The Hacker News چهارشنبه 6 آبان 1405 · ۲۱:۳۸

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train uses rotating chains of compromised SOHO, IoT, and enterprise infrastructure," Lumen Technologies Black Lotus Labs said in a report shared

آسیب‌پذیری و روز صفر امنیت اینترنت اشیا و صنعتی

خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصهٔ کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

TechCrunch Security چهارشنبه 6 آبان 1405 · ۲۲:۳۵

Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’

The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the […]

آسیب‌پذیری و روز صفر امنیت هوش مصنوعی متن‌باز

منبع

Wordfence Blog چهارشنبه 6 آبان 1405 · ۲۱:۵۶

PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Most

As of October 28, 2026, Wordfence knows of no WordPress site compromised through PHP2Shell. Update PHP to a fixed version and restart it, because updating WordPress does not update PHP. The post PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Most appeared first on Wordfence.

آسیب‌پذیری و روز صفر

منبع

Help Net Security چهارشنبه 6 آبان 1405 · ۲۰:۳۹

GitHub’s npm package firewall can block brand-new versions before they install

GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions, and any developer can turn it on by pointing npm at the firewall. The checks run before a package reaches a laptop, a build, or a coding agent. GitHub says AI agents are helping developers build more software, faster, and the firewa…

بدافزار و آلودگی آسیب‌پذیری و روز صفر

منبع

The Hacker News چهارشنبه 6 آبان 1405 · ۲۰:۳۸

Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.

Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background. To qualify, a store must pass identity checks and send Google its full catalog, along with every new app and update, for ongoing malware scanning. Approved stores get the features from December 1, but only on

بدافزار و آلودگی توسعه موبایل

منبع