CSO Online پنجشنبه ۷ آبان ۱۴۰۵ · ۱۳:۳۰

Vulnerability exploitation rising as the root cause of many breaches

More evidence has emerged that attackers are turning to vulnerabilities rather than phishing as a means for breaking into corporate systems. Incident response firm LevelBlue’s Q3 findings show that vulnerability exploitation accounted for 14% of initial access cases, up from 4% in Q2. The finding represents more of a comeback than a fresh surge because in Q1 LevelBlue already recorded vulnerabilities as the root caus…

آسیب‌پذیری و روز صفر فیشینگ نشت داده پاسخ به رخداد و جرم‌یابی

خواندن متن کامل در CSO Online درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۳:۴۶

Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents

Names, offices, contact details and assignments of more than 41,000 U.S. Department of Homeland Security (DHS) employees have been leaked by a hacktivist group calling itself the Department of Peace. The group handed the data to the transparency collective Distributed Denial of Secrets (DDoSecrets) and to Swiss hacker and journalist maia arson crimew. DDoSecrets published the dataset, named Icepick, on October 28. Ac…

نشت داده

منبع

SecurityWeek پنجشنبه ۷ آبان ۱۴۰۵ · ۱۳:۱۷

Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August

Cisco on Wednesday released fixes for an exploited vulnerability affecting its Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. Tracked as CVE-2026-76418 and assigned a CVSS score of 8.6, the bug resides in the Remote Access SSL VPN service. Attackers can exploit it remotely, without authenticating, to force the device […] The post Attackers Exploit Second Cisco Fir…

آسیب‌پذیری و روز صفر

منبع

Check Point Blog پنجشنبه ۷ آبان ۱۴۰۵ · ۱۲:۴۷

HTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js

The key point: CVE-2026-111497 now increasingly referred to as HTTP2Shell and initially reported as Node2Shell, is broader than a Node.js vulnerability. The vulnerability is associated with Brotli decompression, so defenders need to find vulnerable implementations across applications and infrastructure, confirm whether untrusted compressed data can reach them, and patch the affected component. AT A GLANCE · CVE: CVE-…

آسیب‌پذیری و روز صفر امنیت هوش مصنوعی

منبع

CERT-Bund پنجشنبه ۷ آبان ۱۴۰۵ · ۱۲:۳۵

[NEU] [hoch] Microsoft Edge: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Spoofing-Angriffe durchzuführen sowie Daten zu manipulieren oder offenzulegen.

فیشینگ

منبع