همهٔ اخبار

South Korea’s financial industry hit by fresh wave of cyberattacks

South Korea’s financial institutions have been hit by another wave of cyberattacks, highlighting the growing risk of AI-driven hacking in Asia.

CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

Bulletin ID: 2026-153-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/28/2026 08:30 AM PDT Description: AWS SDK for pandas (awswrangler) is an open-source Python library that integrates pandas with AWS data services such as Amazon Athena, Amazon S3, and AWS Glue. We identified CVE-2026-118029 in the Athena module, where unverified ownership of the default query result location could a…

Tanium security advisory (AV26-1097)

UK to look at making software companies liable for cyber breaches

The new U.K. budget says the government will "consider where liability for cyber breaches should sit," potentially a landmark shift for a country that has relied on voluntary codes to encourage software vendors to improve security.

Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles

The scammers affected approximately 800 victims and led to losses of more than half a million dollars, the Justice Department said. The post Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles appeared first on CyberScoop.

r/Seattle mods discover malware injection by archive.today, ban site

قلب تازه در کالبد قدیمی؛ iMac اپل با تراشه M6 معرفی شد

پس از دو نسل توقف، امروز بالاخره شرکت اپل از نسل جدید کامپیوترهای AiO خود یعنی iMac با تراشه پردازشی Apple M6 رونمایی کرد. نسل جدید آی مک به سبک مینیمال و بسیار باریک ولی در رنگ‌های متنوع طراحی شده و با انبوه قابلیت‌های جدید همراه شده تا هم AI را در همه قابلیت‌هایش حس کنید و هم برای هر تسکی که یک گرافیست، طراح، محقق یا حتی کاربر عمومی در نظر دارد، یکی از بهترین‌های بازار باشد.

امیدی برای درمان دیابت؛ ساخت ایمپلنتی که قند خون را به ترکیبی بی‌ضرر تبدیل می‌کند

این ایمپلنت هنوز برای آزمایش روی انسان آماده نیست. The post امیدی برای درمان دیابت؛ ساخت ایمپلنتی که قند خون را به ترکیبی بی‌ضرر تبدیل می‌کند appeared first on دیجیاتو.

Veeam security advisory (AV26-1096)

Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems

A Ukrainian man who carried out ransomware attacks for both the Nefilim and Hive gangs, including attacks on law firms and a healthcare provider during the COVID-19 pandemic, has been sentenced to 70 months in a US prison. Read more in my article on the Hot for Security blog.

I underestimated how fast security teams would trust AI to act in the SOC

For most of my career, I have watched new security platforms work through enterprise programs at a slow pace, so when AI began showing up in security operations tools, I assumed it would follow the same path. I expected AI adoption in the SOC to lag behind almost every other category of security technology, because I’d always viewed the tension between moving quickly on innovations and satisfying strict compliance ob…

💾 Fighting DOGE's Data Grab | EFFector 38.19

When we give our private information to the government to pay taxes, apply for a job, or vote, we should be able to trust that our data won't later be used against us. But in a betrayal of that trust, the federal government has been pooling the information it has about us on an unprecedented scale—and using it for purposes we never agreed to. EFF and other groups are fighting back. In our latest EFFector newsletter,…

Belarusian hackers increasingly acting as proxies for Russia amid war in Ukraine

Belarus-linked hackers are increasingly aligning their cyber operations with Russia's interests in Ukraine, researchers said Wednesday.

Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison

Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks. The post Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison appeared first on SecurityWeek.

Voice AI in vogue: Nvidia releases new open transcription model

Nvidia just released a free speech-to-text model that can transcribe up to 40 languages, but it only works on recordings, not live audio, so it’s a big step for meeting and medical transcription tools while still leaving real-time use to rivals like ElevenLabs.

