آرشیو ۹۰ روزه
جست‌وجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحه اصلی خودش لینک دارد.
Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: Abstract: We estimate how much public cryptanalysis each public-key assumption has received, using the literature itself as the instrument. From roughly sixteen thousand candidate papers we classify cryptanalytic work on ECDLP, structured and plain lattices, syndrome dec…
Session says it has implemented the core cryptography for its Protocol v2 upgrade, moving the decentralized messenger closer to perfect forward secrecy, post-quantum encryption, and stronger controls over linked devices. Session said it has published the protocol specification and implemented encryption for one-to-one messages and verified device linking in libsession, the shared cryptographic library used … The post…
We applied AWS Security Agent (now part of AWS Continuum), our autonomous penetration-testing agent, to 37 real, recently disclosed Common Vulnerabilities and Exposures (CVEs), each packaged as a live, containerized target with a flag hidden at the vulnerability’s intended sink. Starting from an unauthenticated or low-privilege position (an endpoint URL and a one-line hint, no […]
A calendar invite is one of the most routine messages in the modern workplace. It lands in the inbox, asks for a few seconds of attention, and is rarely questioned. Attackers know this, and they are now using fake meeting invitations to steal Microsoft account credentials. We have identified several large-scale phishing campaigns that abuse fake calendar invites to harvest credentials. Some arrive as an .ics attachme…
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said Thursday. The hidden attack code ran the moment an ad loaded on the screen, and in some cases the ad loaded out of sight, in the background. The Citizen
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives
مقام‌های فدرال رزرو آمریکا هشدار می‌دهند سرمایه‌گذاری گسترده در دیتاسنترهای هوش مصنوعی و افزایش تقاضا برای برق و نیروی کار، […] نوشته فدرال رزرو هشدار داد؛ رونق دیتاسنترهای هوش مصنوعی می‌تواند تورم را تشدید کند اولین بار در آی تی رسان منتشر شد.
هوش مصنوعی به نابینایان کمک می‌کند محیط اطراف را بشناسند، اسناد را بخوانند، مسیرها را پیدا کنند و بسیاری از کارهای روزمره را بدون کمک دیگران انجام دهن
Reports generated from the scanning of EU users’ private communications are analyzed using Palantir’s Foundry software at the National Center for Missing & Exploited Children (NCMEC), according to an investigation by Swedish newspaper Dagens ETC. The findings raise questions about transparency and safeguards around sensitive data transferred to the United States, although NCMEC says Palantir … The post Flagged EU cha…
در یک خبر خوب برای دارندگان برخی از محبوب‌ترین گوشی‌های سری Galaxy A، سامسونگ انتشار نسخه پایدار آپدیت One UI ۹ را آغاز کرده است. این آپدیت مبتنی بر اندروید ۱۷ است و از گلکسی A۲۷ گرفته تا گلکسی A۵۶در صف دریافت آن قرار دارند.
شاهین طبری، عضو هیئت‌مدیره مجتمع خیریه رعد در یادداشتی برای زومیت از ضرورت‌های ساخت جامعه فراگیر می‌نویسد که بستر مناسبی برای افراد دارای معلولیت است.
این فرمول مانند یک سوزن قطب‌نما است که در یک فضای برداری، گرایش مدل به تولید پاسخ‌های نامطلوب را پیش‌بینی می‌کند. The post دانشمندان با فرمولی ریاضی زمان سرکشی هوش مصنوعی را پیش‌بینی کردند appeared first on دیجیاتو.
Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.
Key Findings AI Agents Are the Newest Attack Surface The teams building fastest aren’t just shipping apps anymore. They’re shipping agents: support bots wired into ticketing systems, internal copilots with read access to the data warehouse, coding agents that can open pull requests, and autonomous workflows that call APIs on their own. Each one is […]
We'll likely learn more about how this will work at the company's upcoming "AI & Autonomy Day" event in December.
عصای سفید هوشمند با کمک حسگرها و هشدارهای لرزشی، موانع را پیش از برخورد تشخیص می‌دهد؛ اما چه تفاوتی با عصای معمولی دارد و چقدر قابل‌اعتماد است؟
The funding comes as Ramp's annualized revenue crosses $2B, and its customer count reaches 85,000.
Israeli adtech outfit allegedly helped spyware vendors infect phones while enjoying Google's seal of approval
در پی انفجار و آتش‌سوزی در سایت تولید تراشه اینتل در شهر کریات گت در جنوب اسرائیل، دو کارگر جان باخته‌اند و یک نفر دیگر با وضعیت وخیم در بیمارستان بستری است. پلیس احتمال می‌دهد نقص در یک کپسول گاز باعث انفجار شده باشد.
افراد نابینا نیز خواب می‌بینند؛ اما رؤیاهای کسانی که هرگز بینایی نداشته‌اند، چگونه شکل می‌گیرد و چه تفاوتی با رؤیاهای افراد بینا دارد؟
A cyberattack on Britain’s Legal Aid Agency (LAA) stole far older and broader records than the government previously disclosed.
The new shopping tool is available in the U.S. across Google Search and the Gemini app.
Most of the data is related to applications, claims, and payments submitted between 2007 and 2025. The post UK Legal Aid Agency Hack Scope Widens After Forensic Review appeared first on SecurityWeek.
Spyware vendors use online ad infrastructure to profile targets and deliver exploits without requiring users to click anything. The investigation links Discover-Tech to Candiru, an Israeli spyware vendor that the US government placed on its Entity List in 2021. Candiru has since used the name Integrity Labs. Citizen Lab also identified links involving other surveillance […]
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file system (NFS) server daemon; - Overlay file system; - IPv6 networking; - Netfilter; (CVE-2024-53194, CVE-2024-53214, CVE-2024-…
