نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
ANY.RUN

Threat Intelligence for NIS2 Compliance: Is Your Security Stack Giving You the Full Picture?

Investing heavily in cybersecurity is a positive trend observed across the EU. Companies implement SIEM, EDR, threat intelligence and dedicated SOC teams. Everything seems to be in place, the budgets have been spent. But what does it take for security leaders to conclude that these investments are well-spent and keep their organization protected? With the […] The post Threat Intelligence for NIS2 Compliance: Is Your…

بدافزار و آلودگی فیشینگ امنیت زنجیره تأمین هوش تهدید پاسخ به رخداد و جرم‌یابی قوانین و مدیریت فناوری
خواندن متن کامل در ANY.RUN درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
SOCRadar

XaocMail ClickFix Campaign Drops Phantom53 and HavoX Across Latin America, Asia, and Europe

Threat actors continue to refine and scale their operations, increasingly integrating artificial intelligence to harden attack infrastructure and accelerate deployment. The SOCRadar Threat Research Unit (STRU) recently identified a multi-stage campaign operated by a Russian-speaking threat actor wielding an AI-assisted toolkit. The adversary’s pipeline chains XaocMail (translated as ChaosMail), a phishing platform de…

بدافزار و آلودگی فیشینگ امنیت هوش مصنوعی
منبع
Ubuntu Security Notices

USN-9091-1: Linux kernel (NVIDIA Tegra) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to c…

آسیب‌پذیری و روز صفر امنیت اینترنت اشیا و صنعتی توسعه موبایل
منبع
CERT-Bund

[UPDATE] [hoch] Google Chrome / Microsoft Edge: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Google Chrome / Microsoft Edge ausnutzen, um möglicherweise beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, einen Denial-of-Service-Zustand auszulösen, Spoofing-Angriffe durchzuführen oder andere, nicht näher spezifizierte Angriffe auszuführen.

فیشینگ
منبع