آرشیو ۹۰ روزه
جست‌وجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحه اصلی خودش لینک دارد.
ConnectWise is investigating unauthorized access to application identities associated with Cloud Backup, formerly SkyKick, after researchers detected the applications authenticating into customer Microsoft 365 environments. A vendor-controlled Microsoft 365 application credential was compromised and used to obtain Microsoft Graph access tokens in customer tenants. ConnectWise subsequently disabled seven application i…
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters operate a website that…
Meta wants the right to scrape your website for AI training. If you have a business account, that includes you. At the end of the month, Meta plans to change its commercial terms in a way that matters to every company advertising or selling through its platforms. The new language takes effect on October 30, […]
A breach affecting the OpenCode Console may lead to the exposure of API keys for Anthropic, OpenAI and Google Gemini users
Discover how to secure AI agents in your cloud environment with Tenable One Cloud Exposure. We explore Microsoft Entra Agent ID and provide essential best practices for robust agentic AI identity security.Key takeawaysUnderstand your current maturity level and then build an appropriate action plan to secure your agent identities.Use your cloud providers’ native tools or Tenable One Cloud Exposure to locate and catalo…
Discover how detection teams can split EDR-killer attacks into four distinct behavior hunts to catch BYOVD and driverless threats before ransomware fires.
CVE-2026-88771 lets attackers run commands on NetScaler Gateway before anyone signs in. Patching takes time most teams don't have, so the sign-in decision has to move in front of the vulnerable code.
Enterprises spent the last two years racing to capture the vast potential of AI, authorizing AI agents to touch production code, internal databases, customer tickets and financial ledgers. Because these agents operate … The post Reinventing Endpoint Security with Cortex XDR One appeared first on Palo Alto Networks Blog.
AI agents and AI-enabled tools are fundamentally changing how work gets done. From coding assistants to Model Context Protocol (MCP) servers, autonomous tools now access sensitive data, execute commands, and modify local … The post Introducing Unit 42 Managed Agentic Endpoint Security appeared first on Palo Alto Networks Blog.
SOCRadar Dark Web Team identified several underground posts, including an alleged ZoomInfo database sale involving 185 million records, an alleged TryCircle customer data leak, and an alleged Vicente López municipal database exposure. Other posts advertised a previously compromised HDB Financial Services dataset and an unverified X (Twitter) user database leak claim. Alleged ZoomInfo Database Sale […]
The UK Electoral Commission is building an AI system to alert candidates to damaging deepfakes within three hours. The UK’s Electoral Commission is building an AI-powered system to tell candidates about significant deepfakes within three hours of posting. Its chief executive, Vijay Rangarajan, said so at a panel at the Conservative Party’s annual conference last […]
Wiz CIRT responded to AI-driven attacks spanning cloud, Kubernetes, CI/CD, and identity. Learn how these attacks behave and how to detect them.
OpenBSD flaws, including a 37-year-old BSD bug, enable local attackers to bypass security protections and gain root access. Patches are available. Cybersecurity firm Calif published a full exploit and write-up this week for a local privilege escalation on OpenBSD 7.9 that chains two separate kernel flaws, one of them a 37-year-old integer overflow inherited from […]
Cloud Backup, SaaS Security, and Cloud Management services offline as IT service provider investigates possibility that unknown attackers have full access to client environments via stolen tokens
The confirmed and suspected targets include a university rector backing Serbia's protests and a prosecutor who investigated a Trump-linked Belgrade development, weeks before parliamentary elections. The post Spyware found on devices belonging to prominent Serbian critics as elections loom appeared first on CyberScoop.
