همهٔ اخبار

Yet Another ClickFix Campaign, (Wed, Oct 28th)

Introduction

PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25, 2026, involved an attacker combining PHP2Shell with a kernel privilege escalation exploit to root

عینک هوشمند Even Realities G۲ با رنگ لاک‌پشتی معرفی شد!

شرکت Even Realities به مناسبت نخستین سالگرد فعالیت خود، نسخه جدیدی از عینک هوشمند G2 را با رنگ قهوه‌ای طرح […] نوشته عینک هوشمند Even Realities G۲ با رنگ لاک‌پشتی معرفی شد! اولین بار در آی‌ تی‌ رسان منتشر شد.

The CISO’s evolving role: Protecting and defending in the agentic era

As AI and agents reshape the enterprise, CISOs face two critical priorities: enabling innovation with the right identity and data guardrails, and modernizing defense to keep pace with AI-powered threats. Aarti Borkar shares how security leaders can approach both. The post The CISO’s evolving role: Protecting and defending in the agentic era appeared first on Microsoft Security Blog.

Researchers uncover Volt Typhoon’s covert, ephemeral network

The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure networks. The post Researchers uncover Volt Typhoon’s covert, ephemeral network appeared first on CyberScoop.

Reddit is the latest platform to embrace the ‘For You’ feed

The For You feed combines posts from communities users have joined with recommendations tailored to their interests.

Cisco Advance Notification for Publication of November 4, 2026, Security Advisories

On November 4, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products: Identity Services Engine (ISE) UCS Central Software Unified Communications Manager To remediate vulnerabilities to be disclosed on November 4, 2026, Cisco strongly recommends that customers upgrade to…

افزایش قیمت دامنه .com ؛ کابوس جدید سایت ها و کسب و کارهای ایرانی

افزایش هزینه دامنه‌های com. چه کسانی را بیشتر متضرر می‌کند؟ The post افزایش قیمت دامنه .com ؛ کابوس جدید سایت ها و کسب و کارهای ایرانی appeared first on دیجیاتو.

AI execs may be too out of touch to build for the general public

Tech leaders are flaunting how out of touch they are when they brag about using AI to connect with their families.

Trump DOE loans $5B to nuclear plants that will power data centers

Constellation Energy will get $5 billion in government loans to modernize nuclear reactors. Most of the new capacity is already committed to Google, Amazon, and Meta.

Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles

Artem Stryzhak joined both gangs, which targeted businesses and a hospital during the pandemic

Fake Firefox wallets steal crypto recovery phrases and private keys

Three malicious Firefox extensions impersonating Phantom, Jupiter, and Bitget wallets were caught stealing recovery phrases and private keys, with one also fetching additional malicious code from an attacker-controlled server. Socket’s Threat Research Team reports that all three extensions were available on Mozilla’s Firefox Add-ons store during the investigation but have since been removed. The fraudulent … The post…

South Korea’s financial industry hit by fresh wave of cyberattacks

South Korea’s financial institutions have been hit by another wave of cyberattacks, highlighting the growing risk of AI-driven hacking in Asia.

CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

Bulletin ID: 2026-153-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/28/2026 08:30 AM PDT Description: AWS SDK for pandas (awswrangler) is an open-source Python library that integrates pandas with AWS data services such as Amazon Athena, Amazon S3, and AWS Glue. We identified CVE-2026-118029 in the Athena module, where unverified ownership of the default query result location could a…

Tanium security advisory (AV26-1097)

UK to look at making software companies liable for cyber breaches

The new U.K. budget says the government will "consider where liability for cyber breaches should sit," potentially a landmark shift for a country that has relied on voluntary codes to encourage software vendors to improve security.

Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles

The scammers affected approximately 800 victims and led to losses of more than half a million dollars, the Justice Department said. The post Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles appeared first on CyberScoop.

r/Seattle mods discover malware injection by archive.today, ban site

قلب تازه در کالبد قدیمی؛ iMac اپل با تراشه M6 معرفی شد

پس از دو نسل توقف، امروز بالاخره شرکت اپل از نسل جدید کامپیوترهای AiO خود یعنی iMac با تراشه پردازشی Apple M6 رونمایی کرد. نسل جدید آی مک به سبک مینیمال و بسیار باریک ولی در رنگ‌های متنوع طراحی شده و با انبوه قابلیت‌های جدید همراه شده تا هم AI را در همه قابلیت‌هایش حس کنید و هم برای هر تسکی که یک گرافیست، طراح، محقق یا حتی کاربر عمومی در نظر دارد، یکی از بهترین‌های بازار باشد.

امیدی برای درمان دیابت؛ ساخت ایمپلنتی که قند خون را به ترکیبی بی‌ضرر تبدیل می‌کند

این ایمپلنت هنوز برای آزمایش روی انسان آماده نیست. The post امیدی برای درمان دیابت؛ ساخت ایمپلنتی که قند خون را به ترکیبی بی‌ضرر تبدیل می‌کند appeared first on دیجیاتو.

Veeam security advisory (AV26-1096)

Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems

A Ukrainian man who carried out ransomware attacks for both the Nefilim and Hive gangs, including attacks on law firms and a healthcare provider during the COVID-19 pandemic, has been sentenced to 70 months in a US prison. Read more in my article on the Hot for Security blog.

I underestimated how fast security teams would trust AI to act in the SOC

For most of my career, I have watched new security platforms work through enterprise programs at a slow pace, so when AI began showing up in security operations tools, I assumed it would follow the same path. I expected AI adoption in the SOC to lag behind almost every other category of security technology, because I’d always viewed the tension between moving quickly on innovations and satisfying strict compliance ob…

💾 Fighting DOGE's Data Grab | EFFector 38.19

When we give our private information to the government to pay taxes, apply for a job, or vote, we should be able to trust that our data won't later be used against us. But in a betrayal of that trust, the federal government has been pooling the information it has about us on an unprecedented scale—and using it for purposes we never agreed to. EFF and other groups are fighting back. In our latest EFFector newsletter,…

Belarusian hackers increasingly acting as proxies for Russia amid war in Ukraine

Belarus-linked hackers are increasingly aligning their cyber operations with Russia's interests in Ukraine, researchers said Wednesday.

Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison

Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks. The post Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison appeared first on SecurityWeek.

Voice AI in vogue: Nvidia releases new open transcription model

Nvidia just released a free speech-to-text model that can transcribe up to 40 languages, but it only works on recordings, not live audio, so it’s a big step for meeting and medical transcription tools while still leaving real-time use to rivals like ElevenLabs.

چرا سرور HP انتخابی عالی برای مراکز داده و پردازش‌های سنگین است؟

در دنیای پرشتاب فناوری اطلاعات، زیرساخت سخت‌افزاری به ستون اصلی و کارایی سازمان‌ها تبدیل شده است. شرکت‌ها، مراکز داده و […] نوشته چرا سرور HP انتخابی عالی برای مراکز داده و پردازش‌های سنگین است؟ اولین بار در آی‌ تی‌ رسان منتشر شد.

Google Chrome security advisory (AV26-1095)

ControlUp’s Pulse AI Resolve diagnoses and fixes IT issues within admin-defined controls

ControlUp has announced Pulse AI Resolve, the real-time investigative AI layer of the Pulse AI ecosystem. A major enhancement of ControlUp’s endpoint self-service capability, previously ControlUp Connect, Pulse Resolve brings AI-powered investigation and remediation, built-in governance controls, and proactive issue detection directly to the endpoint. It helps organizations resolve IT issues faster while reducing the…