Help Net Security چهارشنبه 6 آبان 1405 · ۲۰:۳۹

GitHub’s npm package firewall can block brand-new versions before they install

GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions, and any developer can turn it on by pointing npm at the firewall. The checks run before a package reaches a laptop, a build, or a coding agent. GitHub says AI agents are helping developers build more software, faster, and the firewa…

بدافزار و آلودگی آسیب‌پذیری و روز صفر

خواندن متن کامل در Help Net Security درخواست حذف

این صفحه فقط عنوان و خلاصهٔ کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Wordfence Blog چهارشنبه 6 آبان 1405 · ۲۱:۵۶

PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Most

As of October 28, 2026, Wordfence knows of no WordPress site compromised through PHP2Shell. Update PHP to a fixed version and restart it, because updating WordPress does not update PHP. The post PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Most appeared first on Wordfence.

آسیب‌پذیری و روز صفر

منبع

The Hacker News چهارشنبه 6 آبان 1405 · ۲۱:۳۸

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train uses rotating chains of compromised SOHO, IoT, and enterprise infrastructure," Lumen Technologies Black Lotus Labs said in a report shared

آسیب‌پذیری و روز صفر امنیت اینترنت اشیا و صنعتی

منبع

Unit 42 (Palo Alto) چهارشنبه 6 آبان 1405 · ۲۱:۳۰

Unwrapping Retail Peak Season Cyber Threats

Unit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend operations and customer trust. The post Unwrapping Retail Peak Season Cyber Threats appeared first on Unit 42.

بدافزار و آلودگی باج‌افزار

منبع

The Hacker News چهارشنبه 6 آبان 1405 · ۲۰:۳۸

Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.

Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background. To qualify, a store must pass identity checks and send Google its full catalog, along with every new app and update, for ongoing malware scanning. Approved stores get the features from December 1, but only on

بدافزار و آلودگی توسعه موبایل

منبع