نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
SOCRadar

Microsoft Paint RCE CVE-2026-83844 Raises Store Update Questions

Microsoft has disclosed CVE-2026-83844, an out-of-bounds read in the Microsoft Store version of Paint that could allow remote code execution. Microsoft rates the vulnerability Important, while its CVSS score of 8.1 places it in the high-severity range. Its assessment indicates a network-based attack requiring no privileges or user interaction, although successful exploitation has high complexity. […]

آسیب‌پذیری و روز صفر
خواندن متن کامل در SOCRadar درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
SOCRadar

Qilin Ransomware Admin Haise Allegedly Unmasked

GangExposed, the anonymous leaker who spent 2025 exposing Conti and Trickbot leadership, has moved on to Qilin. A new post on the channel shares an investigation naming a Russian national as “Haise”, the persona that has fronted Qilin’s affiliate program on underground forums since 2022. The timing is hard to ignore. Only weeks ago, Germany […]

بدافزار و آلودگی باج‌افزار
منبع
Help Net Security

November 2026 Patch Tuesday forecast: Old software continues to bite

How did you enjoy October 2026 Patch Tuesday? Were there enough CVEs reported to keep you busy for the rest of the year or are you finished and ready for another round next week? They released the regularly scheduled update nearly two and a half hours late, but Microsoft did resolve another record-breaking 1,407 unique CVEs. As in previous months, there were limited CVEs we needed to immediately deal with. In October…

آسیب‌پذیری و روز صفر
منبع
Help Net Security

Security certification is a snapshot, and buyers read too much into it

In this Help Net Security video, Mariia Bakhtina, a research specialist at Masaryk University, explains what a Common Criteria or FIPS-140 certificate does and does not promise. In her team’s analysis, about 6 in 10 vulnerabilities matched to certified products, smartcards aside, were disclosed after the certification date. She also describes sec-certs and SCRUTINY, two open-source tools her lab builds, and the one q…

آسیب‌پذیری و روز صفر متن‌باز قوانین و مدیریت فناوری
منبع
The Hacker News

Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login

Two flaws in Barracuda's Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with no login required. The company released patches on Monday, and the security firm watchTowr detailed the attack chain on Thursday. One flaw, CVE-2026-116606, is an authorization bypass. An unauthenticated attacker can use it to restore a

آسیب‌پذیری و روز صفر
منبع