The Register - Security
Cisco make-me-root email bug exploited as a 0-day by unknown crims
Both Switchzilla and CISA sound the alarm
آرشیو ۹۰ روزه
همه اخبار
جست‌وجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحه اصلی خودش لینک دارد.
۱۲۱۲۲ خبر
صفحه ۹۸ از ۴۰۵
آی‌تی‌نا
روشی تازه برای ساختن سلول‌های ضدسرطان مستقیما داخل بدن، بدون نیاز به آزمایشگاه
پژوهشگران با کریسپر سلول‌های ایمنی را درون بدن برای مقابله با سرطان بازبرنامه‌ریزی کردند؛ روشی که می‌تواند درمان کار-تی را ارزان‌تر و سریع‌تر کند.
Ars Technica - Technology Lab
Fridge hack costing millions and sparking fires stemmed from poor security
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
TechCrunch Security
Flock CEO says its microphones detect ‘just gunshots.’ Its website says different
Langley’s comments come amid mounting scrutiny of Flock from privacy advocates, including the ACLU, and members of the public who are concerned about the misuse of its technology.
Dark Reading
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
آی‌تی‌نا
هوش مصنوعی در آستانه تغییر صنعت بازی؛ کنسول‌های خانگی در خطرند
رشد هوش مصنوعی و بازار ۳۸ میلیارد دلاری بازی‌های ابری تا سال ۲۰۳۵ می‌تواند آینده کنسول‌های خانگی، پلی‌استیشن و نینتندو را دگرگون کند.
Security Affairs
U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Microsoft Windows Shell flaw, tracked as CVE-2026-96951 (CVSS score of 8.8), to its Known Exploited Vulnerabilities (KEV) catalog. Microsoft Patch Tuesday security updates for October 2026 address a […]
The Record (Recorded Future)
North Macedonian police arrest alleged administrator behind OLVX cybercrime market
A raid on a home in a North Macedonian village led to the arrest of the suspected administrator of the OLVX market, according to the Balkan country's Interior Ministry along with the FBI.
TechCrunch Security
Colossal Biosciences announces new AI platform to help accelerate de-extinction efforts
Colossal announced a new AI platform to help accelerate its de-extinction efforts and Peter Diamandis has launched a new fund to back startups who use it.
آی‌تی‌نا
روشی تازه با هوش مصنوعی برای شکار نشانه‌های حیات در سیاره‌های دیگر
پژوهشگران دانشگاه اوساکا با هوش مصنوعی و جریان برق، اسید آمینه‌های «اِل» و «دی» را با دقت بالای ۸۰ درصد تفکیک کردند؛ گامی برای یافتن حیات فرازمینی.
Dark Reading
Yam Store: The Phishing Network Behind a Billion Messages
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
آی‌تی‌نا
اپل با یک لولای متفاوت می‌خواهد مشکل داغ شدن آیفون تاشو را حل کند
آیفون Duo با محفظه بخار و لوله گرافیتی در لولا، راهکار تازه اپل برای مدیریت گرمای گوشی‌های تاشو و بهبود عملکرد پایدار است.
Orca Security
Critical GitLab RCE Lets Unauthenticated Attackers Execute Code on Servers (CVE-2026-97229)
Executive Summary A maximum-severity vulnerability (CVE-2026-97229, CVSS 10.0) was disclosed affecting GitLab Community Edition (CE) and Enterprise Edition (EE), allowing attackers to execute arbitrary code on GitLab servers via specially crafted regular expressions in CI/CD pipeline configurations. Due to the potential for full server compromise and downstream supply-chain impact, immediate patching is required. Abo…
The Record (Recorded Future)
Brooklyn DA’s office disrupts crypto scam targeting Russian community
Russian-speaking Brooklyn residents began tipping off local authorities to a cryptocurrency fraud scheme three years ago, leading to an operation to take down the associated servers and domains.
زومیت
فناوری برای همه، بدون استثنا؛ روز جهانی عصای سفید در زومیت
در روز جهانی عصای سفید، اخبار همیشگی زومیت را کنار گذاشته‌ایم تا از زندگی نابینایان، موانع دسترسی‌پذیری و فناوری‌های کاربردی و کمک‌کننده بگوییم.
