نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
Help Net Security

Attackers exploit critical Node-RED flaw to deploy Linux bot and backdoors (CVE-2026-58115)

Attackers are exploiting an authentication flaw (CVE-2026-58115) in Node-RED, a programming tool built into some industrial control products, to install a Linux bot and backdoors on unprotected servers, VulnCheck has found. Node-RED is a flow-based programming tool built on Node.js that lets users wire together event-driven applications in a browser-based editor. It can run on small devices such as the Raspberry Pi o…

بدافزار و آلودگی آسیب‌پذیری و روز صفر برنامه‌نویسی و زبان‌ها سیستم‌عامل امنیت هویت و دسترسی
خواندن متن کامل در Help Net Security درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Industrial Cyber

Industrial AI adoption outpaces security readiness, leaving OT environments exposed to emerging threats

AI implementation across OT (operational technology) and ICS (industrial control systems) environments is outpacing security measures that organizations... The post Industrial AI adoption outpaces security readiness, leaving OT environments exposed to emerging threats appeared first on Industrial Cyber.

بدافزار و آلودگی آسیب‌پذیری و روز صفر فیشینگ
منبع
CyberInsider

Android November update fixes critical flaws and ‘SMS of Death’ bug

Google’s November 2026 Android security bulletin addresses 23 critical vulnerabilities, including remote code execution flaws and the recently disclosed “SMS of Death” bug that can silently disconnect calls. The security bulletin lists fixes across Android’s Framework, System, runtime, kernel, and hardware vendor components. Devices with a security patch level of 2026-11-05 or later address all … The post Android Nov…

آسیب‌پذیری و روز صفر توسعه موبایل سیستم‌عامل
منبع
Industrial Cyber

CISA urges critical infrastructure owners to prioritize OT security, operational continuity, recovery planning in 2026 campaign

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) launched on Monday its 2026 Critical Infrastructure Security and Resilience... The post CISA urges critical infrastructure owners to prioritize OT security, operational continuity, recovery planning in 2026 campaign appeared first on Industrial Cyber.

بدافزار و آلودگی آسیب‌پذیری و روز صفر فیشینگ
منبع