نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
Help Net Security

Security certification is a snapshot, and buyers read too much into it

In this Help Net Security video, Mariia Bakhtina, a research specialist at Masaryk University, explains what a Common Criteria or FIPS-140 certificate does and does not promise. In her team’s analysis, about 6 in 10 vulnerabilities matched to certified products, smartcards aside, were disclosed after the certification date. She also describes sec-certs and SCRUTINY, two open-source tools her lab builds, and the one q…

آسیب‌پذیری و روز صفر متن‌باز قوانین و مدیریت فناوری
خواندن متن کامل در Help Net Security درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Help Net Security

US agencies warn attackers are targeting refrigeration systems that protect food and medicine

Threat actors are going after the controllers that keep grocery store freezers and cold storage rooms at safe temperatures, and they may push those units into continuous heating and defrost cycles, five US federal agencies warned in a joint advisory published on Thursday. CISA, the FBI, the Department of Health and Human Services (HHS), the US Department of Agriculture (USDA) and the Department of Transportation (DOT…

سخت‌افزار و تراشه
منبع
SOCRadar

Microsoft Paint RCE CVE-2026-83844 Raises Store Update Questions

Microsoft has disclosed CVE-2026-83844, an out-of-bounds read in the Microsoft Store version of Paint that could allow remote code execution. Microsoft rates the vulnerability Important, while its CVSS score of 8.1 places it in the high-severity range. Its assessment indicates a network-based attack requiring no privileges or user interaction, although successful exploitation has high complexity. […]

آسیب‌پذیری و روز صفر
منبع
Help Net Security

November 2026 Patch Tuesday forecast: Old software continues to bite

How did you enjoy October 2026 Patch Tuesday? Were there enough CVEs reported to keep you busy for the rest of the year or are you finished and ready for another round next week? They released the regularly scheduled update nearly two and a half hours late, but Microsoft did resolve another record-breaking 1,407 unique CVEs. As in previous months, there were limited CVEs we needed to immediately deal with. In October…

آسیب‌پذیری و روز صفر
منبع
Help Net Security

87% say their AI controls need to work better

The AI running inside large companies has stopped waiting for permission. Across five categories of AI, from chatbots to process automation, more than half of 3,600 business decision-makers say the systems their teams use can act within defined rules without routine review, or finish whole processes with no human approval. 87% of those same respondents say their organization needs a better way to approve, monitor and…

امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین
منبع