همه اخبار

Discord is making its public communities more searchable, and people have concerns

In December, messages from Discord's public discoverable servers will begin appearing in search engine results.

Before you file that AI bug report, OpenAI has some advice

Open-source maintainers are so overwhelmed by AI-generated security reports that some have stopped accepting them. OpenAI’s Daybreak lead says the fix is higher-quality findings and far more coordination. The post Before you file that AI bug report, OpenAI has some advice appeared first on CyberScoop.

Before you file that AI bug report, OpenAI has some advice

Open-source maintainers are so overwhelmed by AI-generated security reports that some have stopped accepting them. OpenAI’s Daybreak lead says the fix is higher-quality findings and far more coordination. The post Before you file that AI bug report, OpenAI has some advice appeared first on CyberScoop.

Social Media When Elections Are Close: Doing the Impossible Better

Everyone knows, or should, that perfect (balanced, targeted, transparent, swift and swiftly appealable) content moderation at scale is impossible. That doesn’t mean powerful social platforms don’t have to try to get at least reasonably close, especially when access to good information can have a profound effect on political participation and speech. That’s why so many people, including the Meta Oversight Board, criti…

3 Frameworks to Protect CISOs & Orgs Against AI Liability

Cyber leaders can get ahead of AI liability with rigorous documentation, transparency, and smart contract negotiations with AI vendors.

Vulnerabilities in PHP Affecting Cisco Products: October 2026

On October 21, the PHP Foundation announced the availability of a Critical PHP Security release addressing two critical vulnerabilities: CVE-2026-109618 - RCE via OOM corruption CVE-2026-109619 - RCE via stale global state For information about these vulnerabilities, see the advisories GHSA-w8hw-w9fx-j79w and GHSA-6wmf-4rv5-p3rp. These vulnerabilities are being referenced as PHP2shell. For information about Splunk pr…

External Teams Chats Anchor 15-Minute Malware Delivery

Mail bombing is getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang.

Adobe security advisory (AV26-697) – Update 1

All the security risks Anthropic is worried about before its IPO

Anthropic has said out-of-control AI poses a threat to the world, but perhaps unsurprisingly suggests that profit will shape those decisions, too. The post All the security risks Anthropic is worried about before its IPO appeared first on CyberScoop.

Nefilim, Hive ransomware operator given five-year-plus sentence after guilty plea

Ukrainian national Artem Stryzhak, 36, had pleaded guilty last year to charges related to participating in at least two well-known ransomware groups.

Re:Build, which spun out Slate Auto, raises $2.1B

The manufacturing accelerator bills itself as "America’s answer to Shenzhen."

Code-execution flaw in UEFI firmware affects most servers on planet Earth

Critical flaw in EDK2 allows attackers to execute code early in the boot process.

اپل یک واترمارک مخفی به تصاویر ویرایش‌شده با هوش مصنوعی آیفون اضافه کرد

تصاویر ساخته‌شده یا ویرایش‌شده با هوش مصنوعی اپل در به‌روزرسانی iOS ۲۷.۲ به واترمارک نامرئی SynthID مجهز شدند.

SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack

A recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises.

Survival LLM: AI assistant and emergency library that runs on your own computer

Italy ’s Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters

Italy ’s Parliament cyberattack highlights hybrid warfare risks and the need for transparency, stronger defenses and accountability. The cyberattack targeting email accounts at Italy’s Chamber of Deputies, including a parliamentary account assigned to Prime Minister Giorgia Meloni, raises questions that go well beyond the security of individual inboxes. At a time when European institutions face […]

AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours

One critical, three high-severity EPICS bugs could disrupt research experiments

New Records Obtained by EFF Expose More Problems with Medicare’s AI Experiment

New records obtained by EFF expose additional issues with Medicare’s AI-driven prior authorization program and show why we need stronger legal limits around government use of automated decision-making. EFF sued the government back in March for information about the Wasteful and Inappropriate Service Reduction (WISeR) model, a new Medicare program that uses AI to evaluate prior authorization requests for certain medic…

میان‌بُری که قرار نبود وجود داشته باشد؛ هوش مصنوعی و حل معمای ۲۷ساله دنیای کامپیوتر

مدل هوش مصنوعی OpenAI با ارائه‌ی برهان ریاضی، فرضیه‌‌ی ۲۷ساله‌ی زمان نمایی (ETH) درباره‌ی محدودیت سرعت حل مسائل پیچیده‌‌ی محاسباتی را به‌چالش کشید.

Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking

Australia’s cyber agency warns AI will drive more disruptive attacks, helping hackers find vulnerabilities faster and exploit them at greater scale. Australia’s top cyber spy has a blunt message: expect more disruption to everyday services. Abigail Bradshaw, director-general of the Australian Signals Directorate (ASD), says that with each jump in AI capability, more disruption is […]

آشنایی با زیکورپا؛ راهکار نوین مدیریت اضافه وزن و چاقی

زیکورپا یک داروی تزریقی ایرانی حاوی تیرزپاتاید است که با کاهش اشتها و تنظیم قند خون به کاهش وزن پایدار در افراد واجد شرایط کمک می‌کند.

Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison

Artem Stryzhak participated in a series of ransomware attacks on hospitals, government entities and law firms from the middle of 2018 to late 2021. The post Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison appeared first on CyberScoop.

CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets

Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server environments used by threat actors to conduct the malicious cyber operations, described them as distinct from previously published

Censys AI Agents: Automate Investigations and Amplify Your Threat Intel

Censys Investigator, our agentic framework, now has an API. The same inputs you’d give it in Platform (domains, IPs, or a full threat intel report) can now come from a script, a SOAR playbook, or an AI agent. You get back an in-depth new report, detailing the broader attacker campaign or cluster. This includes new […] The post Censys AI Agents: Automate Investigations and Amplify Your Threat Intel appeared first on C…

Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities

Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered. A security researcher demonstrated that the private keys for eight eMudhra intermediate certificates were fundamentally broken due to an unprecedented error in their Key Generation Ceremony (KGC) in April 2025. This allows anyone to brute-force acquire these private keys…

Brotli bug reaches far beyond Node.js (CVE-2026-111497)

A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk. About CVE-2026-111497 Alternatively known as “Node2Shell”, “Broccoli2Shell” and “Brotli2Shell”, CVE-2026-111497 is a remotely exploitable out-of-bounds write flaw that gained widespread attention after Node.js publicly disclosed it on October 21, 2026. “An attacker who can supply Brotli data…

AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619 - Update 2

فایل‌های MD. به ابزار جدید هکرها برای سوءاستفاده از ایجنت‌های هوش مصنوعی تبدیل شده‌اند

در این روش هکرها با فریب ایجنت از طریق فایل‌های معمولی مارک‌داون، دستور اجرای کدهای مخرب و سرقت توکن‌های دسترسی را صادر می‌کنند. The post فایل‌های MD. به ابزار جدید هکرها برای سوءاستفاده از ایجنت‌های هوش مصنوعی تبدیل شده‌اند appeared first on دیجیاتو.

Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’

New findings by the Citizen Lab and SHARE Foundation show that a prominent supporter of Serbia's student movement was targeted with spyware. The post Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’ appeared first on The Citizen Lab.

«جینی ۴» رونمایی شد؛ هوش مصنوعی شگفت‌انگیز گوگل برای خلق جهان‌های تعاملی

جینی ۴ جهان‌هایی تعاملی با صدای واقعی و فیزیک دقیق می‌سازد، اما پایداری اشیا و انسجام بلندمدت هنوز حل نشده‌اند.