Cisco Security Advisories چهارشنبه 6 آبان 1405 · ۲۳:۰۹

Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities

Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered. A security researcher demonstrated that the private keys for eight eMudhra intermediate certificates were fundamentally broken due to an unprecedented error in their Key Generation Ceremony (KGC) in April 2025. This allows anyone to brute-force acquire these private keys…

آسیب‌پذیری و روز صفر

خواندن متن کامل در Cisco Security Advisories درخواست حذف

این صفحه فقط عنوان و خلاصهٔ کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Orca Security پنجشنبه 7 آبان 1405 · ۰۰:۲۷

CVE-2026-101767: Critical Oracle EBS SQL Injection Actively Probed in the Wild

What is CVE-2026-101767? A critical vulnerability (CVE-2026-101767, CVSS 9.8) was disclosed affecting Oracle E-Business Suite’s Application Object Library, allowing attackers to achieve full remote code execution and system takeover via an unauthenticated SQL injection in the Thin Client Framework servlet. Due to the potential for complete compromise of financial, payroll, and HR data managed by […]

آسیب‌پذیری و روز صفر پایگاه داده امنیت وب و نرم‌افزار

منبع

Wired Security پنجشنبه 7 آبان 1405 · ۰۰:۰۰

Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw

The critical flaw in UEFI firmware—used by most server vendors and data centers—allows attackers to execute code early in the boot process.

بدافزار و آلودگی آسیب‌پذیری و روز صفر امنیت اینترنت اشیا و صنعتی

منبع

AWS Security Bulletins چهارشنبه 6 آبان 1405 · ۲۳:۰۹

CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents Tools

Bulletin ID: 2026-154-AWS Publication Date: 10/28/2026 12:30 PM PDT Description: We identified CVE-2026-115415, an issue where the environment tool accepted a masking parameter from the large language model (LLM) through its tool schema. A crafted prompt, delivered through content the agent is asked to process, could instruct the model to call the tool with masking turned off. The tool would then return the agent hos…

آسیب‌پذیری و روز صفر امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین

منبع

Cisco Security Advisories چهارشنبه 6 آبان 1405 · ۲۲:۴۵

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel gro…

آسیب‌پذیری و روز صفر بات‌نت و DDoS امنیت هویت و دسترسی

منبع