آی‌تی‌نا
آیا رایانه شما در سال ۲۰۲۷ به‌روزرسانی‌های ویندوز را از دست می‌دهد؟
مایکروسافت هشدار داد برخی نسخه‌های ویندوز ۱۰، ویندوز ۱۱ و ویندوز سرور تا ۱۹ ژوئن ۲۰۲۷ باید گواهی‌های امنیتی را به‌روز کنند، وگرنه از Windows Update کنار می‌روند.
زومیت
چرا اورانوس به پهلو می‌چرخد؟ راز انحراف محوری شدید سیاره هفتم منظومه شمسی
چرخش از پهلو احتمالاً بارزترین ویژگی اورانوس است؛ اما دقیقاً چه عاملی موجب شده که این سیاره به یک سمت خود واژگون شود؟
EFF
DHS Inspector General Finds That TSA is Not Properly Safeguarding Passenger Facial Recognition Data
EFF legal intern Gabrielle Ladun was the principal author of this post. The Department of Homeland Security Office of Inspector General (DHS OIG) has published a summary of findings from its audit of the Transportation Security Administration’s (TSA) facial recognition technology. While the detailed findings are classified, the summary states that the OIG’s audit uncovered a “significant weakness” in the technology’s…
TechCrunch Security
Flock CEO: We haven’t ‘fired’ any police departments as customers
Flock CEO Garrett Langley said that the surveillance company has not canceled contracts of any police department or law enforcement agency, despite reports of abuse.
Cloudflare Blog
Yandex outage: Data shows that instead of going dark, malicious bots went on the move
When strikes hit Yandex data centers, many assumed Russian bot operations went dark. Cloudflare data reveals that while search crawling stopped, malicious bots simply migrated to other networks.
Proofpoint
Disruption Targets Major Chinese-Language Phishing Kits with Japanese Focus
Key findings A disruption action targeting prominent players across the Chinese-speaking phishing and fraud ecosystem struck a blow to the most high-volume threats in Proofpoint data. Proofpoint supported Microsoft and other private and public partners in the civil lawsuit and takedown action. The highest-volume direct email threats in Proofpoint campaign data come from three phishing kits our researchers named CoGUI…
AWS Security Blog
Penetration testing every deployment with AWS Continuum
Most security tooling that fits into a CI/CD pipeline—static analysis (SAST), software composition analysis (SCA), and dynamic scanners (DAST)—flags potential issues from patterns and signatures. A flagged pattern shows you where to look; penetration testing is what confirms whether something is actually exploitable. That confirmation has traditionally come from a periodic, out-of-band engagement that runs […]
زومیت
خودروساز چینی لی‌اتو با خودرو i۶ وارد بازار اروپا می‌شود
کراس‌اوور تمام‌برقی لی‌اتو با نام Li ۶ در سه‌ماهه نخست سال ۲۰۲۷ وارد بازار اروپا خواهد شد.
Wiz
ASPM in the AI Era Part 1: Unified Visibility Across Your Stack
Integrate your existing code scanners into Wiz for a unified view of application risk across your environment.
TechCrunch Security
Electric vehicle sales in the U.S. are showing signs of life
The electric vehicle market in the U.S. has been growing for the last three consecutive quarters.
زومیت
قمار ۲۰۰ میلیارد دلاری زاکربرگ روی قدرتمندترین هوش مصنوعی متا
میوس واندر پیشرفته‌ترین هوش مصنوعی متا است؛ مدلی که مدیرعامل شرکت ابتدا روی آن تردید داشت.
Dark Reading
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
TechCrunch Security
TimeTeller puts our internal clocks at the center of personalized medicine
German startup TimeTeller has developed a saliva test kit to help anyone understand their circadian rhythm; it aims to reduce side effects from cancer treatments.
TechCrunch Security
Ambrosia Energy will build a 10 GWh factory in Texas to make batteries for off-grid data centers
Startup Ambrosia Energy will build a massive factory to crank out batteries to augment solar panels, creating a round-the-clock clean power plant.
AWS Security Bulletins
CVE-2026-110310 - RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET
Bulletin ID: 2026-135-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/14/2026 12:30 PM PDT Description: We identified CVE-2026-110310, an issue in Amazon S3 encryption client for .NET that could allow a remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS#1 v1.5. Since t…