نبض سایبری اخبار امنیت سایبری، با ذکر منبع
AWS Security Bulletins

CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server

Bulletin ID: 2026-149-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/23/2026 12:00 PM PDT Description: AWS MCP Server is a managed server that gives AI agents access to AWS through the Model Context Protocol (MCP), including a run_script tool that runs Python scripts in a sandboxed environment. We identified CVE-2026-115845, an issue in the Python code validator of the run_script too…

آسیب‌پذیری و روز صفر برنامه‌نویسی و زبان‌ها رایانش ابری
خواندن متن کامل در AWS Security Bulletins درخواست حذف

این صفحه فقط عنوان و خلاصهٔ کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
CSO Online

Attackers built a ‘Skynet’ AI agent that hijacks exposed models to run cyberattacks

Skynet is no longer a fictional adversary. Attackers have built an offensive agent that exploits unprotected AI models on the web with a ‘Skynet’ directive that allows them to run unattended for up to 100,000 steps. In this mode, a reference to the humanity-destroying artificial neural network-based superintelligence system in the Terminator film franchise, the agent can kick off tools, scan for and infect targets, d…

بدافزار و آلودگی آسیب‌پذیری و روز صفر بات‌نت و DDoS
منبع
AWS Security Blog

Introducing Route 53 Resolved IP Validation for AWS Network Firewall

Your workloads reach most destinations by domain name, but a firewall can only act on what it sees in the traffic. For HTTP and HTTPS, AWS Network Firewall domain rules match the name that the client puts in the request, and the client chooses that name. The connections for protocols such as SSH and SSH […]

رایانش ابری قوانین و مدیریت فناوری
منبع
Cisco Security Advisories

Vulnerabilities in node.js Affecting Cisco Products: October 2026

On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical operations such as the Brotli decoder, DNS resolution, and TLS certificate validation. The vulnerabilities pose risks for remote code execution and traffic interception. For more information, see Node.js Security Release…

آسیب‌پذیری و روز صفر شبکه و اینترنت
منبع
Cisco Security Advisories

Vulnerabilities in node.js Affecting Cisco Products: October 2026

On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical operations such as the Brotli decoder, DNS resolution, and TLS certificate validation. The vulnerabilities pose risks for remote code execution and traffic interception. For more information, see Node.js Security Release…

آسیب‌پذیری و روز صفر شبکه و اینترنت
منبع