GitLab Blog پنجشنبه ۷ آبان ۱۴۰۵ · ۰۳:۳۰

GitLab Orbit: Find vulnerability blast radius without the manual hunt

A critical vulnerability needs a fix and a map. The fix is usually fast. Finding where the vulnerable component lives, who owns it, and whether it's exposed to the Internet is what costs you time. Most security teams piece that answer together from scanner reports, spreadsheets, and a Slack thread asking who owns a service nobody recognizes, and you stay exposed for every hour that takes.GitLab Orbit, now generally a…

آسیب‌پذیری و روز صفر امنیت ابری امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین سیستم‌عامل

خواندن متن کامل در GitLab Blog درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Wordfence Blog جمعه ۸ آبان ۱۴۰۵ · ۰۱:۲۸

WordPress 7.1.4 Patches Unauthenticated Upgrade-Window RCE; Exploitation Attempts Detected After Release

TL;DR: WordPress 7.1.4 was released on October 28, 2026. According to WordPress, it includes fixes for 22 security vulnerabilities. The most serious is an unauthenticated race condition in the Core update process that can lead to remote code execution. Threat actors are already actively attempting to exploit it, so site owners should verify that WordPress ...Read More The post WordPress 7.1.4 Patches Unauthenticated…

آسیب‌پذیری و روز صفر

منبع

Cisco Security Advisories جمعه ۸ آبان ۱۴۰۵ · ۰۰:۵۲

Cisco Finesse Server-Side Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow t…

آسیب‌پذیری و روز صفر

منبع

CSO Online پنجشنبه ۷ آبان ۱۴۰۵ · ۲۳:۰۱

New Cisco firewall zero-day being actively exploited

A high-severity flaw in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) is under active exploitation to crash vulnerable devices. The vulnerability, tracked as CVE-2026-76418 and rated 8.6 in severity, is due to logic errors when secondary authentication is configured on a tunnel group, Cisco said in its advisory. It could all…

آسیب‌پذیری و روز صفر بات‌نت و DDoS شبکه و اینترنت

منبع

Wordfence Blog پنجشنبه ۷ آبان ۱۴۰۵ · ۲۲:۵۰

Wordfence Bug Bounty Program Monthly Report – July 2026

In July 2026, the Wordfence Bug Bounty Program received 1077 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence Threat Intelligence team, with validated vulnerabilities responsibly disclosed to vendors, often through the Wordfence Vulnerability .…

آسیب‌پذیری و روز صفر هوش تهدید تست نفوذ

منبع