CSO Online سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۶:۰۶

SonicWall releases patches for 7 flaws in its firewalls, most involving unauthenticated access

SonicWall on Monday updated its advisory about seven cybersecurity holes affecting its Gen 7 and Gen 8 firewalls, five of which allow unauthenticated remote attacks, to warn that it is aware of “potential” active exploitation of at least one of the bugs, CVE-2026-19868, a bypass of SAML authentication controls in its SonicOS SSL VPN service. And Frank Dickson, principal analyst at Dickson Research, pointed out that t…

بدافزار و آلودگی آسیب‌پذیری و روز صفر بات‌نت و DDoS باج‌افزار شبکه و اینترنت سیستم‌عامل امنیت هویت و دسترسی

خواندن متن کامل در CSO Online درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

CSO Online سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۵:۲۷

Microsoft’s email security is unexpectedly blocking legitimate business mail

Microsoft’s email filters meant to protect users from malicious messages appear to be rejecting legitimate ones. Over the last few days, some mail sent to Microsoft consumer addresses have bounced if they did not publish a domain-based message authentication, reporting, and conformance (DMARC) record. This includes messages to Outlook, Hotmail, Live, and MSN. The refusals began November 5 and are ongoing as of public…

فیشینگ شبکه و اینترنت امنیت هویت و دسترسی

منبع

BleepingComputer سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۳:۲۲

Vanderbilt University hit in BYOD ransomware attack, data theft claimed

Vanderbilt University warns it is responding to a cyberattack claimed by the BYOD ransomware gang, which claims to have encrypted the university's databases and stolen sensitive student, employee, and research data. [...]

بدافزار و آلودگی باج‌افزار

منبع

Ubuntu Security Notices سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۲:۴۲

USN-8890-3: libsoup regression

USN-8890-1 fixed vulnerabilities in libsoup. Unfortunately, that update introduced a memory leak in the cookie jar and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of service. This issue only affecte…

آسیب‌پذیری و روز صفر نشت داده بات‌نت و DDoS

منبع

AWS Security Bulletins سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۲:۱۲

CVE-2026-124034, CVE-2026-124035: Issues with Amazon Braket SDK

Bulletin ID: 2026-175-AWS Publication Date: 11/09/2026 14:15 PM PST Description: Amazon Braket SDK is an open source Python library that customers use to run quantum tasks and hybrid jobs on Amazon Braket. We identified CVE-2026-124034, an issue in the local hybrid job input data download in the Amazon Braket SDK. And we identified CVE-2026-124035, an issue in the error mitigation schema validation in Amazon Braket S…

آسیب‌پذیری و روز صفر برنامه‌نویسی و زبان‌ها رایانش ابری

منبع