همهٔ اخبار

فاجعه امنیتی در فلش‌مموری‌های SecZure؛ هوش مصنوعی رمزگذاری را در ۷ دقیقه شکست

پژوهشگران امنیتی از کشف در پشتی در فلش‌های رمزگذاری‌شده و نفوذ ۷ دقیقه‌ای هوش مصنوعی به سیستم حفاظتی آن‌ها خبر دادند.

Dual BIOS: The laptop security feature SMBs don’t know they need

Every security checklist starts with the basics: strong passwords, multifactor authentication, spotting phishing, and keeping software up to date. All four protect what happens after a laptop starts. But some attackers are more focused on what happens before. That’s the domain of the BIOS, the first code that runs when a laptop powers on. It checks the hardware, then hands control to the operating system. Malware pla…

Microsoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEX

China-linked Storm-0940 used AI tool ARTEX to target 2,250 Microsoft 365 tenants, exploiting stolen ConnectWise credentials at machine speed. Microsoft published a detailed technical report naming Storm-0940, a China state-aligned group, as the actor behind the ConnectWise Cloud Backup supply chain compromise. The group used ARTEX, an open-source AI-driven penetration testing framework, to run attacks […]

China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenants

A China-state-aligned threat actor compromised a ConnectWise cloud backup application and used an open-source agentic AI framework to turn its stolen credentials against more than 2,250 Microsoft 365 tenants, Microsoft said. Microsoft Threat Intelligence attributed the activity to Storm-0940, which it said has used the ARTEX framework since as early as September 2026 to automate attacks on hundreds of organizations.…

Oracle October 2026 Critical Patch Update Addresses 1209 CVEs

Oracle addresses 1209 CVEs in its final quarterly update of 2026 with 1295 patches, including 112 critical updates.Key TakeawaysThe October 2026 Critical Patch Update (CPU) contains fixes for 1209 unique CVEs in 1295 security updates112 issues (8.6% of all patches) were assigned a critical severity ratingOracle Fusion Middleware received the highest number of patches at 206, accounting for 15.9% of all patchesBackgro…

#StopRansomware: SafePay Ransomware

Advisory at a Glance Title #StopRansomware: SafePay Ransomware Original Publication October 20, 2026 Executive Summary This advisory details recent activity by the SafePay ransomware group. SafePay actors have been highly active since August 2024, targeting businesses and critical infrastructure across North America, South America, Europe, and Australia. SafePay actors typically gain access to networks by stealing or…

Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

OverviewIn early October 2026, Rapid7 analysts investigated a compromise of a Citrix NetScaler ADC appliance. The appliance was running an affected 14.1 build and was exposed to active exploitation targeting NetScaler authentication and SAML deployments.The intrusion achieved root code execution, deployed multiple persistence mechanisms, installed PHP web shells, created outbound command-and-control and internal tunn…

ConnectWise Cloud Backup Breach: What We Know

ConnectWise is investigating unauthorized access to application identities associated with Cloud Backup, formerly SkyKick, after researchers detected the applications authenticating into customer Microsoft 365 environments. A vendor-controlled Microsoft 365 application credential was compromised and used to obtain Microsoft Graph access tokens in customer tenants. ConnectWise subsequently disabled seven application i…

ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 Tenants

Cloud Backup, SaaS Security, and Cloud Management services offline as IT service provider investigates possibility that unknown attackers have full access to client environments via stolen tokens

فضای ذخیره‌سازی یک ترابایتی در ویندوز، ۹۳۱ گیگابایت نمایش داده می‌شود؛ چرا؟

نمایش فضای ذخیره‌سازی یک ترابایتی به‌صورت ۹۳۱ گیگابایت در ویندوز به‌دلیل تفاوت مبنای محاسبه‌ی سازندگان است؛ اما این مبنا چطور کار می‌کند؟

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs

Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor

Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor. Google Threat Intelligence Group, Mandiant, and ManageEngine's Threat Analysis

چرا حافظه گوشی‌ها با وجود ظرفیت بیشتر، سریع‌تر پر می‌شود؟

چرا حافظه گوشی زود پر می‌شود؟ با دلایل افزایش حجم برنامه‌ها، عکس‌ها و ویدیوها و ۵ راهکار کاربردی برای آزاد کردن فضای ذخیره‌سازی آشنا شوید.

AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The vulnerabilities in question are CVE-2026-105133 and CVE-2026-105134, which could be chained to sidestep authentication and execute arbitrary commands on affected systems. In a report published earlier

این کیبورد HP درون خودش یک کامپیوتر هوش مصنوعی با پردازنده Ryzen AI Pro 400 دارد

HP نسل جدید کامپیوترهای کیبوردی خود با نام EliteBoard G2a معرفی کرده که به پردازنده‌های جدید Ryzen AI Pro 400 مجهز شده و از قابلیت‌های هوش مصنوعی، حداکثر 64 گیگابایت حافظه رم و فضای ذخیره‌سازی تا ظرفیت 2 ترابایت پشتیبانی می‌کند و حدود 3053 دلار قیمت دارد.

