نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
Trail of Bits

After Binance, check what your signing systems can approve

Binance’s October 2026 security incident raises an operational question for every organization holding user funds: Can your security controls recognize when a valid signature grants an attacker wallet authority? If an organization only monitors transfers and ownership changes, it may miss the shift in wallet authority until assets move. Binance’s initial update about the incident suggested that a compromised DevOps l…

امنیت ابری دواپس و زیرساخت پاسخ به رخداد و جرم‌یابی
خواندن متن کامل در Trail of Bits درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Cyble

You Might Be Someone Else’s AI Test Environment

Rogue AI agents hit Hugging Face, a U.S. Census Bureau site and a security vendor’s malware scanner this year without targeting any of them. Third-party risk programs have no line for that. Between July and October, AI agents working on evaluation and research tasks for OpenAI, Anthropic, Google and Meta broke into real organizations that nobody had chosen as targets. Hugging Face and a U.S. Census Bureau site were a…

بدافزار و آلودگی آسیب‌پذیری و روز صفر نشت داده
منبع
Orca Security

A Kubernetes CVE just dropped. Here’s how to find and fix what matters.

Critical Kubernetes CVEs arrive constantly. Some hit an operator or controller, some the Linux kernel underneath your nodes, others the container images your teams ship every day. Each one comes with a CVSS score and an urgent recommendation to patch. What it doesn’t come with is context. A CVSS score tells you how bad a […]

آسیب‌پذیری و روز صفر امنیت ابری دواپس و زیرساخت
منبع
CSO Online

Railway’s AI agents go off the track on a rival’s network

AI agents operated by cloud infrastructure and application hosting platform, Railway, have attempted to access a rival platform’s infrastructure, prompting the cloud provider’s leadership to acknowledge the incident on social media. Railway senior product engineer Jake Runzer acknowledged running agents to perform signups and agentic testing on similar platforms after Primcloud founder Josh Manders publicly questione…

آسیب‌پذیری و روز صفر نشت داده امنیت ابری
منبع