The Hacker News چهارشنبه ۶ آبان ۱۴۰۵ · ۱۹:۳۲

PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25, 2026, involved an attacker combining PHP2Shell with a kernel privilege escalation exploit to root

آسیب‌پذیری و روز صفر نشت داده امنیت هوش مصنوعی هوش تهدید هوش مصنوعی و یادگیری ماشین سیستم‌عامل

خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

CSO Online پنجشنبه ۷ آبان ۱۴۰۵ · ۲۳:۰۱

New Cisco firewall zero-day being actively exploited

A high-severity flaw in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) is under active exploitation to crash vulnerable devices. The vulnerability, tracked as CVE-2026-76418 and rated 8.6 in severity, is due to logic errors when secondary authentication is configured on a tunnel group, Cisco said in its advisory. It could all…

آسیب‌پذیری و روز صفر بات‌نت و DDoS شبکه و اینترنت

منبع

Wordfence Blog پنجشنبه ۷ آبان ۱۴۰۵ · ۲۲:۵۰

Wordfence Bug Bounty Program Monthly Report – July 2026

In July 2026, the Wordfence Bug Bounty Program received 1077 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence Threat Intelligence team, with validated vulnerabilities responsibly disclosed to vendors, often through the Wordfence Vulnerability .…

آسیب‌پذیری و روز صفر هوش تهدید تست نفوذ

منبع

The Hacker News پنجشنبه ۷ آبان ۱۴۰۵ · ۲۲:۴۱

ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories

Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn't. There's a strange mix of clever tricks and careless mistakes. Hackers are borrowing trust from familiar apps, websites, and AI tools. Some are using AI to speed things up. Others are leaving their

منبع

Security Affairs پنجشنبه ۷ آبان ۱۴۰۵ · ۲۲:۱۳

484,142 Exposed Cloud Buckets Contain 18 Billion Files

42 publicly listable cloud buckets containing 18 billion files, including exposed credentials, database dumps and backups. The Ransomnews research team counted 484,142 publicly listable cloud storage buckets in October 2026, holding 18.05 billion files. They built the count from the search engines that index open cloud storage and published it as the Ransomnews Cloud Exposure […]

نشت داده پایگاه داده

منبع