نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
NCSC Netherlands

NCSC-2026-0466 [1.00] [L/H] Kwetsbaarheid verholpen in WordPress Core

WordPress heeft een kwetsbaarheid verholpen in WordPress Core versies 4.7 tot en met 7.1.3. De kwetsbaarheid maakt misbruik mogelijk van een TOCTOU-racecondition (Time-of-Check to Time-of-Use) tijdens volledige WordPress Core-upgrades. Hierdoor kan een niet-geauthenticeerde aanvaller op afstand code uitvoeren op de server door het korte upgradevenster te misbruiken waarin de stagingdirectories via het web toegankelij…

آسیب‌پذیری و روز صفر
خواندن متن کامل در NCSC Netherlands درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
NCSC Netherlands

NCSC-2026-0465 [1.00] [M/H] Kwetsbaarheden verholpen in Barracuda Email Security Gateway

Barracuda heeft kwetsbaarheden verholpen in Barracuda Email Security Gateway. Barracuda heeft twee kwetsbaarheden vastgesteld in verschillende Barracuda-producten: een kwetsbaarheid voor het omzeilen van autorisatiecontroles (CVE-2026-116606) en een kwetsbaarheid voor command injection (CVE-2026-111560). De eerste kwetsbaarheid betreft een pre-authentication authorization bypass in Barracuda Email Security Gateway (E…

آسیب‌پذیری و روز صفر امنیت هویت و دسترسی
منبع
Security Affairs

U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds WordPress flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a WordPress flaw, tracked as CVE-2026-119977 (CVSS score of 8.1), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-119977 is a high-severity remote code execution vulnerability affecting WordPress versions…

آسیب‌پذیری و روز صفر
منبع
Industrial Cyber

Australia’s CISC sharpens critical infrastructure risk guidance, urges stronger cyber and supply chain controls

Australia’s Critical Infrastructure Security Centre (CISC) recently announced that it has published updated Critical Infrastructure Risk Management Program... The post Australia’s CISC sharpens critical infrastructure risk guidance, urges stronger cyber and supply chain controls appeared first on Industrial Cyber.

بدافزار و آلودگی آسیب‌پذیری و روز صفر فیشینگ
منبع
Industrial Cyber

ESET uncovers Gorbag cyberespionage campaign targeting Ukraine’s administrations, defense sector, transportation hub

New research from ESET identified a previously underreported Russia-aligned threat actor, tracked as Gorbag, conducting targeted cyberespionage operations... The post ESET uncovers Gorbag cyberespionage campaign targeting Ukraine’s administrations, defense sector, transportation hub appeared first on Industrial Cyber.

بدافزار و آلودگی آسیب‌پذیری و روز صفر فیشینگ
منبع