نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
CSO Online

November 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentials

A currently exploited zero-day vulnerability that can let attackers steal hashed Outlook NTLM credentials is among the 1,094 holes Microsoft fixed in its November Patch Tuesday releases. Although rated as only moderate in severity, with a CVSS score of 6.5, Windows administrators need to address CVE-2026-124194 immediately because threat actors are already attacking it. “Don’t let the low score fool you,” said Nick C…

آسیب‌پذیری و روز صفر برنامه‌نویسی و زبان‌ها توسعه موبایل پایگاه داده رایانش ابری شبکه و اینترنت سیستم‌عامل امنیت وب و نرم‌افزار پاسخ به رخداد و جرم‌یابی امنیت هویت و دسترسی
خواندن متن کامل در CSO Online درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Ubuntu Security Notices

USN-9040-1: Linux kernel (Low Latency NVIDIA) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to c…

آسیب‌پذیری و روز صفر امنیت اینترنت اشیا و صنعتی توسعه موبایل
منبع
CSO Online

What will it take to make VulnOps a reality?

Just over a year ago, before advanced AI models began discovering software vulnerabilities at a nearly unmanageable scale in the so-called vulnpocalypse, three industry experts pioneered the concept of “VulnOps.” VulnOps, as envisioned by Heather Adkins, Gadi Evron, and Bruce Schneier, is a significant phase in the evolution of AI-assisted cyber defense in which vulnerability research and remediation would become sca…

آسیب‌پذیری و روز صفر امنیت ابری امنیت هوش مصنوعی
منبع
The Hacker News

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume has exceeded 1,000 flaws. These cover 726 flaws in Windows, 174 in Office, 61 in Developer Tools, 59 in SQL Server, 53 in Developer Tools, and 27 in SharePoint Server. The patches also include 165 non-Microsoft-issued CVE identifiers.

آسیب‌پذیری و روز صفر پایگاه داده سیستم‌عامل
منبع
NCSC Netherlands

NCSC-2026-0478 [1.00] [M/H] Kwetsbaarheden verholpen in N-able N-central

N-able heeft meerdere kwetsbaarheden verholpen in N-able N-central. Deze kwetsbaarheden treffen versies ouder dan 2026.4.1.26. Er meerdere kwetsbaarheden met betrekking tot XML External Entity (XXE), waardoor de verwerking van XML-data mogelijk op ongewenste wijze kan worden beïnvloed. Daarnaast zijn er kwetsbaarheden in de vorm van OGNL Injection en Stored Cross-Site Scripting (XSS), waarbij kwaadaardige code kan wo…

امنیت وب و نرم‌افزار
منبع