همهٔ اخبار

آشنایی با زیکورپا؛ راهکار نوین مدیریت اضافه وزن و چاقی

زیکورپا یک داروی تزریقی ایرانی حاوی تیرزپاتاید است که با کاهش اشتها و تنظیم قند خون به کاهش وزن پایدار در افراد واجد شرایط کمک می‌کند.

Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison

Artem Stryzhak participated in a series of ransomware attacks on hospitals, government entities and law firms from the middle of 2018 to late 2021. The post Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison appeared first on CyberScoop.

CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets

Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server environments used by threat actors to conduct the malicious cyber operations, described them as distinct from previously published

Censys AI Agents: Automate Investigations and Amplify Your Threat Intel

Censys Investigator, our agentic framework, now has an API. The same inputs you’d give it in Platform (domains, IPs, or a full threat intel report) can now come from a script, a SOAR playbook, or an AI agent. You get back an in-depth new report, detailing the broader attacker campaign or cluster. This includes new […] The post Censys AI Agents: Automate Investigations and Amplify Your Threat Intel appeared first on C…

Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities

Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered. A security researcher demonstrated that the private keys for eight eMudhra intermediate certificates were fundamentally broken due to an unprecedented error in their Key Generation Ceremony (KGC) in April 2025. This allows anyone to brute-force acquire these private keys…

Brotli bug reaches far beyond Node.js (CVE-2026-111497)

A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk. About CVE-2026-111497 Alternatively known as “Node2Shell”, “Broccoli2Shell” and “Brotli2Shell”, CVE-2026-111497 is a remotely exploitable out-of-bounds write flaw that gained widespread attention after Node.js publicly disclosed it on October 21, 2026. “An attacker who can supply Brotli data…

AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619 - Update 2

فایل‌های MD. به ابزار جدید هکرها برای سوءاستفاده از ایجنت‌های هوش مصنوعی تبدیل شده‌اند

در این روش هکرها با فریب ایجنت از طریق فایل‌های معمولی مارک‌داون، دستور اجرای کدهای مخرب و سرقت توکن‌های دسترسی را صادر می‌کنند. The post فایل‌های MD. به ابزار جدید هکرها برای سوءاستفاده از ایجنت‌های هوش مصنوعی تبدیل شده‌اند appeared first on دیجیاتو.

Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’

New findings by the Citizen Lab and SHARE Foundation show that a prominent supporter of Serbia's student movement was targeted with spyware. The post Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’ appeared first on The Citizen Lab.

«جینی ۴» رونمایی شد؛ هوش مصنوعی شگفت‌انگیز گوگل برای خلق جهان‌های تعاملی

جینی ۴ جهان‌هایی تعاملی با صدای واقعی و فیزیک دقیق می‌سازد، اما پایداری اشیا و انسجام بلندمدت هنوز حل نشده‌اند.

'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants

The malware's focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer infrastructure from a single compromised endpoint.

Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances

The University of New Mexico is working to restore systems following the incident, which has been claimed by the BYOD ransomware group

CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

On September 25, 2026, Mandiant released a report regarding continued mass exploitation of CVE-2026-35273 by the ShinyHunters group. TrendAI’s Zero Day Initiative first reported this CVE to Oracle on June 10, 2026, following an investigation I conducted with Minh Giang and Lucas Miller of TrendAI Research. Although Oracle issued a patch under a single CVE, we reported three distinct vulnerabilities across multiple Pe…

USN-8957-1: authd vulnerability

Ali Mashally discovered that authd did not properly validate user identities when matching accounts from identity providers. An attacker could possibly use this issue to gain access to another user's local account and files, resulting in unauthorized access to sensitive information.

French Court’s Site-Blocking Orders Drive Quad9 Out Of France

A nonprofit service that protects internet users’ privacy is leaving France. Quad9, a free DNS resolver, has said it will reluctantly stop serving users in France on November 24. This follows a French court order that Quad9 must block access to websites that are accused of infringing the copyrights of a sports broadcaster. Forcing a responsible privacy service out of an important market is a predictable result of try…

Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack

University hospitals once again accepting patients after initial ambulance diversion, but recovery to continue in phases

سرقت نیم میلیارد دلار در ۸۱ دقیقه؛ معمایی که پس از ۳۶ سال هنوز هم حل نشده است

با گذشت ۳۶ سال از سرقت ۱۳ اثر هنری به ارزش ۵۰۰ میلیون دلار از موزه‌ی گاردنر، سرنوشت این شاهکارها با وجود جایزه ۱۰ میلیون دلاری همچنان نامعلوم است.

نخستین فیلم ساخته‌شده با هوش مصنوعی، متحمل شکستی سنگین شد

نخستین فیلم ساخته‌شده با مصنوعی چین، با وجود اکران گسترده به شکستی تجاری تبدیل شد.

OpenAI Compaction Flaw Exposed AI Reasoning to Researchers

Researchers uncovered an OpenAI API flaw that exposed hidden AI reasoning traces, prompting a fix and a $6000 bug bounty reward

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws

Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released. The post Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws appeared first on SecurityWeek.

Sony discloses data breach exposing 2.6 million customer records

Sony Network Communications has disclosed a data breach exposing more than 2.58 million customer records following unauthorized access to its So-net membership database. The incident also compromised passwords for 54,401 email addresses across four email services. According to the company’s announcement, the intrusion occurred on October 19 but was discovered on October 23. Sony then … The post Sony discloses data br…

National cyber director rolls out latest pilot in South Carolina, this time for rural hospitals

Like the water sector initiative, the six-month pilot program will connect rural hospitals with industry for free services. The post National cyber director rolls out latest pilot in South Carolina, this time for rural hospitals appeared first on CyberScoop.

Hackers repeatedly breached suppliers holding UK police data, watchdog finds

His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services says British police data has been breach several times this decade through third-party IT suppliers.

ISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AI Security Jobs

ISC2’s new Cyber-AI Workforce Coalition serves as a “vendor-neutral convener” to map the future of AI security careers, ISC2 CEO Scott Beale told Infosecurity

University of New Mexico hospital diverts ambulances after cyberattack

For about two hours on Monday, the organization diverted ambulances to health systems in Albuquerque and Santa Fe. They were forced to suspend outpatient surgeries and appointments for the remainder of the day.

Node.js Brotli Decoder Out-of-Bounds Write Threatens Remote Code Execution Across All Supported Versions

Executive Summary: A high-severity vulnerability (CVE-2026-111497) was disclosed affecting Node.js across all supported release lines (22.x, 24.x, 26.x), allowing attackers to achieve remote code execution via malformed Brotli-compressed data processed by node:zlib or fetch(). Due to the potential for crashes, memory disclosure, and code execution in cloud workloads, immediate patching is required. About CVE-2026-111…

Les infostealers prennent l’IA en ligne de mire

Dans la guerre permanente que se livrent cyberattaquants et cyberdéfenseurs, le nouveau nerf de la […] L’article Les infostealers prennent l’IA en ligne de mire est apparu en premier sur INTRINSEC.

Cisco Unified Communications Products Security Hardening Release: October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted…

Cisco Expressway Series Security Hardening Release: October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist cu…