همه اخبار

هوش مصنوعی در فضا؛ ماه‌نورد رباتیک فلیپ مدل‌های زبانی بزرگ را به ماه می‌برد

ماه‌نورد فلیپ با اجرای آزمایشی مدل‌های زبانی بزرگ روی ماه، امکان استقلال بیشتر کاوشگرهای فضایی در مأموریت‌های آتی را فراهم می‌کند.

Discover and remediate PHP2Shell exposure with Tenable

Learn how to use Tenable solutions to find vulnerable PHP versions, prioritize remediation, and patch the critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) faster.Key takeawaysThe PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) put security teams in a race against attackers. PHP runs on more than 70% of websites, so organizations need to quickly find where they’re affected and u…

VU#128947: COVESA vsomeip excessive memory allocation in reliable (TCP) endpoint buffer handling

Overview vsomeip, COVESA's open source implementation of the SOME/IP automotive communication middleware, contained a memory allocation vulnerability present in versions 3.7.3 and below. A vsomeip reliable (TCP) SOME/IP endpoint grows its receive buffer to an attacker-declared message size before validating that the declared bytes have actually been received, allowing a remote, unauthenticated peer to exhaust host me…

هوش مصنوعی GPT-۶.۱ Terra با توانایی کنترل کامپیوتر و پیشرفت خیره‌کننده در کدنویسی از راه رسید

مدل GPT-۶.۱ Terra با تمرکز بر کار با کامپیوتر، استدلال بصری و هزینه‌ی کمتر، برای خودکارسازی وظایف روزمره از راه رسید.

Who Pays When AI Makes Cybercrime Cheaper? Inside the New Economics of Ransomware and Extortion

Tammy Harper, Senior Threat Intelligence Researcher Walking around Strasbourg during Underground Economy, I found myself thinking about the businesses as much as the buildings. Behind every restaurant storefront, there is work the customer never sees: someone supplies it, someone pays for it, and the business survives on whatever is left over. It made me wonder […] The post Who Pays When AI Makes Cybercrime Cheaper?…

Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento

An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce security company Sansec, the activity is designed to add a small piece of code to the store's pages that, when visited by unsuspecting users, serves malicious JavaScript loader code through Magento CMS blocks. "When you

'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets

An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.

Microsoft releases emergency .NET security fixes for Google Brotli bug

Redmond joins growing list of software maintainers scrambling to patch compression flaw

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code. PHP says the flaw can be reached through the cURL extension when the extension decompresses HTTP responses automatically. cURL leaves that off by default, but

CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder

OverviewOn October 21, 2026, the Node.js Project published a security advisory for CVE-2026-111497, an out-of-bounds write in the Brotli decoder bundled with Node.js. The vulnerability affects the Node.js 26.x, 24.x, and 22.x release lines. Node.js rates the issue High, while Google, the CVE Numbering Authority (CNA), gives it a critical CVSSv4 score of 9.2.An attacker who can supply Brotli data that an application d…

Lessons Learned From 'AdFection' and What To Do Next

Last week, researchers at Citizen Lab revealed a horrifying new malware campaign, dubbed “AdFection.” It used an ad network to distribute spyware to journalist’s devices to infect them without the target ever needing to click anything. This sort of attack on journalists is dangerous and incredibly concerning, especially since it’s built on the backbone of a technology we already object to: behavioral advertising. Alt…

PHP2Shell: From the attacker’s perspective

Executive Summary: What are CVE-2026-109618 and CVE-2026-109619? Why PHP vulnerabilities put most of the web at risk When you open a web page, something has to build that page before it reaches you. For roughly seven out of ten websites, the software doing that job is PHP. It sits on the web server, assembles the […]

هکر پلی استیشن ۵ جایزه ۱۳٫۵ میلیارد تومانی را به خانه برد

گزارش حفره‌ای امنیتی که اجرای لینوکس روی PS۵ را ممکن می‌کرد، برای یک هکر ۵۰ هزار دلار (۱۳٫۵ میلیارد تومان) پاداش به‌همراه آورد.

