90-day archive

All news

Search by headline, summary or source name. Every item links to its own original page.

12068 news

Page 85 of 403
The Hacker News

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel's networking code, not in any one cloud's setup, so it reaches the shared

EFF

Our Lawsuit Against the Trump Administration’s Social Media Surveillance Moves Forward. Here’s What the Court Said.

No one should have to choose between speaking freely and protecting their immigration status. Yet that’s precisely the choice the Trump administration’s mass surveillance of online speech forces on noncitizens living in the U.S. Last fall, we sued on behalf of three major labor unions to stop this surveillance program. And just this month, we won our first major ruling: A federal district court denied the government’…

شهر سخت‌افزار

به این دلیل از ژاپن «کارت گرافیک» سوغات نیاورید!

سرزمین شکوفه‌های گیلاس معمولاً زودتر از بازارهای دیگر افزایش قیمت قطعات کامپیوتر را نشان می‌دهد و حالا زنگ هشدار را به صدا درآورده است. گزارش‌ها نشان می‌دهد حالا ارزان‌ترین مدل ۸ گیگابایتی GeForce RTX ۵۰۶۰ Ti در ژاپن حدود ۷۵۰ دلار قیمت دارد و نسخه ۱۶ گیگابایتی هم عملاً به یک کارت ۹۰۰ دلاری تبدیل شده است.

دیجیاتو

دانشمندان سازوکار جالب تزریق زهر توسط نیش زنبور عسل را نشان دادند [تماشا کنید]

زنبور پس از نیش زدن از نیش خود جدا می‌شود، اما پمپاژ زهر و فرورفتن نیش در عمق پوست همچنان ادامه پیدا می‌کند. The post دانشمندان سازوکار جالب تزریق زهر توسط نیش زنبور عسل را نشان دادند [تماشا کنید] appeared first on دیجیاتو.

Security Affairs

U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Cisco confirmed this week that threat actors are exploiting a critical…

Rapid7 Blog

How Multi-Campus Universities can Build a more Connected Security Program

Parts 1 and 2 of this series looked at two pressures facing higher education security teams. First, the threat landscape: universities are dealing with more frequent attacks across complex, distributed environments, while campus-by-campus security can make it harder to share intelligence and coordinate response. Second, the compliance burden: overlapping requirements across FERPA, GLBA, HIPAA, and CMMC make it diffic…

AWS Security Bulletins

Issue in the Linux kernel virtio-net/TAP networking path affecting KVM-based hypervisors

Bulletin ID: 2026-137-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/15/2026 10:30 AM PDT Description: AWS is aware of an issue in the Linux kernel's virtio-net/TAP networking path (CVE-2026-99999) that affects KVM-based hypervisors running unpatched Linux kernel versions 4.4 through 6.18. This issue could allow an actor with privileged access inside a guest virtual machine to send s…

The Hacker News

ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More

Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets interesting in different ways. A small permission can lead to a big theft. A trusted login can hide the wrong person. Old bugs are finding new victims, familiar tools are being put to strange uses, and

Security Affairs

Silent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and Government

Silent Lynx, a group likely based in Kazakhstan, targets Russian energy and government entities in espionage campaigns across Central Asia. Researchers from Cisco Talos and Recorded Future published a detailed paper on a threat actor they call Silent Lynx (aka UAT-6275, TAG-193), a Kazakhstan nexus group conducting espionage across Central Asia. The targets include the […]

شهر سخت‌افزار

اینتل شتاب دهنده هوش مصنوعی ۵۱۲ گیگابایتی عرضه می‌کند

یک افشاگر حوزه سخت‌افزار مدعی شده برخی شرکای اینتل اقدام به عرضه شتاب‌دهنده هوش مصنوعی سری GPU D با ۵۱۲ گیگابایت حافظه می‌کنند. پیش‌تر اینتل از برنامه شرکای خود برای عرضه نسخه‌های کاستوم با حداکثر ۴۸۰ گیگابایت حافظه گفته بود، اما حالا به نظر می‌رسد باید منتظر یک نسخه قوی‌تر هم باشیم.