TechCrunch Security
US government says hackers are now exploiting critical PHP web bugs
The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web's software.
90-day archive
All news
Search by headline, summary or source name. Every item links to its own original page.
11598 news
Page 18 of 387
زومیت
اپل نرم‌افزار قدرتمند Creator Studio را با هوش مصنوعی سوپرشارژ کرد
به‌روزرسانی جدید مجموعه‌نرم‌افزارهای Creator Studio با افزودن ابزارهای هوش مصنوعی و امکانات پیشرفته برای مک، آیپد و آیفون معرفی شد.
ANY.RUN
SkyW4lker Exposed: A Growing Microsoft 365 Phishing Threat to American Enterprises
SkyW4lker (SkyW4lker x365 Sentinel) is an active device-code phishing kit targeting Microsoft 365 users in the United States, Europe, and other regions. By abusing Microsoft’s legitimate authentication process, the kit can give attackers access to corporate accounts without stealing passwords or bypassing MFA. This puts business emails, sensitive documents, and other Microsoft 365 resources at […] The post SkyW4lker…
SOCRadar
September 2026: FBI Breach, Clop Hijack & IDScan Leak
The major cyber attacks of September 2026 hit federal law enforcement, a rival cybercrime gang, and the companies that verify identities. ShinyHunters hijacked the Clop ransomware gang’s Dark Web leak site and, four days later, claimed a breach of the Federal Bureau of Investigation (FBI). Identity data drove the month’s biggest numbers, led by adata […]
Microsoft Security Response Center
CVE-2026-96225 .NET Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft Security Response Center
CVE-2026-96196 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
Microsoft Security Response Center
CVE-2026-88078 Microsoft Edge (Chromium-based) Spoofing Vulnerability
Information published.
Microsoft Security Response Center
CVE-2026-70277 Windows Fast FAT File System Driver Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft Security Response Center
CVE-2026-70161 .NET Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft Security Response Center
CVE-2026-70007 .NET Framework Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft Security Response Center
CVE-2026-69473 Windows Kernel Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft Security Response Center
CVE-2026-69284 Windows DCOM Server Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft Security Response Center
CVE-2026-62765 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-20942 Microsoft Edge (Chromium-based) Spoofing Vulnerability
Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
The Hacker News
GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the OpenSSL backend with mutual-TLS, where the server checks a client certificate and vice versa, and a revocation list is configured to block revoked
The Hacker News
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when processing a maliciously crafted file. Patches for the flaw were released last month by Apple in
The Record (Recorded Future)
Malicious apps prey on Russians’ anxiety about fuel prices, drone strikes
Cybercriminals are stuffing infostealer malware into bogus apps aimed at tracking gas prices, police activity, drone strikes and other information of concern to average Russians, researchers said.
دیجیاتو
اپل برنامه‌های Creator Studio را با قابلیت‌های جدید هوش مصنوعی متحول کرد
این قابلیت‌ها از ماه نوامبر منتشر می‌شوند. The post اپل برنامه‌های Creator Studio را با قابلیت‌های جدید هوش مصنوعی متحول کرد appeared first on دیجیاتو.
TechCrunch Security
Japan internet giant GMO says hackers posted stolen customer data
Japan's GMO Internet is verifying alleged customer data posted by suspected hackers following a cloud service breach.
SecurityWeek
Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
A leaked SquareML access key could have been used to access a database containing personal and health information. The post Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk appeared first on SecurityWeek.
Help Net Security
Socure links AI agents to verified people and businesses
Socure has launched Agent Intelligence, a suite that detects AI agents, scores whether they should be trusted, and ties each agent to the verified person or business that authorized it. Agent Intelligence includes three layers in one platform designed to go beyond simple Know Your Agent (KYA) solutions: Agent Detection, generally available today inside Socure’s existing Digital Intelligence offering, Agent TrustScore…
CERT-Bund
[UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder andere, nicht genauer beschriebene Auswirkungen erzielen.
زومیت
صفحه تلویزیون سیاه شد ولی صدا دارد؛ عیب‌یابی + راهکار از «تکنیک tv»
سیاه شدن صفحه تلویزیون در حالی که صدا پخش می‌شود، دلایل مختلفی دارد که در این مطلب آن‌ها را بررسی می‌کنیم.
CERT-Bund
[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen
Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen und andere, nicht spezifizierte Auswirkungen zu verursachen.
زومیت
آی‌مک M۶ رونمایی شد؛ کامپیوتر دوست‌داشتنی اپل با رنگ‌بندی جذاب و قوی‌تر از همیشه
نسل جدید آل‌این‌وان اپل با تراشه‌ی قدرتمند، پشتیبانی از وای‌فای ۷ و ارتقای چشمگیر در پردازش‌های هوش مصنوعی وارد بازار می‌شود.
زومیت
اپل از لپ‌تاپ مک بوک پرو M۶ رونمایی کرد؛ ادامه تغییرات لاک‌پشتی
مک بوک پرو جدید با تراشه‌ی M۶، شارژدهی ۲۴ ساعته و تمرکز ویژه بر هوش مصنوعی دستگاه‌محور رونمایی شد.
دیجیاتو
اپل از آی‌مک جدید با تراشه M۶ و تمرکز ویژه بر هوش مصنوعی رونمایی کرد
تراشه M۶ با پردازنده ۱۲ هسته‌ای و موتور عصبی دوگانه، توان پردازش هوش مصنوعی دستگاه را تا ۵ برابر افزایش می‌دهد. The post اپل از آی‌مک جدید با تراشه M۶ و تمرکز ویژه بر هوش مصنوعی رونمایی کرد appeared first on دیجیاتو.
SecurityWeek
HPE Patches Dozens of Critical Flaws in Networking Products
Eight max-severity security defects could lead to remote code execution and authentication bypass. The post HPE Patches Dozens of Critical Flaws in Networking Products appeared first on SecurityWeek.
CERT-Bund
[UPDATE] [hoch] Golang Go: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen Denial of Service zu verursachen, ein Cross Site Scripting durchzuführen, Sicherheitsmaßnahmen zu umgehen oder Daten zu manipulieren.
CERT-Bund
[UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um root Rechte zu erlangen, um einen Denial of Service herbeizuführen oder einen nicht näher spezifizierten Angriff durchzuführen.