نبض سایبری اخبار امنیت سایبری، با ذکر منبع

آرشیو ۹۰ روزه

همهٔ اخبار

جست‌وجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحهٔ اصلی خودش لینک دارد.

۱۱۲۴۲ خبر

صفحهٔ ۷ از ۳۷۵
The Hacker News

AI-Generated Fake Login Pages Are Making Account Takeovers Easier

Fake login pages are nothing new, but generative AI is making them easier to build and more convincing. Attackers can recreate familiar login screens, impersonate trusted brands and tailor phishing attempts to specific employees or organizations. Some fake login pages go beyond stealing passwords. They can also capture MFA codes or hijack authenticated sessions, allowing attackers to gain

فیشینگ امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین
منبع
The Hacker News

Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption

The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors. According to Russian cybersecurity company Kaspersky, the campaign has been active since at least July 2025. It's assessed to pick up

بدافزار و آلودگی رمزنگاری
منبع
CyberInsider

Apple patches CoreGraphics flaw exploited on older iPhones

Apple released iOS 18.7.11 and iPadOS 18.7.11 to patch a previously exploited CoreGraphics vulnerability on older devices, including the iPhone XS, XS Max, and XR. The updates address three vulnerabilities, including a separate flaw that could let a malicious app access the camera without permission. The most significant fix concerns CVE-2026-86950, an out-of-bounds write vulnerability … The post Apple patches CoreGr…

آسیب‌پذیری و روز صفر توسعه موبایل
منبع
دیجیاتو

حباب هوش مصنوعی در چین ترکید؛ سقوط ۴۰ درصدی شاخص سهام فناوری

نزدیک به ۴۸۰ میلیارد دلار از ارزش بازار مربوط به شاخص فناوری استار ۵۰ چین از بین رفت. The post حباب هوش مصنوعی در چین ترکید؛ سقوط ۴۰ درصدی شاخص سهام فناوری appeared first on دیجیاتو.

امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین
منبع
CSO Online

Alibaba AI model tried to send data to Beijing server, Cohere says

An Alibaba AI model generated an unexpected command to upload data to a Beijing-region cloud storage service during a cybersecurity evaluation, rival developer Cohere said, raising concerns about the security of AI agents with access to enterprise systems. The model, Qwen3.8-Flash-Next, was being tested using Microsoft’s CTI-REALM cybersecurity benchmark, which tasked it with writing a rule to detect malicious file d…

بدافزار و آلودگی آسیب‌پذیری و روز صفر امنیت هوش مصنوعی
منبع
The Cyber Express

Tailscale Investigates Serious SSH Privilege Escalation Issues After Tailworm Report

A new report called Tailworm claims that a single hacked device on a Tailscale network can gain root access on other servers it reaches. Two conditions apply: Tailscale SSH must allow port forwarding, and the attacker must already control a device the network's access rules permit to connect to the target. Erica Windisch of Cyberdione Labs published Tailworm on October 25 after three days of lab testing on Tailscale…

آسیب‌پذیری و روز صفر فیشینگ
منبع
CERT-Bund

[UPDATE] [hoch] Mautic: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Mautic ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.

بات‌نت و DDoS پایگاه داده
منبع
Schneier on Security

Hiding Capabilities in AI Models

Interesting research: “AI Models Can Provably Hide Arbitrary Capabilities” Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on the assumption that hidden capabilities can be elicited. We show this assumption does not hold under adversarial conditions by constructing backdoor attacks that embed encrypted neural networks within host model weights…

بدافزار و آلودگی رمزنگاری
منبع
Security Affairs

U.S. CISA adds PHP flaws PHP2Shell to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds PHP flaws PHP2Shell to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the PHP PHP2Shell vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: On October 21, PHP released emergency patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (CVSS score…

آسیب‌پذیری و روز صفر
منبع