The Hacker News دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۶:۵۸

⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More

A system doesn't always need a complicated bug to let someone in. Sometimes, a blank password is enough. That's one of the bigger stories this week. And it gets worse when the tools meant to keep systems updated or running safely become part of the attack. Elsewhere, attackers are hiding inside normal web traffic, stealing credentials from network devices, and finding new uses for exposed

هوش تهدید

خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

SOCRadar دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۸:۰۳

Critical Infrastructure Under Siege, From Freezers to Wider OT

The refrigeration cyberattack campaign that hit about 700 French supermarkets on October 11, 2026, is now a multi-country pattern of attacks on critical infrastructure. A second wave struck food businesses in 13 countries on November 2, cold rooms at a contractor for France’s national blood service were set to 110°C (230°F), and three UK meat […]

امنیت اینترنت اشیا و صنعتی هوش تهدید

منبع

The Hacker News دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۴:۵۷

Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars

The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock the doors and start the engine. Both apps signed customers in through ForgeRock, an identity platform now part of Ping Identity, and on those servers the researchers reached an

منبع

The Hacker News دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۴:۲۶

Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety

Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used a security flaw at that company to reach the wallets, both companies said late last week. Web3Auth then used the attacker's own route to empty other at-risk wallets before the attacker

منبع

The Hacker News دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۳:۳۱

LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks

Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said yesterday. It has several security fixes to release and asked operators to be careful until they are out. One operator said new accounts used an exploit to withdraw 2,285,545 satoshis, about 0.023 bitcoin, from his server before he could

متن‌باز

منبع