The Hacker News سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۹:۲۹

Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization controls and gain root access to a susceptible device. The vulnerabilities, a pre-authentication authorization bypass vulnerability and a command injection vulnerability, have been assigned the CVE identifiers CVE-2026-116606 (CVSS score: 9.3)

آسیب‌پذیری و روز صفر امنیت هویت و دسترسی

خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Cisco Security Advisories سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۲۰:۳۵

Cisco Secure Email Gateway SQL Injection Vulnerability

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL st…

آسیب‌پذیری و روز صفر پایگاه داده سیستم‌عامل

منبع

The Hacker News سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۲۰:۲۵

Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft

Binance on Tuesday said the record-setting theft of $6.43 billion in assets from the world's largest cryptocurrency exchange was the culmination of a "sophisticated, multi-stage campaign" that involved the use of a tampered Homebrew installation and recruitment-themed social engineering attack targeting two of its engineers. "It was not a single isolated breach or a simple phishing incident,"

فیشینگ نشت داده

منبع

CERT/CC Vulnerability Notes سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۹:۱۲

VU#124705: BaseChat – Audio Dating App, Android version 9.8.1, contains multiple vulnerabilities

Overview Multiple vulnerabilities have been identified in the Android application, BaseChat – Audio Dating App, version 9.8.1, which ultimately compromise the privacy of users’ personal data and activity. Description BaseChat is an online dating platform built in Flutter and targeted toward users over 18. It facilitates anonymous, voice-first interaction between users. Three distinct vulnerabilities have been identif…

آسیب‌پذیری و روز صفر توسعه وب توسعه موبایل

منبع

The Hacker News سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۹:۱۱

Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges

Google on Monday warned that threat actors are hijacking enterprise access to Large Language Models (LLMs) to fraudulently leverage expensive computing resources and AI services. The tactic is called LLMjacking, a form of resource hijacking adapted for the LLM era, where an attacker obtains an API key through phishing, source code leaks, misconfigured environments, or exposed client-side code

فیشینگ امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین

منبع