نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
Security Affairs

Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers

Google dismantled a 1.3 million-device botnet allegedly built by Android TV box maker Videostrong to enable ad fraud and proxy abuse. Google and its partners dismantled a backdoor called XCPE that had enrolled more than 1.3 million set-top boxes in a botnet. The result of the investigation into the malware operation is the striking part: […]

بدافزار و آلودگی بات‌نت و DDoS توسعه موبایل
خواندن متن کامل در Security Affairs درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Help Net Security

Russian hackers target iOS and Android users with n-day exploits

Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits for patched flaws and steal their cookies, messages and Wi-Fi passwords, according to Sekoia. APT29 watering holes target mobile devices with n-day exploits (Source: Sekoia) The company’s Threat Detection & Research (TDR) team spotted the operation in mid-October 202…

توسعه موبایل
منبع
The Hacker News

APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker. "The injected JavaScript code collects browser and device attributes," Sekoia researchers Amaury-Jacques Garçon and

امنیت زنجیره تأمین هوش تهدید برنامه‌نویسی و زبان‌ها
منبع
Rapid7 Blog

The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliance

Introduction to BOD 26-04On June 10, 2026, CISA issued Binding Operational Directive 26-04, "Prioritizing Security Updates Based on Risk." Strip away the regulatory language and it reads like a single operational fact: for a vulnerability that is actively exploited, publicly reachable, and grants an attacker full control, you now have three calendar days to remediate it — and you must run a forensic investigation in…

آسیب‌پذیری و روز صفر نشت داده بات‌نت و DDoS
منبع