SOCRadar جمعه ۲۲ آبان ۱۴۰۵ · ۱۶:۰۸

CVE-2026-119618: Apache HTTP/2 Race Condition RCE

The Apache Software Foundation has released Apache HTTP Server 2.4.71 to fix CVE-2026-119618, a critical race condition in the mod_http2 module that can lead to Remote Code Execution (RCE). Any server running httpd 2.4.55 through 2.4.70 with HTTP/2 enabled is in scope, and the attacker needs no credentials or user interaction. No active exploitation attempts […]

Vulnerabilities & Zero-Day Threat Intelligence Cloud Computing Operating Systems

Read the full article at SOCRadar Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Industrial Cyber جمعه ۲۲ آبان ۱۴۰۵ · ۱۶:۰۶

AI tears through legacy TCP/IP stacks, exposing vulnerabilities across critical infrastructure, OT and IoT devices

Forescout Research’s Vedere Labs found that artificial intelligence (AI)-assisted vulnerability analysis reduced the time needed to examine foundational... The post AI tears through legacy TCP/IP stacks, exposing vulnerabilities across critical infrastructure, OT and IoT devices appeared first on Industrial Cyber.

Malware & Threats Vulnerabilities & Zero-Day Phishing

Source

آی‌تی‌آنالیز جمعه ۲۲ آبان ۱۴۰۵ · ۱۵:۵۱

حسابدار آینده، رقیب هوش مصنوعی یا همکار آن؟

عباس پورخصالیان - این یادداشت حاوی راهنمای آینده‌نگر برای دانشجویان و متخصصان تحصیلات تکمیلی مالی، حسابداری، حسابرسی و مدیریت مالی در عصر هوش مصنوعی است. The post حسابدار آینده، رقیب هوش مصنوعی یا همکار آن؟ appeared first on آی تی آنالیز.

Phishing AI Security AI & Machine Learning

Source

Industrial Cyber جمعه ۲۲ آبان ۱۴۰۵ · ۱۵:۵۰

DOE advances AI-FORTS program to develop superintelligence-powered cybersecurity tools for critical energy infrastructure

The U.S. Department of Energy (DOE) is developing artificial intelligence-powered tools to strengthen the cybersecurity and operational resilience... The post DOE advances AI-FORTS program to develop superintelligence-powered cybersecurity tools for critical energy infrastructure appeared first on Industrial Cyber.

Malware & Threats Vulnerabilities & Zero-Day Phishing

Source

SecurityWeek جمعه ۲۲ آبان ۱۴۰۵ · ۱۵:۵۰

SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks

Enea says SilentAir hijacked mobile network nodes to intercept calls and messages, with Taiwanese subscribers the primary targets. The post SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks appeared first on SecurityWeek.

Malware & Threats Threat Intelligence

Source