آرشیو ۹۰ روزه
جست‌وجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحه اصلی خودش لینک دارد.
در این روش هکرها با فریب ایجنت از طریق فایل‌های معمولی مارک‌داون، دستور اجرای کدهای مخرب و سرقت توکن‌های دسترسی را صادر می‌کنند. The post فایل‌های MD. به ابزار جدید هکرها برای سوءاستفاده از ایجنت‌های هوش مصنوعی تبدیل شده‌اند appeared first on دیجیاتو.
New findings by the Citizen Lab and SHARE Foundation show that a prominent supporter of Serbia's student movement was targeted with spyware. The post Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’ appeared first on The Citizen Lab.
جینی ۴ جهان‌هایی تعاملی با صدای واقعی و فیزیک دقیق می‌سازد، اما پایداری اشیا و انسجام بلندمدت هنوز حل نشده‌اند.
The malware's focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer infrastructure from a single compromised endpoint.
The University of New Mexico is working to restore systems following the incident, which has been claimed by the BYOD ransomware group
On September 25, 2026, Mandiant released a report regarding continued mass exploitation of CVE-2026-35273 by the ShinyHunters group. TrendAI’s Zero Day Initiative first reported this CVE to Oracle on June 10, 2026, following an investigation I conducted with Minh Giang and Lucas Miller of TrendAI Research. Although Oracle issued a patch under a single CVE, we reported three distinct vulnerabilities across multiple Pe…
Ali Mashally discovered that authd did not properly validate user identities when matching accounts from identity providers. An attacker could possibly use this issue to gain access to another user's local account and files, resulting in unauthorized access to sensitive information.
A nonprofit service that protects internet users’ privacy is leaving France. Quad9, a free DNS resolver, has said it will reluctantly stop serving users in France on November 24. This follows a French court order that Quad9 must block access to websites that are accused of infringing the copyrights of a sports broadcaster. Forcing a responsible privacy service out of an important market is a predictable result of try…
University hospitals once again accepting patients after initial ambulance diversion, but recovery to continue in phases
با گذشت ۳۶ سال از سرقت ۱۳ اثر هنری به ارزش ۵۰۰ میلیون دلار از موزه‌ی گاردنر، سرنوشت این شاهکارها با وجود جایزه ۱۰ میلیون دلاری همچنان نامعلوم است.
نخستین فیلم ساخته‌شده با مصنوعی چین، با وجود اکران گسترده به شکستی تجاری تبدیل شد.
Researchers uncovered an OpenAI API flaw that exposed hidden AI reasoning traces, prompting a fix and a $6000 bug bounty reward
Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released. The post Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws appeared first on SecurityWeek.
Sony Network Communications has disclosed a data breach exposing more than 2.58 million customer records following unauthorized access to its So-net membership database. The incident also compromised passwords for 54,401 email addresses across four email services. According to the company’s announcement, the intrusion occurred on October 19 but was discovered on October 23. Sony then … The post Sony discloses data br…
Like the water sector initiative, the six-month pilot program will connect rural hospitals with industry for free services. The post National cyber director rolls out latest pilot in South Carolina, this time for rural hospitals appeared first on CyberScoop.
His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services says British police data has been breach several times this decade through third-party IT suppliers.
ISC2’s new Cyber-AI Workforce Coalition serves as a “vendor-neutral convener” to map the future of AI security careers, ISC2 CEO Scott Beale told Infosecurity
For about two hours on Monday, the organization diverted ambulances to health systems in Albuquerque and Santa Fe. They were forced to suspend outpatient surgeries and appointments for the remainder of the day.
Executive Summary: A high-severity vulnerability (CVE-2026-111497) was disclosed affecting Node.js across all supported release lines (22.x, 24.x, 26.x), allowing attackers to achieve remote code execution via malformed Brotli-compressed data processed by node:zlib or fetch(). Due to the potential for crashes, memory disclosure, and code execution in cloud workloads, immediate patching is required. About CVE-2026-111…
Dans la guerre permanente que se livrent cyberattaquants et cyberdéfenseurs, le nouveau nerf de la […] L’article Les infostealers prennent l’IA en ligne de mire est apparu en premier sur INTRINSEC.
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted…
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist cu…
Both critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells
The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web's software.
به‌روزرسانی جدید مجموعه‌نرم‌افزارهای Creator Studio با افزودن ابزارهای هوش مصنوعی و امکانات پیشرفته برای مک، آیپد و آیفون معرفی شد.
SkyW4lker (SkyW4lker x365 Sentinel) is an active device-code phishing kit targeting Microsoft 365 users in the United States, Europe, and other regions. By abusing Microsoft’s legitimate authentication process, the kit can give attackers access to corporate accounts without stealing passwords or bypassing MFA. This puts business emails, sensitive documents, and other Microsoft 365 resources at […] The post SkyW4lker…
The major cyber attacks of September 2026 hit federal law enforcement, a rival cybercrime gang, and the companies that verify identities. ShinyHunters hijacked the Clop ransomware gang’s Dark Web leak site and, four days later, claimed a breach of the Federal Bureau of Investigation (FBI). Identity data drove the month’s biggest numbers, led by adata […]
Updated an acknowledgement. This is an informational change only.
Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
Information published.