ایده ناب SK Hynix: استفاده از CPUهای با 100 هسته در SSDهای آینده

انتقال سریع‌تر داده تنها زمانی به عملکرد بهتر منجر خواهد شد که کنترلر بتواند فرمان‌های ورودی، عملیات خواندن و نوشتن و مدیریت داده‌ها را بدون ایجاد گلوگاه پردازش کند. اما این هدف منجر به افزایش فشار واردشده به کنترلر SSDها می‌شود. شرکت SK hynix برای پاسخ به این چالش، معماری تازه‌ای با بیش از ۱۰۰ هسته پردازشی کوچک و اختصاصی طراحی کرده که هدف آن، کاهش بار پردازنده عمومی کنترلر و انجام وظایف پرتکرار با مصرف انرژی و فضای…

Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)

69Critical1337Important0Moderate1LowMicrosoft addresses 1407 CVEs in the tenth Patch Tuesday of 2026, marking the second consecutive month to reset the bar as the largest Patch Tuesday release. This month’s updates include patches for two zero days, including one that was exploited in the wild.Microsoft patched 1,407 CVEs in its October 2026 Patch Tuesday release, with 69 rated critical, 1,337 rated as important, and…

The October 2026 Security Update Review

Another month of patches equals another new record for Microsoft patches. It’s a good thing I survive Pwn2Own Ireland, because between these and the Adobe patches, there’s much to discuss. I’m also looking at different ways I can represent the bugs at this level of volume, so let me know if you have ideas. (Seriously – I’m out of ideas). If you’d rather watch the full video recap covering the entire release, you can…

Ukrainian drones hit Yandex data centers, sparking claims that Russian troll farms went quiet

Russian tech giant Yandex confirmed that drones hit three of its data centers, shutting down the facilities in Sasovo and Vladimir and knocking out part of the infrastructure in Kaluga. On October 11, Yandex Cloud told its customers that the platform was running in emergency mode and advised them to switch to their own disaster recovery plans, after a drone attack shut down the company’s data center in Vladimir. The…

LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

Three vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12. The chain was tested on two TV models, the 32LQ636BPSA and the 27TQ600SW, running webOS 7.5.7-25 on firmware

حافظه SSD جدید کیوکسیا رکورد سرعت را شکست؛ ۲۰ میلیون عملیات خواندن در ثانیه

نسخه جدید SSD سری GP کیوکسیا می‌تواند بیش از ۲۰ میلیون عملیات ورودی و خروجی در ثانیه (IOPS) انجام دهد. The post حافظه SSD جدید کیوکسیا رکورد سرعت را شکست؛ ۲۰ میلیون عملیات خواندن در ثانیه appeared first on دیجیاتو.

What Is Encryption? How It Protects Your Website and Its Data

If you run a website, you’ve already met encryption even if you’ve never used the word. It’s the 🔒 padlock in the browser bar, the reason your host told you to stop using plain FTP, and the checkbox on your backup settings that says “encrypt archive.” Encryption is one of the few security controls that works quietly and almost never needs your attention, which is exactly why it’s easy to misunderstand. Plenty of site…

پردازنده، رم و SSD حالا ۶۸ درصد هزینه ساخت یک لپ‌تاپ ۹۰۰ دلاری را تشکیل می‌دهند

افزایش هزینه قطعات می‌تواند به افزایش قیمت محصولات نهایی منجر شود. The post پردازنده، رم و SSD حالا ۶۸ درصد هزینه ساخت یک لپ‌تاپ ۹۰۰ دلاری را تشکیل می‌دهند appeared first on دیجیاتو.

چرا هارد اکسترنال زود خراب می‌شود؟ ۶ اشتباه رایج و راهکار نگهداری درست

افتادن، گرما، نوسان برق و کشیدن بی‌موقع کابل بی‌صدا عمر هارد اکسترنال را کوتاه می‌کنند. آشنایی با اشباهات رایجی که منجر به خرابی هارد می‌شوند.

بهترین SSD های بازار ایران بر اساس قیمت (مهر 1405) + راهنمای خرید

اس‌اس‌دی‌ها (Solid State Drives) یکی از قطعات ضروری برای هر سیستمی هستند و تاثیر مستقیمی بر سرعت و عملکرد یک کامپیوتر یا حتی دستگاه های دیگر دارند. در این مقاله، بهترین SSD های موجود در بازار با نگاهی دقیق و کاملی معرفی خواهند شد. از اس‌اس‌دی‌های با سرعت فوق‌العاده و ظرفیت بالا تا مدل‌هایی با پایداری و طراحی مدرن، این فهرست به شما انواع مختلف اس اس دی های با کیفیت را با جزئیات کامل معرفی می‌کند.

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

Goodfire says its new ‘inside-out’ monitors catch rogue AI agents at a fraction of the cost

Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data

SonicWall’s latest critical flaw indicates a security pattern, not another one-off bug

راهنمای انتخاب سرور HP؛ چه مدل و کانفیگی برای کسب‌وکار شما مناسب است؟