نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
The Hacker News

Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction

A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin. The flaw, CVE-2026-58868, affects Android 14 through 17. Phones get the fix with security patch level 2026-11-01 or later, which phone makers and carriers send on their own schedules. As of November 4, Google's bulletin did not report

آسیب‌پذیری و روز صفر توسعه موبایل
خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
NCSC Netherlands

NCSC-2026-0467 [1.00] [M/H] Kwetsbaarheden verholpen in Google Android en Samsung Mobile

Google heeft kwetsbaarheden verholpen in Android. Samsung heeft de voor Samsung Mobile relevante kwetsbaarheden verholpen in hun producten. De ernstige kwetsbaarheden betreffen onder andere mogelijkheden voor het uitvoeren van willekeurige code op afstand (Remote Code Execution) en het verkrijgen van verhoogde systeemrechten (Privilege Escalation). Hierdoor kunnen aanvallers ongeautoriseerde toegang krijgen tot syste…

توسعه موبایل
منبع
The Hacker News

Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out

A critical finding can move through several security tools and still leave the organization exposed. The vulnerability has a severity score, and a ticket has reached the queue. Progress then depends on information the finding may lack: who owns the system, whether attackers can reach it, what protection exists, and how a change could affect the business. Each missing detail creates

آسیب‌پذیری و روز صفر
منبع
CSO Online

Debian, Ubuntu patch APT flaw that could hand attackers root

Linux administrators’ trust in package managers is being tested by a newly disclosed vulnerability in APT, the package management system used by Debian, Ubuntu, and their derivatives, that could allow attackers to install unverified software with root privileges. Tracked as CVE-2026-109518, the vulnerability could let an attacker positioned to manipulate HTTP traffic between an APT client and an archive server instal…

آسیب‌پذیری و روز صفر هوش تهدید سیستم‌عامل
منبع