The Hacker News پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۵:۰۳

PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution

PTC has released patches for a new critical vulnerability impacting Windchill and FlexPLM software that, if successfully exploited, could result in remote code execution. The security flaw, tracked as CVE-2026-126325, carries a CVSS v4 score of 9.2 out of a maximum of 10.0. It has been described as a case of improper input validation and deserialization of untrusted data that could result in

Vulnerabilities & Zero-Day

Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CSO Online پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۵:۳۹

AI found Linux kernel bugs that remained undetected for decades

A Microsoft research project combining AI agents with human security researchers uncovered 59 Linux kernel vulnerabilities, including bugs that had survived in production code for more than 20 years. While AI dramatically accelerated the discovery process, the researchers found that validating flaws, developing patches, and working with maintainers remained overwhelmingly human-intensive. The research, conducted by M…

Vulnerabilities & Zero-Day AI Security AI & Machine Learning

Source

The Hacker News پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۵:۳۹

Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs

Google Cloud VMs on AMD Turin chips need a guest OS patch and a stop-and-start to protect against three CPU side-channel flaws, Google said this week. The company has already applied mitigations against attacks between VMs, and between VMs and the host. Inside a VM, the flaws may let an attacker with code on the same processor core infer data from other processes or the kernel. The affected

Data Breach Cloud Computing Operating Systems

Source

The Hacker News پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۵:۳۲

Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them

Security teams have more alerts, logs, and monitoring tools than ever. Yet when an attack happens, one simple question can still take too long to answer: Who or what is behind this activity, and what can they access? A suspicious login might belong to an employee. An unusual API call could come from a machine account. Or an AI agent might be accessing sensitive systems using permissions nobody

Incident Response & Forensics

Source

SOCRadar پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۵:۳۲

Dark Web Profile: n0n Ransomware

n0n is a data-exfiltration and destructive-extortion group that surfaced on the Dark Web in September 2026 and scaled to 93 listed victims within roughly five weeks. Its operators exfiltrate data, encrypt or destroy infrastructure, and then work victims through keyed negotiation rooms, per-victim Bitcoin wallets and a public leak site branded with the slogan “n0n […]

Malware & Threats Vulnerabilities & Zero-Day Phishing

Source