چرا سرور HP انتخابی عالی برای مراکز داده و پردازش‌های سنگین است؟

در دنیای پرشتاب فناوری اطلاعات، زیرساخت سخت‌افزاری به ستون اصلی و کارایی سازمان‌ها تبدیل شده است. شرکت‌ها، مراکز داده و […] نوشته چرا سرور HP انتخابی عالی برای مراکز داده و پردازش‌های سنگین است؟ اولین بار در آی‌ تی‌ رسان منتشر شد.

Google Chrome security advisory (AV26-1095)

ControlUp’s Pulse AI Resolve diagnoses and fixes IT issues within admin-defined controls

ControlUp has announced Pulse AI Resolve, the real-time investigative AI layer of the Pulse AI ecosystem. A major enhancement of ControlUp’s endpoint self-service capability, previously ControlUp Connect, Pulse Resolve brings AI-powered investigation and remediation, built-in governance controls, and proactive issue detection directly to the endpoint. It helps organizations resolve IT issues faster while reducing the…

Compromised camera management software gives attackers a way into corporate networks

Attackers have been breaking into business networks through camera management software, according to new research from security firm Huntress, which traced several incidents in September and October back to a compromised application. An unidentified application The company’s analysts haven’t been able to confidently determine which software it was, and because no logs associated with the application could be found, t…

WatchGuard security advisory (AV26-1094)

TeamViewer security advisory (AV26-1093)

Attacker Relentlessly Scans for Credentials by Impersonating AI Bots

The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.

Ads or Surveillance? Researchers Flag Suspicious Targeting of Starlink Users

Discover-Tech allegedly targeted Starlink users with digital ads to track their locations, according to sources cited in a new Reuters report. Digital defense firm TrendAI found that an Israeli ad tech company was heavily targeting users of satellite internet service Starlink, probably to spy on them. That’s according to six people familiar with the matter, […]

Digitate adds AI agents for patch planning, service desks, and SAP operations

Digitate has announced ignio Hummingbird, the latest release of its agentic AIOps platform. Hummingbird introduces AI agents that bring operational expertise to specific IT tasks, move from diagnosis through approved action and verification, and operate within enterprise change, approval and audit controls. The release also enables enterprises to build their own IT operations agents and includes built-in Model Contex…

Amazon debuts the Alexa Photo Frame and Echo Time smart clock, plus other upgraded devices

Amazon's other new decides include an upgraded Echo Dot, an Echo Studio with visual intelligence features, and the Echo Show 16.

آیا هوش مصنوعی واقعاً به کشفیات علمی می‌رسد یا فقط ادعای حل مسائل بزرگ را مطرح می‌کند؟

در جدیدترین موج اکتشافات موج AI دوران ما، شرکت OpenAI از سه دستاورد جدید هوش مصنوعی در ریاضیات، علوم کامپیوتر و فیزیک خبر داده است. ادعاهایی که در صورت تأیید مستقل می‌توانند پیامدهای مهمی برای برخی مسائل دشوار علمی داشته باشند. بااین‌حال، پس از جنجال‌های اخیر بر سر انتشار دست‌نوشته‌های ریاضی تولیدشده با AI، پرسش مهم‌تری مطرح شده است: آیا این نتایج واقعاً به کشف دانش جدید منجر شده‌اند یا هنوز برای ارزیابی اعتبار و اهم…

345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD

Over 345,000 unique email addresses were exposed in the September 2026 breach at German far-right political party Alternative für Deutschland (AfD). Breach notification service Have I Been Pwned (HIBP) added the data to its database on 27 October, listing email addresses and email messages as the compromised information. HIBP has flagged the incident as a sensitive breach, so the data cannot be searched publicly. Onl…

Politicians in U.S. and E.U. Say Targeted Ads Are a Security Risk

Politicians in Europe and the U.S. are speaking out against the use of advertising technology to infect targets with zero-click spyware. The post Politicians in U.S. and E.U. Say Targeted Ads Are a Security Risk appeared first on The Citizen Lab.

TikTok expands into restaurant guides with ‘Must Eat’ feature

The move puts TikTok in more direct competition with platforms like Yelp and Google.

Adobe security advisory (AV26-1092)