The Hacker News دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۶:۵۸

⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More

A system doesn't always need a complicated bug to let someone in. Sometimes, a blank password is enough. That's one of the bigger stories this week. And it gets worse when the tools meant to keep systems updated or running safely become part of the attack. Elsewhere, attackers are hiding inside normal web traffic, stealing credentials from network devices, and finding new uses for exposed

هوش تهدید

خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

eSecurityPlanet سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۳۰

Japan Unveils Cybersecurity Package to Combat AI-Assisted Attacks

Japan announces a $63 million cybersecurity package featuring an AI-powered vulnerability testing team, stronger threat intelligence, and faster incident response.

آسیب‌پذیری و روز صفر هوش تهدید پاسخ به رخداد و جرم‌یابی

منبع

Flashpoint سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۷:۲۹

Introducing Flashpoint Agentic AI for Threat Intelligence

Purpose-built AI agents, powered by primary-source intelligence, support investigations and automate recurring intelligence workflows that power threat intelligence teams. The post Introducing Flashpoint Agentic AI for Threat Intelligence appeared first on Flashpoint.

هوش تهدید

منبع

The Hacker News سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۵:۴۵

Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed

An iOS sandbox escape published on GitHub lets an app read other apps' files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login credentials at risk of exposure to malicious apps, Binance warned today. Apple's updates for iOS 26 and 27, released yesterday, do not list a fix. A researcher who goes by forcequit released the escape, called worse_query, on Sunday, a

توسعه موبایل

منبع

SOCRadar سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۵:۲۶

Dark Web Profile: CyberXero

CyberXero is a Russian-speaking, financially motivated Initial Access Broker (IAB) active on Dark Web forums, including Dread and HackForums. The actor runs two parallel operations: an opportunistic global campaign that mass-exploits WordPress, Magento and other e-commerce platforms for access and payment data, and a directed campaign that conducts curated reconnaissance against Ukrainian energy and utilities […]

هوش تهدید

منبع