Help Net Security چهارشنبه ۱۳ آبان ۱۴۰۵ · ۰۹:۳۰

Secure your containers without breaking what works

Container security has a familiar problem. Teams identify vulnerabilities, but turning those findings into lower risk is much harder. A standard container image may include operating-system packages, development tools, debugging utilities and libraries that an application never uses. Each unnecessary component can expand the attack surface and add vulnerabilities to investigate, patch or explain during an audit. Cons…

آسیب‌پذیری و روز صفر امنیت ابری

خواندن متن کامل در Help Net Security درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Help Net Security چهارشنبه ۱۳ آبان ۱۴۰۵ · ۱۱:۱۳

Open-source file sync tool rsync 3.5.2 fixes a CPU exhaustion flaw

The rsync project released version 3.5.2, and it closes a flaw that let a connecting client tie up a server’s CPU with checksum math that leads nowhere. The new version also lets you push a transfer to the back of the queue for CPU and disk, so a big sync stops elbowing everything else on the machine. rsync is an open-source utility that copies files locally and across a network, and it is widely used … More → The po…

دواپس و زیرساخت سیستم‌عامل سخت‌افزار و تراشه

منبع

Help Net Security چهارشنبه ۱۳ آبان ۱۴۰۵ · ۱۰:۳۰

What AI-generated malware looks like under the microscope

In this Help Net Security interview, Lindsay Kaye, VP of Threat Intelligence at HUMAN Security, talks about what AI-generated malware looks like on the bench. She points to tidy comments, uniform logging messages, and emojis as signs a script came from a model, and notes that decompiled code strips much of that away. Kaye also covers how AI is squeezing the time teams have to patch, where it helps criminals scale fra…

بدافزار و آلودگی هوش تهدید

منبع

Help Net Security چهارشنبه ۱۳ آبان ۱۴۰۵ · ۱۰:۰۰

Ghostunnel: Open-source TLS proxy with mutual authentication

Ghostunnel is an open-source proxy that handles TLS for programs that cannot handle it themselves. It works in two directions. In server mode it sits in front of a backend, accepts TLS connections, checks the client’s certificate, then passes traffic to the service behind it over TCP or a UNIX socket. In client mode it does the reverse, listening for plain local connections, wrapping them in TLS and presenting a clie…

امنیت ابری توسعه وب شبکه و اینترنت

منبع

The Hacker News چهارشنبه ۱۳ آبان ۱۴۰۵ · ۰۹:۱۳

CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The high-severity vulnerability, tracked as CVE-2026-119977 (CVSS score: 8.1), is a case of Time-of-check Time-of-use (TOCTOU) race condition that could be exploited to achieve arbitrary code

آسیب‌پذیری و روز صفر

منبع