The Hacker News سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۳:۳۲

SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution

Four flaws that attackers could exploit without logging in were fixed today as part of SAP's monthly Security Patch Day—the vendor rates all four 10.0, the maximum CVSS score. Three are in the SAP NetWeaver application server, the software SAP systems run on, and one is in the Web Dispatcher, which receives web requests from the internet and passes them on to that server. The flaws in the Web

خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

The Hacker News سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۲:۳۸

France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites

An October cyberattack on refrigeration controllers at about 700 French retail sites was carried out by a cyber unit of Iran's Islamic Revolutionary Guard Corps (IRGC), the French government said yesterday. The attackers broke into controllers on the night of October 11 and changed their defrost settings to high temperatures. That caused food losses and, in at least 15 cases, fires. The unit

منبع

The Hacker News سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۱:۴۶

Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark

Anthropic on Monday released Claude Fable 5.2 and Claude Mythos 5.2 models, which it said exhibit improvements in coding, reasoning, and vision. During pre-release training, the large language models (LLMs) helped its engineers "complete otherwise-infeasible software migrations, designed three working electronic devices from scratch, solved two open problems in the physics of black holes, made

منبع

The Hacker News سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۰:۲۲

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, assigned the CVE identifier CVE-2026-125350 (CVSS score: N/A), has been described as a use-after-free bug in the XML component. Use-after-free bugs typically occur when a program attempts to access a memory location after

آسیب‌پذیری و روز صفر

منبع

The Hacker News سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۰:۱۴

N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits

N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice following the public disclosure of over 30 vulnerabilities collectively tracked as Able2Shell. "As a precautionary measure, we are temporarily taking our Hosted N-central environment offline while we take the necessary actions to secure the

آسیب‌پذیری و روز صفر

منبع