SOCRadar پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۳:۱۵

SonicWall GMS Flaws Unpatched After End of Life

SonicWall has disclosed two vulnerabilities in its Global Management System (GMS) and says it will not fix either of them. The more severe flaw, CVE-2026-109593, lets an unauthenticated attacker with network access read internal GMS files. The second, CVE-2026-109594, is a SQL injection that an authenticated attacker can use to access or modify data in […]

Vulnerabilities & Zero-Day Databases App & Web Security

Read the full article at SOCRadar Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Help Net Security پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۴:۳۲

Google puts new limits on AI agents that hunt threats and fix vulnerabilities

Google Cloud is adding new controls to CodeMender, its AI tool for finding and fixing software vulnerabilities, allowing businesses to isolate attack simulations and target code scans more precisely. The updates let businesses verify vulnerabilities and simulate exploits in an operating system-level sandbox or an isolated virtual machine. They also add human checks for local writes and command execution to help keep…

Vulnerabilities & Zero-Day Cloud Computing Operating Systems

Source

SecurityWeek پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۴:۲۶

Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day

Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests. The post Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day appeared first on SecurityWeek.

Vulnerabilities & Zero-Day

Source

دیجیاتو پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۴:۰۹

مدل سایبری OpenAI موفق به کشف ۹۴۸ آسیب‌پذیری در هسته لینوکس شد

پژوهشگران با صرف ۱.۲۱ میلیون دلار اعتبار هوش مصنوعی موفق شدند شیوه‌های بهره‌برداری جدیدی را در ایمن‌ترین بخش‌های هسته لینوکس بازسازی کنند. The post مدل سایبری OpenAI موفق به کشف ۹۴۸ آسیب‌پذیری در هسته لینوکس شد appeared first on دیجیاتو.

Vulnerabilities & Zero-Day AI Security AI & Machine Learning

Source

Securelist (Kaspersky) پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۳:۳۰

The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603

Kaspersky researchers analyze a complex fileless cyberattack by Storm-2603 involving ToolShell exploitation and subsequent runtime subversion, and discuss how to detect such intrusions.

Malware & Threats Vulnerabilities & Zero-Day Data Breach

Source