نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
Help Net Security

Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: r/opensource bans AI projects, and solo devs go down with them Moderators of r/opensource, Reddit’s catch-all forum for open source software, have barred any project that “uses AI, is made by AI, or is intended for AI.” Moderator Wolvereness announced the rules in a post over the weekend. AI slop is piling up highest on…

آسیب‌پذیری و روز صفر متن‌باز
خواندن متن کامل در Help Net Security درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Help Net Security

Chainalysis breached using “offensive agentic techniques”

Blockchain analytics firm Chainalysis has suffered a cybersecurity incident that led to a data breach. According to the company’s Friday announcement, the incident is unrelated to the recent Binance hack. What was accessed? In October, the company detected external attackers using “offensive agentic techniques” to gain access to Chainalysis systems and internal tools. “Based on the evidence available to date, we have…

نشت داده بلاک‌چین و وب۳
منبع
دیجیاتو

آسیب‌پذیری خطرناک ChatGPT چت‌های کاربر را از طریق لینک اشتراک‌گذاری فاش می‌کرد

شرکت OpenAI این باگ را برطرف و ۵۰۰۰ دلار پاداش به پژوهشگران کشف‌کننده آن اهدا کرده است. The post آسیب‌پذیری خطرناک ChatGPT چت‌های کاربر را از طریق لینک اشتراک‌گذاری فاش می‌کرد appeared first on دیجیاتو.

آسیب‌پذیری و روز صفر
منبع
SOCRadar

Ivanti Connect Secure Zero-Day Chain Enables Root Access

A previously unknown threat actor tracked as UTA0576 chained three Ivanti Connect Secure zero-day vulnerabilities to run code as root on VPN appliances without logging in. The attacks began in early October 2026 and hit at least one appliance that was fully patched at the time. Ivanti says exploitation has affected a limited number of […]

آسیب‌پذیری و روز صفر هوش تهدید
منبع
Rapid7 Blog

Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

OverviewOn October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released fixes for both. Ivanti rates CVE-2026-111357, a missing authentication for critical function vulnerability (CWE-306), with a CVSSv3.1 score of 8.8; it allows a local authenticated attacker to escalate privileges. CVE-2026-118527, classified as generation of predictab…

آسیب‌پذیری و روز صفر فیشینگ امنیت اینترنت اشیا و صنعتی
منبع