The Russian state-backed threat group Turla has been using a new malicious toolset called 'Cereal' to intercept emails on Microsoft Exchange servers at government organizations. [...]
این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش میدهد. متن کامل در منبع اصلی منتشر شده است.
Microsoft researchers have demonstrated how small changes to an AI model can implant a hidden backdoor, causing an agent to execute an attacker’s command when a specific trigger appears. The technique, called Lazarus, requires no model retraining and allows the agent to behave normally during standard safety evaluations. The company has not observed threat actors weaponizing the technique, but says the research highl…
Microsoft’s November 2026 Patch Tuesday, released on November 10, 2026, fixes 1,094 vulnerabilities across Windows, Office, SQL Server, Exchange Server, SharePoint, Azure services, and developer tools. The total falls below October’s Patch Tuesday (1,413 flaws) but still makes this the second-largest monthly release on record. The release includes one zero-day and over 60 critical-rated vulnerabilities. […]
The US Cybersecurity and Infrastructure Security Agency (CISA) warned on Tuesday that hackers are now exploiting a high-severity Cisco BroadWorks vulnerability in attacks. [...]
We break down the Citrus Ransomware group's attacks: the attackers' TTPs and tooling, including VLESS traffic tunneling and LLM use, plus their links to Toy Ghouls.
