CSO Online چهارشنبه ۲۰ آبان ۱۴۰۵ · ۰۶:۴۰

November 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentials

A currently exploited zero-day vulnerability that can let attackers steal hashed Outlook NTLM credentials is among the 1,094 holes Microsoft fixed in its November Patch Tuesday releases. Although rated as only moderate in severity, with a CVSS score of 6.5, Windows administrators need to address CVE-2026-124194 immediately because threat actors are already attacking it. “Don’t let the low score fool you,” said Nick C…

آسیب‌پذیری و روز صفر برنامه‌نویسی و زبان‌ها توسعه موبایل پایگاه داده رایانش ابری شبکه و اینترنت سیستم‌عامل امنیت وب و نرم‌افزار پاسخ به رخداد و جرم‌یابی امنیت هویت و دسترسی

خواندن متن کامل در CSO Online درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

SecurityWeek چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۲:۳۱

Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities

The flaws, CVE-2026-111793 and CVE-2026-20320, let attackers leak sensitive information, including configuration data. The post Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities appeared first on SecurityWeek.

آسیب‌پذیری و روز صفر نشت داده

منبع

CSO Online چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۲:۳۰

Why does old access outlive the job?

Old access persists beyond its intended purpose and most organizations never monitor it. New access rights arrive within a day of a request. Old rights get revoked, if they get revoked at all, only upon prompting someone. Tools that assist employees in confirming, rotating and vaulting their service accounts have taught me again and again that removing access has to be as thoughtful as granting access. Security profe…

آسیب‌پذیری و روز صفر نشت داده حریم خصوصی

منبع

SecurityWeek چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۲:۱۲

Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD

Intel and AMD disclose more than 200 vulnerabilities, including critical flaws in Intel TDX software and numerous AMD graphics bugs. The post Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD appeared first on SecurityWeek.

آسیب‌پذیری و روز صفر

منبع

Ubuntu Security Notices چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۱:۵۷

USN-9040-1: Linux kernel (Low Latency NVIDIA) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to c…

آسیب‌پذیری و روز صفر امنیت اینترنت اشیا و صنعتی توسعه موبایل

منبع