Citizen Lab has uncovered targeted advertising campaigns that infected devices at Al Jazeera with Candiru spyware without requiring users to click anything. The researchers call the technique “AdFection” and describe their findings as the first public technical confirmation of mercenary spyware delivered through targeted ads. The investigation identifies Israeli advertising company Discover-Tech as the intermediary ……
Bulletin ID: 2026-136-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/15/2026 09:30 AM PDT Description: Amazon Neptune is a fully managed graph database service. We identified CVE-2026-110812, an issue in Apache TinkerPop related to Gremlin functionality used by Amazon Neptune. Under certain conditions, an authenticated principal with Neptune data-plane (query) permissions could submi…
اگر احساس می‌کنید ویندوز ۱۱ هنگام باز کردن منوها یا جابه‌جایی میان بخش‌های مختلف گاهی کند عمل می‌کند، مایکروسافت می‌گوید باید بیلد جدید را نصب کنید. این شرکت اعلام کرده بهینه‌سازی‌های جدید می‌توانند سرعت پاسخ‌گویی ویندوز را در برخی کارها تا ۲۰ درصد بهبود دهند.
این باتری‌ها الکترولیت جامد دارند و درحال حاضر توانایی تحمل نوسان‌های دمایی از ۱۰۰ تا ۱۷۰- درجه سلسیوس را دارند. The post پروژه جدید ناسا: توسعه باتری‌هایی که سرمای منفی ۱۷۰ درجه ماه را تحمل می‌کنند appeared first on دیجیاتو.
Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: Abstract: We estimate how much public cryptanalysis each public-key assumption has received, using the literature itself as the instrument. From roughly sixteen thousand candidate papers we classify cryptanalytic work on ECDLP, structured and plain lattices, syndrome dec…
Session says it has implemented the core cryptography for its Protocol v2 upgrade, moving the decentralized messenger closer to perfect forward secrecy, post-quantum encryption, and stronger controls over linked devices. Session said it has published the protocol specification and implemented encryption for one-to-one messages and verified device linking in libsession, the shared cryptographic library used … The post…
We applied AWS Security Agent (now part of AWS Continuum), our autonomous penetration-testing agent, to 37 real, recently disclosed Common Vulnerabilities and Exposures (CVEs), each packaged as a live, containerized target with a flag hidden at the vulnerability’s intended sink. Starting from an unauthenticated or low-privilege position (an endpoint URL and a one-line hint, no […]
A calendar invite is one of the most routine messages in the modern workplace. It lands in the inbox, asks for a few seconds of attention, and is rarely questioned. Attackers know this, and they are now using fake meeting invitations to steal Microsoft account credentials. We have identified several large-scale phishing campaigns that abuse fake calendar invites to harvest credentials. Some arrive as an .ics attachme…
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said Thursday. The hidden attack code ran the moment an ad loaded on the screen, and in some cases the ad loaded out of sight, in the background. The Citizen
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives
مقام‌های فدرال رزرو آمریکا هشدار می‌دهند سرمایه‌گذاری گسترده در دیتاسنترهای هوش مصنوعی و افزایش تقاضا برای برق و نیروی کار، […] نوشته فدرال رزرو هشدار داد؛ رونق دیتاسنترهای هوش مصنوعی می‌تواند تورم را تشدید کند اولین بار در آی تی رسان منتشر شد.
Reports generated from the scanning of EU users’ private communications are analyzed using Palantir’s Foundry software at the National Center for Missing & Exploited Children (NCMEC), according to an investigation by Swedish newspaper Dagens ETC. The findings raise questions about transparency and safeguards around sensitive data transferred to the United States, although NCMEC says Palantir … The post Flagged EU cha…
در یک خبر خوب برای دارندگان برخی از محبوب‌ترین گوشی‌های سری Galaxy A، سامسونگ انتشار نسخه پایدار آپدیت One UI ۹ را آغاز کرده است. این آپدیت مبتنی بر اندروید ۱۷ است و از گلکسی A۲۷ گرفته تا گلکسی A۵۶در صف دریافت آن قرار دارند.
این فرمول مانند یک سوزن قطب‌نما است که در یک فضای برداری، گرایش مدل به تولید پاسخ‌های نامطلوب را پیش‌بینی می‌کند. The post دانشمندان با فرمولی ریاضی زمان سرکشی هوش مصنوعی را پیش‌بینی کردند appeared first on دیجیاتو.
Key Findings AI Agents Are the Newest Attack Surface The teams building fastest aren’t just shipping apps anymore. They’re shipping agents: support bots wired into ticketing systems, internal copilots with read access to the data warehouse, coding agents that can open pull requests, and autonomous workflows that call APIs on their own. Each one is […]
در پی انفجار و آتش‌سوزی در سایت تولید تراشه اینتل در شهر کریات گت در جنوب اسرائیل، دو کارگر جان باخته‌اند و یک نفر دیگر با وضعیت وخیم در بیمارستان بستری است. پلیس احتمال می‌دهد نقص در یک کپسول گاز باعث انفجار شده باشد.
