Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۶:۱۴

Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws

Google’s Gemini 4 Carbon is a frontier AI model designed for software engineering and cybersecurity tasks, with safeguards built on those of its predecessor, Argon. SEC-bench Pro (Source: Google) Google says its teams have seen Carbon spend days investigating and fixing bugs across large codebases and low-level systems. The model was also trained to handle complex tasks and high-pressure situations. Finding and fixin…

مهندسی نرم‌افزار و تست

خواندن متن کامل در Help Net Security درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۸:۱۹

Yoba malware hides in fake desktop versions of ChatGPT and Claude

Fake GitHub projects posing as desktop versions of ChatGPT and Claude have been used to spread a malware chain that ends with a cryptocurrency miner, Check Point has found. The researchers have been tracking the campaign, dubbed Yoba, for the past two months. Its operator set up repositories and GitHub.io pages for supposed apps called GPT-5.6 Sol, GPT-6 Astra and Claude Opus, and hosted the malware as ZIP releases o…

بدافزار و آلودگی

منبع

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۷:۴۰

Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop

Forever Security found ways out of the built-in browsers in five AI coding assistants: Cursor, GitHub Copilot, OpenAI’s Codex, Microsoft’s VS Code and Anthropic’s Claude Desktop. In all five, a web page or a local file reached the computer behind the browser. Cursor ran attacker code, Copilot showed a fake address, and Codex, VS Code and Claude Desktop let a single local file read the rest of the disk. Two of those h…

آسیب‌پذیری و روز صفر

منبع

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۷:۱۲

Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network

Volt Typhoon, a Chinese state-sponsored APT group that’s focused on cyberespionage and United States’ critical infrastructure, has been using a covert, constantly rotating relay network to hide its most sensitive intrusions, Lumen’s Black Lotus Labs revealed on Wednesday. This network, dubbed Silent Train by the researchers, consists of chains of compromised SOHO and IoT devices (e.g., TP-Link and Netgear routers) an…

امنیت اینترنت اشیا و صنعتی هوش تهدید

منبع

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۶:۴۲

Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)

Exploitation attempts have started against CVE-2026-101767, a recently patched Oracle E-Business Suite (EBS) flaw. “Our Oracle E-Business Suite decoys recorded exploratory exploits against CVE-2026-101767, an unauthenticated SQL injection in EBS’s Thin Client Framework servlet that chains to remote code execution, this morning, Oct 27,” Defused posted on X, noting that no public report of the flaw being attempted in…

آسیب‌پذیری و روز صفر پایگاه داده امنیت وب و نرم‌افزار

منبع