The Hacker News دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۵:۲۰

Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week. Langflow is an open-source tool for building AI agents and workflows, and its vulnerability reports go to IBM. Every release from 1.0.0 through 1.12.8 has the flaws, and the only fix is version 1.13.0. Neither flaw is in CISA's Known

آسیب‌پذیری و روز صفر متن‌باز امنیت هویت و دسترسی

خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

EFF دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۸:۴۰

Independent Digital Media Is Not a Privilege Governments Can Revoke: The Fight to Save Egypt’s Mada Masr

On November 11, Lina Attalah, founder and editor-in-chief of the independent Egyptian news outlet Mada Masr, will face trial for the second time in just two weeks. This time, she faces charges of spreading false news, an accusation that has become one of the Egyptian government's most frequently used tools for prosecuting journalists. The trial follows a conviction on October 27, when Attalah was found guilty of mana…

امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین متن‌باز

منبع

BleepingComputer دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۸:۳۳

BTCPay Server warns of hot wallet thefts targeting outdated instances

The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been draining "hot wallets" on instances running older versions. [...]

سخت‌افزار و تراشه متن‌باز

منبع

SANS Internet Storm Center دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۸:۲۲

Mutipath TCP: Use and Detection, (Mon, Nov 2nd)

Last week, an often-ignored&#;x26;#;xc2;&#;x26;#;xa0;TCP option, introduced in 2020, made the news due to a new vulnerability in Linux&#;x26;#;39;s implementation (RFC&#;x26;#;xc2;&#;x26;#;xa0;8684, &#;x26;#;xc2;&#;x26;#;xa0;CVE-2026-98432)

آسیب‌پذیری و روز صفر شبکه و اینترنت سیستم‌عامل

منبع

The Hacker News دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۸:۱۶

DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment

Cybersecurity researchers have disclosed details of a cyber espionage campaign targeting Israel and the Kurdistan Region of Iraq by an Iran state-aligned threat actor between August and October 2026. According to a report published by Dream Research Labs, the campaign has led to the compromise of a high-profile individual in Israel, along with additional compromises affecting a government cloud

هوش تهدید

منبع