The Hacker News پنجشنبه ۷ آبان ۱۴۰۵ · ۱۷:۱۲

Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities

Google on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity and long-horizon capabilities. "It shows significant gains across coding and agentic tasks as well as across key capabilities critical for cybersecurity defense, landing a firm lead in SEC-bench Pro (88.2%) for finding vulnerabilities, ExploitGym (54.8%) for exploitation, and

آسیب‌پذیری و روز صفر

خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۷:۴۰

Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop

Forever Security found ways out of the built-in browsers in five AI coding assistants: Cursor, GitHub Copilot, OpenAI’s Codex, Microsoft’s VS Code and Anthropic’s Claude Desktop. In all five, a web page or a local file reached the computer behind the browser. Cursor ran attacker code, Copilot showed a fake address, and Codex, VS Code and Claude Desktop let a single local file read the rest of the disk. Two of those h…

آسیب‌پذیری و روز صفر

منبع

SecurityWeek پنجشنبه ۷ آبان ۱۴۰۵ · ۱۷:۱۲

Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities

The flaws could lead to arbitrary code execution, authorization bypasses, and privilege escalation. The post Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities appeared first on SecurityWeek.

آسیب‌پذیری و روز صفر

منبع

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۶:۴۲

Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)

Exploitation attempts have started against CVE-2026-101767, a recently patched Oracle E-Business Suite (EBS) flaw. “Our Oracle E-Business Suite decoys recorded exploratory exploits against CVE-2026-101767, an unauthenticated SQL injection in EBS’s Thin Client Framework servlet that chains to remote code execution, this morning, Oct 27,” Defused posted on X, noting that no public report of the flaw being attempted in…

آسیب‌پذیری و روز صفر پایگاه داده امنیت وب و نرم‌افزار

منبع

The Hacker News پنجشنبه ۷ آبان ۱۴۰۵ · ۱۵:۰۹

Webinar: How to Build AI Threat Readiness Into Your Security Operations

Security teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders have left to act. Advanced AI models can now help attackers discover vulnerabilities, generate exploit code, and move through weaknesses faster than traditional security processes were built to handle. The challenge is no longer just finding another vulnerability or

آسیب‌پذیری و روز صفر

منبع