90-day archive

All news

Search by headline, summary or source name. Every item links to its own original page.

11543 news

Page 17 of 385
Help Net Security

ThreatAware brings governance to AI-built security applications

ThreatAware has announced the launch of Dimension, its governed workspace that provides organisations with a foundation for building, running and managing their own customised security applications. Dimension gives security teams the flexibility to develop applications tailored to their needs, while providing organisations with greater oversight of how those applications access data and interact with live systems. A…

The Hacker News

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246, so anyone using the app should update. In the researchers' tests,

دیجیاتو

اعتراف گراک: فیلمی که Grok Imagine از ادیسه ساخته، از نظر تاریخی دقیق نیست

چت‌بات گراک اعلام کرد که اقتباس هوش مصنوعی ادیسه برخلاف وعده‌های ماسک، از استانداردهای دقیق تاریخی و باستان‌شناسی پیروی نمی‌کند. The post اعتراف گراک: فیلمی که Grok Imagine از ادیسه ساخته، از نظر تاریخی دقیق نیست appeared first on دیجیاتو.

The Hacker News

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key

An attacker who gained access to Keystone's website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26. Someone with that key could build counterfeit devices that pass the online check owners use to verify a Keystone. A buyer who trusted a counterfeit could have their crypto stolen, but the incident did not involve

CERT-Bund

[UPDATE] [hoch] vllm: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in vllm ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen und um Sicherheitsvorkehrungen zu umgehen.