آرشیو ۹۰ روزه

همهٔ اخبار

جست‌وجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحهٔ اصلی خودش لینک دارد.

دسته: برنامه‌نویسی و زبان‌ها پاک کردن فیلترها

۱۷۴ خبر

صفحهٔ ۳ از ۶
دیجیاتو

جمینای 4 آرگون منتشر شد؛ قدرتمندترین هوش مصنوعی گوگل برای حل مسائل پیچیده [تماشا کنید]

مدل هوش مصنوعی جمینای 4 آرگون با استدلال عمیق، در پروژه‌های پیچیده مهندسی، برنامه‌نویسی و امور مالی به کار گرفته می‌شود. The post جمینای 4 آرگون منتشر شد؛ قدرتمندترین هوش مصنوعی گوگل برای حل مسائل پیچیده [تماشا کنید] appeared first on دیجیاتو.

CSO Online

OpenAI’s AI misalignment problem is growing

OpenAI’s misalignment problems seem to only be getting worse, based on yet another trio of reports detailing its models’ troubling and overzealous behaviors. In ad hoc misalignment testing, OpenAI models found creative ways to subversively access restricted information by cheating their way through proxy or firewall settings, getting savvy with internet tools, and even damaging their own task environments to trigger…

CSO Online

October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero days

Microsoft released a record-shattering 1,407 CVEs to be plugged today on October Patch Tuesday, breaking the 2020 record of 1,261. The list was so long that its release was several hours later than the usual 1 p.m. Eastern drop time, somewhat frustrating admins. The bugs include three zero-day vulnerabilities, one of which has been exploited. The zero day being exploited, and that should be dealt with immediately, is…

Tenable Blog

Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)

69Critical1337Important0Moderate1LowMicrosoft addresses 1407 CVEs in the tenth Patch Tuesday of 2026, marking the second consecutive month to reset the bar as the largest Patch Tuesday release. This month’s updates include patches for two zero days, including one that was exploited in the wild.Microsoft patched 1,407 CVEs in its October 2026 Patch Tuesday release, with 69 rated critical, 1,337 rated as important, and…

Zero Day Initiative

The October 2026 Security Update Review

Another month of patches equals another new record for Microsoft patches. It’s a good thing I survive Pwn2Own Ireland, because between these and the Adobe patches, there’s much to discuss. I’m also looking at different ways I can represent the bugs at this level of volume, so let me know if you have ideas. (Seriously – I’m out of ideas). If you’d rather watch the full video recap covering the entire release, you can…

CERT/CC Vulnerability Notes

VU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCE

Overview Shopware 6.7 contains a stored cross-site scripting (XSS) vulnerability in its media upload functionality that can lead to administrator credential compromise and remote code execution. Description Shopware is an open-source e-commerce platform used to build and manage online stores. It provides merchants with customizable product pages, administrative interfaces, plugin functionality, and a media management…

The Hacker News

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services. An attacker must be able to control the tenant subdomain,

CSO Online

GitLab patches a max-severity regex flaw alongside five high-severity bugs

GitLab just fixed a max-severity vulnerability that could allow unauthenticated attackers to execute arbitrary code on its servers. The company released a fix on Monday, alongside patches for five other high-severity flaws affecting its source code management and continuous integration and delivery (CI/CD) platform. The vulnerability, tracked as CVE-2026-97229, was fixed in versions 19.4.2, 19.3.5, and 19.2.8 of its…

Rapid7 Blog

CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab

OverviewOn October 12, 2026, GitLab published a critical patch release for CVE-2026-97229, an integer overflow or wraparound (CWE-190) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability a CVSSv3.1 score of 10.0. Under certain conditions, a remote attacker can execute arbitrary code on an affected GitLab server through a speci…

Help Net Security

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)

GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler that could allow remote attackers to execute arbitrary code on GitLab servers. About CVE-2026-97229 CVE-2026-97229 is an integer overflow vulnerability in GitLab’s CI/CD Regular Expression Compiler, and it affects both GitLab Community Edition (CE) and Enterprise Edition (EE). G…

دیجیاتو

متا از مدل Muse Wonder رونمایی کرد؛ هم‌رده با مدل‌های OpenAI و آنتروپیک [تماشا کنید]

مدل‌های Muse Wonder و Muse Wonder Full در برخی آزمون‌های برنامه‌نویسی از GPT-6 Astra و Claude Opus 5.5 جلو می‌زنند. The post متا از مدل Muse Wonder رونمایی کرد؛ هم‌رده با مدل‌های OpenAI و آنتروپیک [تماشا کنید] appeared first on دیجیاتو.

CERT/CC Vulnerability Notes

VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1

Overview Thelia versions 2.6.0 and 2.6.1 contain multiple vulnerabilities relating to file management, Smarty templating, module installation, and administrative workflows. Successful exploitation of these issues could enable remote code execution (RCE), server-side template injection (SSTI), stored and reflected cross-site scripting (XSS), unauthorized URL redirection, and other risks that expose both server-side an…

شهر سخت‌افزار

شاهکار یا زنگ خطری برای دنیای گیم؟ بازسازی کامل کد Modern Warfare 2 توسط هوش مصنوعی!

بازسازی یکی از نسخه‌های قدیمی Call of Duty به پروژه‌ای عجیب‌تر از یک آزمایش برنامه‌نویسی با هوش مصنوعی تبدیل شد؛ ایجینت‌هایی که قرار بود کد بازی را بازسازی کنند، پس از انجام این کار و زمانی که با آزمون صحت‌سنجی روبه‌رو شدند، سعی کردند راهی برای دور زدن آن پیدا کنند! حالا این پروژه علاوه بر نگرانی‌های رایج پیرامون کدهای اصلی پروژه‌ها و امکان مهندسی معکوس هرچیزی با هوش مصنوصی، پرسش مهمی را مطرح می‌کند: وقتی هوش مصنوعی…

آی‌تی‌نا

«کربن»؛ رمز پشت‌پرده گوگل برای رسیدن به رقبای هوش مصنوعی در برنامه‌نویسی

گوگل در حال آزمایش داخلی «کربن»، نسخه‌ای تازه از جمینی ۴ است که به‌گفته یک کارمند در برنامه‌نویسی شبیه Opus 5.5 عمل می‌کند. جزئیات این مدل را بخوانید.