Every federal bankruptcy court in the United States has lost access to the system it uses to send out bankruptcy notices. A BAE Systems cyberattack has disrupted the Bankruptcy Noticing Center (BNC), the platform that produces and transmits notices for all federal bankruptcy courts across the country. The Administrative Office of the U.S. Courts confirmed the incident in a statement on Thursday afternoon. BAE Systems…
No travel, no lessons, no test, and a UAE licence at the end of it. That was the promise behind a fake driving licence scheme that Dubai Police say has now been shut down. An eight-member criminal gang has been arrested for fraudulently obtaining driving licences from a neighbouring country for customers who had never been there, then helping them swap those licences for a UAE driving licence. The gang charged AED 10…
AI agents can now run sequences of research tasks with little human input. The question is who answers for the results. The European Commission has published the fourth version of its ERA Living Guidelines on the responsible use of generative AI in research, and its answer is clear: researchers remain accountable, no matter how much work they hand to an AI agent. Published on 15 October 2026, this is the most compreh…
When code becomes abundant trust becomes scarce.That is the argument GitLab CEO Bill Staples made in his recent essay: AI is collapsing the cost of producing software, and everything around production, including context, verification, governance, and evidence, becomes proportionally more important. Both security and collaboration are key elements to producing trust. AI widens what has to be trusted to include the age…
رئیس انجمن صنفی کارفرمایی شرکت‌های فناور هوش مصنوعی و اقتصاد دیجیتال ایران با تشریح جزئیات مصوبه ۳۲ بندی تسهیل دسترسی […] نوشته مصوبه بازگشایی سکوهای خارجی به معنای رفع فوری فیلترینگ نیست اولین بار در آی تی رسان منتشر شد.
قرار بود خدمات اینترنتی، ما را از صف اداره‌ها نجات دهند؛ اما وقتی هر مرحله از یک کار در سامانه‌ای […] نوشته هزاران سامانه، یک کار اداری؛ «ایران بوم» قرار است چه چیزی را عوض کند؟ اولین بار در آی تی رسان منتشر شد.
وقتی پاسخ بیشتر، تصمیم را سخت‌تر می‌کند The post قفل و قیچی؛ چرا هوش مصنوعی گاهی تصمیم‌گیری را سخت‌تر می‌کند؟ یادداشتی از محمدمهدی دوستی appeared first on دیجیاتو.
Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the world.
این تصمیم موجب تضعیف رقابت سالم است The post رئیس هیئت مدیره انجمن تلفن همراه: رجیستری آیفون ۱۸ مسافری متوقف شده است appeared first on دیجیاتو.
گودرزی رئیس مرکز آمار ایران گفت: عملیات اینترنتی نهمین سرشماری عمومی نفوس و مسکن کشور از امروز، ۲۵ مهر، آغاز شد. از امروز شناسایی نهایی افراد و آماده‌سازی فهرست‌ها انجام می‌شود و پیامک‌ها به‌تدریج برای گروه‌هایی از مردم در استان‌های مختلف ارسال خواهد شد.
رئیس هیات‌مدیره انجمن تلفن همراه، تبلت و لوازم جانبی ایران گفت: رجیستری تلفن های همراه «آیفون ۱۸ » که به صورت مسافری وارد کشور شده بود، از اواخر هفته گذشته متوقف شده است.
اطلاعات مربوط به خانه‌های خالی هنوز از سامانه املاک و اسکان به سازمان امور مالیاتی ارسال نشده است.
رئیس هیئت‌مدیره انجمن تلفن همراه اعلام کرد که رجیستری مسافری آیفون ۱۸ پرو و آیفون ۱۸ پرو مکس از اواخر هفته گذشته متوقف شده است.
کارمندان متا در مکاتبات داخلی اذعان کردند حساب‌های اینستاگرام لوئیز ایناسیو لولا داسیلوا، رئیس‌جمهور برزیل، در جریان انتخابات این کشور به‌دلیل محدودیت‌های اعمال‌شده با اختلال مواجه شده بود.
مایکروسافت به مناسبت بیست‌وپنجمین سالگرد ایکس‌باکس، ۲۵ بازی ویدیویی به ارزش بیش از ۵۰۰ دلار را به خریداران کامپیوترهای واجد شرایط هدیه می‌دهد.
