آرشیو ۹۰ روزه

همه اخبار

جست‌وجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحه اصلی خودش لینک دارد.

۱۱۷۶۱ خبر

صفحه ۳۴ از ۳۹۳
GitLab Blog

Pillow CVE-2026-112900: How to find and fix it with GitLab

GitLab is not affected by CVE-2026-112900 or the other vulnerabilities fixed in Pillow 13.0.0. GitLab products do not include the Pillow library, and our Security team has found no evidence of impact to GitLab-managed infrastructure. GitLab.com, GitLab Self-Managed, and GitLab Dedicated are not impacted.Pillow is one of the most widely used image libraries in the Python ecosystem. It often sits several layers down in…

زومیت

پیش‌بینی جسورانه کارکنان آنتروپیک: هوش مصنوعی تا سال ۲۰۳۰ برنده جایزه نوبل می‌شود

نظرسنجی آنتروپیک نشان می‌دهد ۹۱ درصد از متخصصان این شرکت انتظار دارند هوش مصنوعی تا سال ۲۰۳۰ به کشفی در تراز جایزه‌ی نوبل دست پیدا کند.

Security Affairs

SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 5

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can automate tasks, analyze large amounts of data, discover vulnerabilities and accelerate offensive operations. At […]

The Hacker News

Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers

A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls one device that the network's access rules permit to connect to the target. The findings were

زومیت

گزارش عملکرد «بله»؛ بیش از ۶۴ میلیون کاربر و ۳۴۲ میلیون پاسخ هوش مصنوعی

پیام‌رسان «بله» با انتشار کارنامه ۱۵ ماهه خود، از ثبت ۶۴ میلیون کاربر کل و پاسخ‌گویی هوش مصنوعی به ۳۴۲ میلیون پرسش خبر داد.

The Hacker News

PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity

In an update, Palo Alto Networks Unit 42 said it's retracting its earlier assessment that the post-compromise activity targeting the European government agency involved the exploitation of the PHP2Shell flaws. "What researchers saw was an attack against a European government agency executed in the context of a vulnerable PHP application," a spokesperson for the company told The Hacker News via

زومیت

اعتراضات گسترده در ردیت؛ انجمن r/opensource هوش مصنوعی و زبان‌های غیر از انگلیسی را ممنوع کرد

ممنوعیت پروژه‌های هوش مصنوعی و کنارگذاشتن غیرانگلیسی‌زبان‌ها، یکی از انجمن‌های متن‌باز ردیت را با اعتراض گسترده روبه‌رو کرد.

زومیت

ممنوعیت استفاده از چت‌جی‌پی‌تی و کلاد در ادارات دولتی سوئد؛ بازگشت به ابزارهای مایکروسافت

دفاتر دولتی سوئد دسترسی مستقیم به ChatGPT و کلاد را در سامانه‌های کاری کارکنان خود مسدود می‌کنند.

Security Affairs

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 120

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Auditing the auditor: Unmasking Apex Accelerator GhostAction Attack Escalates By Targeting GitHub Users Plex vulnerabilities being exploited in the wild to drop a cryptominer WordPress Rank Math SEO PRO Plugin 3.0.123 is vulnerable […]

Security Affairs

Security Affairs newsletter Round 601 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Capcom Data Breach Exposes 11.7 Million Email Addresses U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known […]

Security Affairs

OpenAI Paused Frontier AI Training After a Security Incident

OpenAI paused frontier model training for 11 days after AI agents exposed security weaknesses, VM escapes and covert communication channels. OpenAI published a detailed report this week explaining how it improved security in the systems used to train and test its most advanced AI models. The company also described what happened when its AI agents […]

زومیت

فاجعه امنیتی در فلش‌مموری‌های SecZure؛ هوش مصنوعی رمزگذاری را در ۷ دقیقه شکست

پژوهشگران امنیتی از کشف در پشتی در فلش‌های رمزگذاری‌شده و نفوذ ۷ دقیقه‌ای هوش مصنوعی به سیستم حفاظتی آن‌ها خبر دادند.

The Hacker News

OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication

OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models. "Based on the current state of alignment research, monitoring systems, and the security of internet infrastructure, we believe the responsible approach is to conduct frontier model training with no