Ubuntu Security Notices سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۲:۴۲

USN-8890-3: libsoup regression

USN-8890-1 fixed vulnerabilities in libsoup. Unfortunately, that update introduced a memory leak in the cookie jar and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of service. This issue only affecte…

آسیب‌پذیری و روز صفر نشت داده بات‌نت و DDoS امنیت هویت و دسترسی

خواندن متن کامل در Ubuntu Security Notices درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

TechCrunch Security سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۲:۳۳

Hotel giant Wyndham exposed customer data after app security lapse

Exclusive: Wyndham left a hardcoded credential in its customer app, allowing anyone to access customer data. The hotel giant wouldn't say if it has the ability to check for any past unauthorized access.

نشت داده

منبع

AWS Security Bulletins سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۲:۱۲

CVE-2026-124034, CVE-2026-124035: Issues with Amazon Braket SDK

Bulletin ID: 2026-175-AWS Publication Date: 11/09/2026 14:15 PM PST Description: Amazon Braket SDK is an open source Python library that customers use to run quantum tasks and hybrid jobs on Amazon Braket. We identified CVE-2026-124034, an issue in the local hybrid job input data download in the Amazon Braket SDK. And we identified CVE-2026-124035, an issue in the error mitigation schema validation in Amazon Braket S…

آسیب‌پذیری و روز صفر برنامه‌نویسی و زبان‌ها رایانش ابری

منبع

BleepingComputer سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۱:۳۹

SEGA newsletter data breach exposes 2.2 million email addresses

Japanese gaming giant SEGA has disclosed that a data breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2.2 million newsletter subscribers. [...]

نشت داده

منبع

Tenable Blog سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۱:۳۰

U.S. urges critical infrastructure orgs to secure refrigeration systems ASAP after EU supermarket and blood bank attacks

Following recent cyber attacks on French blood banks and European supermarkets, U.S. federal agencies are urging critical infrastructure organizations to immediately secure industrial refrigeration systems against remote tampering and temperature manipulation.Key takeawaysCybercriminals are actively targeting unpatched flaws, misconfigurations, and weak or hard-coded passwords in commercial cold-chain and refrigerati…

آسیب‌پذیری و روز صفر امنیت زنجیره تأمین امنیت اینترنت اشیا و صنعتی

منبع