CyberPulse Cybersecurity News, with Source Links
FA

90-day archive

All news

Search by headline, summary or source name. Every item links to its own original page.

11515 news

Page 13 of 384
دیجیاتو

فایل‌های MD. به ابزار جدید هکرها برای سوءاستفاده از ایجنت‌های هوش مصنوعی تبدیل شده‌اند

در این روش هکرها با فریب ایجنت از طریق فایل‌های معمولی مارک‌داون، دستور اجرای کدهای مخرب و سرقت توکن‌های دسترسی را صادر می‌کنند. The post فایل‌های MD. به ابزار جدید هکرها برای سوءاستفاده از ایجنت‌های هوش مصنوعی تبدیل شده‌اند appeared first on دیجیاتو.

AI Security AI & Machine Learning
منبع
Zero Day Initiative

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

On September 25, 2026, Mandiant released a report regarding continued mass exploitation of CVE-2026-35273 by the ShinyHunters group. TrendAI’s Zero Day Initiative first reported this CVE to Oracle on June 10, 2026, following an investigation I conducted with Minh Giang and Lucas Miller of TrendAI Research. Although Oracle issued a patch under a single CVE, we reported three distinct vulnerabilities across multiple Pe…

Vulnerabilities & Zero-Day
منبع
Ubuntu Security Notices

USN-8957-1: authd vulnerability

Ali Mashally discovered that authd did not properly validate user identities when matching accounts from identity providers. An attacker could possibly use this issue to gain access to another user's local account and files, resulting in unauthorized access to sensitive information.

Vulnerabilities & Zero-Day
منبع
EFF

French Court’s Site-Blocking Orders Drive Quad9 Out Of France

A nonprofit service that protects internet users’ privacy is leaving France. Quad9, a free DNS resolver, has said it will reluctantly stop serving users in France on November 24. This follows a French court order that Quad9 must block access to websites that are accused of infringing the copyrights of a sports broadcaster. Forcing a responsible privacy service out of an important market is a predictable result of try…

Malware & Threats Phishing Networking & Internet
منبع
CyberInsider

Sony discloses data breach exposing 2.6 million customer records

Sony Network Communications has disclosed a data breach exposing more than 2.58 million customer records following unauthorized access to its So-net membership database. The incident also compromised passwords for 54,401 email addresses across four email services. According to the company’s announcement, the intrusion occurred on October 19 but was discovered on October 23. Sony then … The post Sony discloses data br…

Data Breach Databases
منبع
Orca Security

Node.js Brotli Decoder Out-of-Bounds Write Threatens Remote Code Execution Across All Supported Versions

Executive Summary: A high-severity vulnerability (CVE-2026-111497) was disclosed affecting Node.js across all supported release lines (22.x, 24.x, 26.x), allowing attackers to achieve remote code execution via malformed Brotli-compressed data processed by node:zlib or fetch(). Due to the potential for crashes, memory disclosure, and code execution in cloud workloads, immediate patching is required. About CVE-2026-111…

Vulnerabilities & Zero-Day
منبع
Cisco Security Advisories

Cisco Unified Communications Products Security Hardening Release: October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted…

Vulnerabilities & Zero-Day
منبع
Cisco Security Advisories

Cisco Expressway Series Security Hardening Release: October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist cu…

Vulnerabilities & Zero-Day Software Engineering & Testing
منبع
ANY.RUN

SkyW4lker Exposed: A Growing Microsoft 365 Phishing Threat to American Enterprises

SkyW4lker (SkyW4lker x365 Sentinel) is an active device-code phishing kit targeting Microsoft 365 users in the United States, Europe, and other regions. By abusing Microsoft’s legitimate authentication process, the kit can give attackers access to corporate accounts without stealing passwords or bypassing MFA. This puts business emails, sensitive documents, and other Microsoft 365 resources at […] The post SkyW4lker…

Malware & Threats Phishing Identity & Access Security
منبع
SOCRadar

September 2026: FBI Breach, Clop Hijack & IDScan Leak

The major cyber attacks of September 2026 hit federal law enforcement, a rival cybercrime gang, and the companies that verify identities. ShinyHunters hijacked the Clop ransomware gang’s Dark Web leak site and, four days later, claimed a breach of the Federal Bureau of Investigation (FBI). Identity data drove the month’s biggest numbers, led by adata […]

Malware & Threats Data Breach Ransomware
منبع