نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
Rapid7 Blog

Patch Tuesday - November 2026

Microsoft is publishing 1,092 own-product vulnerabilities on November 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Until a few months ago, these volumes would have been unimaginable, but if anything, this month feels like a slight reprieve. The jury is still out on whether patching many more vulnerabilities will lead to better security outcomes; every code change to resolve a known vulnerability co…

آسیب‌پذیری و روز صفر فیشینگ نشت داده امنیت اینترنت اشیا و صنعتی سیستم‌عامل امنیت هویت و دسترسی
خواندن متن کامل در Rapid7 Blog درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
AWS Security Blog

Reduce alert fatigue by customizing threat detection features in Amazon GuardDuty

The teams responsible for security today don’t have a problem with the number of alerts they receive; they have a problem turning those alerts into something truly actionable. When an analyst concludes an investigation with “this was caused by our vulnerability scanner” or “this account is configured to share Amazon Machine Images (AMIs) publicly on […]

آسیب‌پذیری و روز صفر امنیت ابری هوش تهدید
منبع
CyberInsider

Microsoft’s November updates fix 1094 flaws, Outlook zero-day

Microsoft has released its November 2026 Patch Tuesday updates for Windows 11, fixing USB audio, printer installation, and Remote Desktop problems while strengthening NTLM authentication and PowerShell script verification. The broader Microsoft security release addresses 1,094 CVEs across its products, including 726 under Windows, and patches an actively exploited Outlook vulnerability that can expose users’ … The po…

آسیب‌پذیری و روز صفر سیستم‌عامل امنیت هویت و دسترسی
منبع
Cisco Security Advisories

Cisco Identity Services Engine Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. These vulnerabilities are due to the lack of server-side validation of Administrator permissions. An attacker could exploit these vulnerabilities by submitting…

آسیب‌پذیری و روز صفر
منبع