The Hacker News پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۰:۳۶

Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution

Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found. The exploit lets anyone who can reach a switch's web management interface run commands on it without logging in. Zyxel has released new firmware for 10 GS1900 models that closes the hole. The earlier fix is the 2.90

آسیب‌پذیری و روز صفر امنیت اینترنت اشیا و صنعتی

خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Cyble پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۲:۰۰

AI-Powered Ransomware Is Coming for UK Critical Infrastructure, and Europe Is Already the Testing Ground

Overview The UK's National Cyber Security Centre (NCSC) has put a date on a threat that security teams across Europe have been bracing for. In its 2026 Annual Review, The State of the Cyber Nation, the agency assesses it is highly likely that AI-powered malware will be used in a ransomware attack on UK Critical National Infrastructure by 2028. That is not a distant, speculative scenario. It is a two-year window, and…

بدافزار و آلودگی آسیب‌پذیری و روز صفر فیشینگ

منبع

The Hacker News پنجشنبه ۱۴ آبان ۱۴۰۵ · ۰۸:۴۷

Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability in question is CVE-2024-27834 (CVSS score: 5.5), a case of improper authentication that could allow an attacker with

بدافزار و آلودگی آسیب‌پذیری و روز صفر امنیت هویت و دسترسی

منبع

CSO Online پنجشنبه ۱۴ آبان ۱۴۰۵ · ۰۸:۲۵

The Sandbox Fights Back: Joe Security Launches Adaptive Detonation

AI agents help Joe Sandbox uncover malicious behavior concealed by evasion techniques and unmet execution conditions. Joe Security‘s Adaptive Detonation brings active intervention to malware analysis, helping security teams investigate threats that may conceal their behavior during an initial sandbox run. Adaptive Detonation uses AI agents to examine execution results, identify obstacles preventing a sample from reve…

بدافزار و آلودگی فیشینگ امنیت اینترنت اشیا و صنعتی

منبع

The Hacker News پنجشنبه ۱۴ آبان ۱۴۰۵ · ۰۸:۰۱

OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run

OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2 million in API costs. "Our prototype identified and analyzed 2,308 candidate Linux kernel findings, dynamically reproduced 1,724 vulnerabilities, and produced 948 local privilege escalation (LPE)

آسیب‌پذیری و روز صفر امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین

منبع