Ransomware attackers are expanding their tactics beyond encrypting corporate systems and threatening to leak stolen data. They are increasingly using AI in attacks, exploiting organizations’ own AI systems and even using physical intimidation by threatening employees and their families to pressure companies into paying ransoms. The Semperis’ 2026 Ransomware Risk Report found that 84% of surveyed ransomware victims ex…
On 14 October 2026, Cisco published a security advisory addressing a critical vulnerability affecting the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. This vulnerability could allow an unauthenticated, remote attacker to write arbitrary files and execute commands with root privileges on the underlying operating system. The Cisco PSIRT is aware of active exploitation of this vulnerability.…
اپل هزینه تعمیر گوشی تاشوی جدید خود، iPhone Duo، را اعلام کرده و ارقام منتشرشده نشان می‌دهند آسیب دیدن نمایشگر داخلی این گوشی می‌تواند نزدیک به ۱۰۰۰ دلار هزینه داشته باشد. این مبلغ برای دستگاهی با قیمت پایه ۱۹۹۹ دلار، رقم کوچکی نیست. اگر هم آسیب گوشی گسترده‌تر باشد و در دسته «سایر آسیب‌ها» قرار بگیرد، هزینه تعمیر به ۱۴۹۹ دلار می‌رسد؛ رقمی معادل سه‌چهارم قیمت پایه خود گوشی.
CVE-2026-35029 and CVE-2026-59823 affect LiteLLM, which is commonly used by enterprises to connect their AI applications to providers like OpenAI and Anthropic
متا با معرفی قابلیت تماس مهمان، امکان دعوت افراد فاقد حساب کاربری به تماس‌های واتس‌اپ را از طریق لینک فراهم کرد. The post قابلیت جدید واتس‌اپ: با افرادی که حساب کاربری ندارند تماس بگیرید appeared first on دیجیاتو.
Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities. The post CikaBika Bot RAT Uses Discord for C&C appeared first on SecurityWeek.
Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Denial-of-Service-Zustände herbeizuführen, Cross-Site-Scripting-Angriffe durchzuführen, Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen und Berechtigungen zu erweitern (einschließlich des Erwerbs von Administratorrechten).
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (coreutils) ausnutzen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.
AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing more confident in their own output faster than practitioners are developing reliable ways to verify it. Without governance models and validation standards in place, that gap compounds and rarely stays contained to a workstation: an
Cisco Secure Email & PAN-OS Zero-Days Exploited Cisco and Palo Alto Networks have patched two actively exploited zero-day vulnerabilities that can lead to root-level code execution on security appliances. CISA has flagge
The US Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322, a high-severity remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS CVE-2026-76519, a critical relative path traversal vulnerability in Cisco Secure Email Gateway (SEG) CVE-2026-105133, a medium-severity im…
The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' registered names along with their numbers for incoming calls starting November 1, 2026, in an effort to help people identify calls from unknown numbers and tackle spam or fraudulent calls. To that end, the Department of Telecommunications has issued a circular urging service
گزارش‌ها می‌گویند ناتینگ درحال توسعه دو مدل عینک هوشمند است که یکی بر قابلیت‌های صوتی و دیگری بر دوربین و هوش‌مصنوعی تمرکز دارد. The post ناتینگ ظاهراً روی دو مدل عینک هوشمند با قابلیت‌های هوش مصنوعی کار می‌کند appeared first on دیجیاتو.
SOCRadar Splunk Integration: New MSSP and Vulnerability Apps Your analysts live in Splunk. Your external risk does not: SOCRadar alarms for dozens of managed companies, and vulnerability findings across an attack surface
یک مهندس فعال در پروژه بلاک‌چین Thru می‌گوید با صرف حدود ۲۰۰۰ دلار برای استفاده از هوش مصنوعی Muse متعلق به متا، توانسته طراحی یک شتاب‌دهنده رمزنگاری را به مرحله چیدمان فیزیکی برساند.
Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks PAN-OS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code mit Root-Rechten auszuführen, Sicherheitsmaßnahmen zu umgehen, sich als andere Benutzer auszugeben oder einen Denial-of-Service-Zustand auszulösen.
The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT. The post Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies appeared first on SecurityWeek.
Microsoft uncovered a criminal marketplace supplying tools and accounts used in phishing scams worldwide. Attackers used these resources to target organizations in healthcare, financial services, wholesale distribution, and IT across Japan, the United States, Australia, and India. Phishing kits and cloud accounts for sale Working with Resecurity, Microsoft identified three phishing kits sold through YAM Store, an und…
