نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
CSO Online

Armed with AI, hackers target endpoint security blind spots, raising stakes for CISOs

A China-linked hacking group’s use of AI agents to identify security weaknesses during a global espionage campaign is raising concerns about whether enterprises can detect gaps in their defenses before automated attacks exploit them. CrowdStrike reported that the group, tracked as VAPOR PANDA, used an AI-powered penetration testing framework called ARTEX to target more than 200 organizations worldwide over an 11-day…

آسیب‌پذیری و روز صفر امنیت هوش مصنوعی هوش تهدید هوش مصنوعی و یادگیری ماشین سیستم‌عامل متن‌باز پاسخ به رخداد و جرم‌یابی تست نفوذ امنیت هویت و دسترسی
خواندن متن کامل در CSO Online درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Flare

Aftermath of the September ShinyHunters Arrests: Battle Over the Brand Name

Part 2: The Fight Over the Name After Rey (Read Part 1 here) By Jon DiMaggio, Cybersecurity Researcher The September arrests should have been the end of ShinyHunters. Instead, threat actors saw what happens to whoever wears the crown, and rather than rebrand or distance themselves from the title, they began to fight with one […] The post Aftermath of the September ShinyHunters Arrests: Battle Over the Brand Name appe…

هوش تهدید
منبع
SANS Internet Storm Center

The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)

One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. This was a simple vulnerability in a CGI-bin script used to send e-mail. The vulnerability was pretty straightforward: Adding additional parameters to the URL leaked environment variables. Other vulnerabilities allowed setting the "To" address and were heavily abused by spammers. And if parameters were passed directly to the sendmail…

آسیب‌پذیری و روز صفر
منبع