CVE-2026-115418 - SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)

Bulletin ID: 2026-151-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/26/2026 09:30 AM PDT Description: The AWS Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha module provides experimental constructs that manage Amazon Redshift users, tables and privileges. We identified CVE-2026-115418, an issue where crafted user names, comments or passwords set in these constructs could cha…

AI Threat Report: How Artificial Intelligence Is Used Across Illicit Communities

A monthly analysis of how artificial intelligence is used in illicit communities, based on Flashpoint proprietary intelligence and direct visibility into real threat actor environments. The post AI Threat Report: How Artificial Intelligence Is Used Across Illicit Communities appeared first on Flashpoint.

Inside Node2Shell: A Closer Look at CVE-2026-111497

USN-8956-1: Brotli vulnerability

It was discovered that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code.

Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware

Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat creation feature to conduct impersonation scams or to deliver malware. "A consistent pattern of attacker behavior has emerged across these incidents: the use of the same throwaway tenants, the same 'IT

USN-8955-1: nginx vulnerabilities

It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-15176) It was discovered that nginx incorrectly handled map directives using regex matching under certain circumstances. A remote attacker could poss…

Introducing the Wordfence Threat Response Team: A New Way to Report Active Threats in the WordPress Ecosystem

The Wordfence Threat Response Team is a new small, technically hands-on team responsible for turning rapidly emerging threats into customer protection and clear customer guidance. Spot an active threat? Report it directly to threat-response@wordfence.com The post Introducing the Wordfence Threat Response Team: A New Way to Report Active Threats in the WordPress Ecosystem appeared first on Wordfence.

AI-Generated Fake Bank Calls and NFC App Enabled €380,000 Fraud, Dutch Police Say

Dutch police arrest two men over AI-voiced bank fraud that allegedly used a fake app to steal card data from 170 victims, causing €380,000 in losses. Rotterdam police have arrested two men over a new type of bank fraud that used AI-generated phone calls, a fake banking app, and NFC technology to steal bank card […]

Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens

A large-scale GitHub campaign abused stolen access tokens to target 13,500+ branches and repositories with secret-stealing workflows

Industrial Vendors Check Products for PHP2Shell Vulnerabilities

Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities. The post Industrial Vendors Check Products for PHP2Shell Vulnerabilities appeared first on SecurityWeek.

Genesys Hack Exposes Customer Data From Internal Systems

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected. The post Genesys Hack Exposes Customer Data From Internal Systems appeared first on SecurityWeek.

Stolen AI Reasoning Could Help China Build Cheaper Rivals

Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI. The post Stolen AI Reasoning Could Help China Build Cheaper Rivals appeared first on SecurityWeek.

از علم تا اقتصاد؛ آنتروپیک می‌خواهد با هوش مصنوعی همه‌چیز را متحول کند

پرونده‌ی عرضه‌ی سهام آنتروپیک از رشد درآمد، زیان عظیم و قراردادهای پردازشی سنگین پرده برمی‌دارد.

⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More

This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already being used in attacks, and security teams have more urgent patches than they can keep up with. And that's not even the full story. A leaked key led to a software supply-chain

ابزاری که بازسازی بازی‌های کلاسیک با هوش مصنوعی را آسان‌تر می‌کند

انویدیا با انتشار به‌روزرسانی RTX Remix ۱.۶ امکان افزودن فناوری DLSS ۵ به بازی‌های کلاسیک را برای مادسازان فراهم کرد.

Linux Flaws Exposed Before Fixes as Root Exploit Goes Public

Six Linux flaws were made public, including one with a working root exploit and no merged fix

CVE-2026-96311 Windows Network List Service Tampering Vulnerability

Updated an acknowledgement. This is an informational change only.