The Hacker News چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۱:۱۹

Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges

AI provider keys that customers stored on Railway were stolen in an October breach and used to commit an estimated $740,000 in unauthorized spending, the platform-as-a-service provider said yesterday. It has promised to pay those charges itself when an AI provider will not refund them. The company builds and runs apps for its customers and stores their secrets, such as API keys and database

نشت داده پایگاه داده

خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

SecurityWeek چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۲:۳۱

Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities

The flaws, CVE-2026-111793 and CVE-2026-20320, let attackers leak sensitive information, including configuration data. The post Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities appeared first on SecurityWeek.

آسیب‌پذیری و روز صفر نشت داده

منبع

CSO Online چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۲:۳۰

Why does old access outlive the job?

Old access persists beyond its intended purpose and most organizations never monitor it. New access rights arrive within a day of a request. Old rights get revoked, if they get revoked at all, only upon prompting someone. Tools that assist employees in confirming, rotating and vaulting their service accounts have taught me again and again that removing access has to be as thoughtful as granting access. Security profe…

آسیب‌پذیری و روز صفر نشت داده حریم خصوصی

منبع

The Hacker News چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۱:۴۷

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume has exceeded 1,000 flaws. These cover 726 flaws in Windows, 174 in Office, 61 in Developer Tools, 59 in SQL Server, 53 in Developer Tools, and 27 in SharePoint Server. The patches also include 165 non-Microsoft-issued CVE identifiers.

آسیب‌پذیری و روز صفر پایگاه داده سیستم‌عامل

منبع

The Hacker News چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۰:۵۱

Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons

An AI model can be given a hidden backdoor by editing fewer than 10 of its rarely used neurons, without retraining the model, Microsoft researchers have shown. When a chosen trigger appears, the model outputs an attacker's command, which an agent using that model would run with the agent's own permissions. The attacker must be able to change the model's weights. The team tested the method on

بدافزار و آلودگی

منبع