scandal
A New Mexico judge ordered Meta to pay $25 billion for misleading users about privacy, setting a record penalty. Meta plans to appeal. This week a New Mexico judge ordered Meta to pay the state $25 billion. The order follows a jury finding that the company deceived Facebook users about their privacy, and it’s the […]
The Cyber Express
Fake Reviews, Deceptive Ads: FTC Targets Alleged Passport Scam
The Federal Trade Commission (FTC) has filed a complaint against GovAssist LLC, Entry LLC and Scott Zuckerman over an alleged government impersonation scheme targeting consumers seeking U.S. passport and travel-related services. The case highlights how paid search advertising, misleading service promises and allegedly fake customer reviews can be used to make commercial websites appear connected to official governmen…
EFF
Canadians Are Running Out Of Time To Oppose The Dangerous C-22 Surveillance Bill
Canada’s Parliament is debating a massive expansion of surveillance powers that will threaten the privacy and security of millions of people. Bill C-22, also called the Lawful Access Act, has already passed the House of Commons, and is now before the Canadian Senate. Canadians still have an opportunity to speak out and stop this dangerous legislation. The Canadian Civil Liberties Association (CCLA) is urging all Cana…
Zscaler ThreatLabz
SEO Poisoning Campaign Delivers New Armorsteal Malware
IntroductionIn September 2026, Zscaler Threat Hunting identified an SEO poisoning campaign that used fake websites impersonating the Chocolatey package manager and the Microsoft Activation Scripts (MAS) tool to distribute a Python-based malware family we track as Armorsteal. The fake websites targeted users searching for Chocolatey or MAS software installation commands. Each lure page displayed a malicious PowerShell…
Cloudflare Blog
Localizing compliance at scale: achieving South Korea’s ISMS certification
Cloudflare has achieved South Korea's ISMS certification following an audit across 80 controls. Learn how we localized user consent flows, adapted social sign-up paths at the edge, and validated our global security program.
Tenable Blog
How to contain shadow AI, as it takes on multiple forms and spreads throughout your environment
Shadow AI used to be confined to a few simple scenarios, such as AI chatbots and AI browser extensions. Today, it spans a broad spectrum of complex vectors, making it harder to detect and control. In the latest installment of our Cybersecurity Awareness Month blog series, learn how employee security training, AI usage governance, and exposure management can help you tackle shadow AI successfully.Key takeawaysIntegrat…
EFF
Introducing Our New Surveillance Self-Defense Guide: Online Privacy for Parents and Youth
The internet is a vast and confusing place no matter your age. Trying to help youth engage with it safely and privately is a complicated topic that touches on many different skillsets and ideas. But just because it’s complicated doesn’t mean it’s impossible. We’ve launched our Online Privacy for Parents and Youth Surveillance Self-Defense guide in hopes to provide a framework for finding solutions that work for you.…
EFF
Interoperability vs. Security: Why not both?
An open internet where people can freely build, share, and remix each other's work is a powerful engine of grassroots innovation we’ve all benefited from. In recent decades, however, corporations have taken control of an increasing share of this work, giving them a greater ability to stifle challengers and limit our choices. When regulators address this by mandating that tech giants play fair by requiring interoperab…
Security Affairs
Russian Satellite Makes a Close Approach To A Commercial Radar Satellite Used by Ukraine
A Russian satellite made a close approach to a commercial radar satellite linked to Ukraine, raising concerns about surveillance and security in space. A Russian-made satellite called Kosmos 2612 got very close to ICEYE-X36 last week, a commercial Earth-observation satellite that may support countries like Ukraine. CNN reports it may have come within less than […]