CyberPulse Cybersecurity News, with Source Links
FA

90-day archive

All news

Search by headline, summary or source name. Every item links to its own original page.

11761 news

Page 34 of 393
GitLab Blog

Pillow CVE-2026-112900: How to find and fix it with GitLab

GitLab is not affected by CVE-2026-112900 or the other vulnerabilities fixed in Pillow 13.0.0. GitLab products do not include the Pillow library, and our Security team has found no evidence of impact to GitLab-managed infrastructure. GitLab.com, GitLab Self-Managed, and GitLab Dedicated are not impacted.Pillow is one of the most widely used image libraries in the Python ecosystem. It often sits several layers down in…

Vulnerabilities & Zero-Day Cloud Security Programming & Languages
منبع
زومیت

پیش‌بینی جسورانه کارکنان آنتروپیک: هوش مصنوعی تا سال ۲۰۳۰ برنده جایزه نوبل می‌شود

نظرسنجی آنتروپیک نشان می‌دهد ۹۱ درصد از متخصصان این شرکت انتظار دارند هوش مصنوعی تا سال ۲۰۳۰ به کشفی در تراز جایزه‌ی نوبل دست پیدا کند.

AI Security AI & Machine Learning
منبع
Security Affairs

SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 5

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can automate tasks, analyze large amounts of data, discover vulnerabilities and accelerate offensive operations. At […]

Malware & Threats Vulnerabilities & Zero-Day AI Security
منبع
The Hacker News

Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers

A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls one device that the network's access rules permit to connect to the target. The findings were

منبع
The Hacker News

PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity

In an update, Palo Alto Networks Unit 42 said it's retracting its earlier assessment that the post-compromise activity targeting the European government agency involved the exploitation of the PHP2Shell flaws. "What researchers saw was an attack against a European government agency executed in the context of a vulnerable PHP application," a spokesperson for the company told The Hacker News via

منبع
زومیت

اعتراضات گسترده در ردیت؛ انجمن r/opensource هوش مصنوعی و زبان‌های غیر از انگلیسی را ممنوع کرد

ممنوعیت پروژه‌های هوش مصنوعی و کنارگذاشتن غیرانگلیسی‌زبان‌ها، یکی از انجمن‌های متن‌باز ردیت را با اعتراض گسترده روبه‌رو کرد.

AI Security AI & Machine Learning Open Source
منبع
Security Affairs

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 120

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Auditing the auditor: Unmasking Apex Accelerator GhostAction Attack Escalates By Targeting GitHub Users Plex vulnerabilities being exploited in the wild to drop a cryptominer WordPress Rank Math SEO PRO Plugin 3.0.123 is vulnerable […]

Malware & Threats Vulnerabilities & Zero-Day
منبع
Security Affairs

Security Affairs newsletter Round 601 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Capcom Data Breach Exposes 11.7 Million Email Addresses U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known […]

Data Breach
منبع
Security Affairs

OpenAI Paused Frontier AI Training After a Security Incident

OpenAI paused frontier model training for 11 days after AI agents exposed security weaknesses, VM escapes and covert communication channels. OpenAI published a detailed report this week explaining how it improved security in the systems used to train and test its most advanced AI models. The company also described what happened when its AI agents […]

AI Security AI & Machine Learning
منبع
The Hacker News

OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication

OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models. "Based on the current state of alignment research, monitoring systems, and the security of internet infrastructure, we believe the responsible approach is to conduct frontier model training with no

منبع