نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
Help Net Security

CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)

CISA added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog on Friday, after Ivanti updated an earlier security advisory with details about the flaws. Three flaws chained to gain a foothold CVE-2026-111357, a missing authentication for a critical function vulnerability that allows a local authenticated attacker to escalate their privileges…

آسیب‌پذیری و روز صفر امنیت هویت و دسترسی
خواندن متن کامل در Help Net Security درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
AWS Security Blog

Beyond DKIM key rotation: understanding email replay attacks

As the email administrator for your organization’s domain, you receive a Domain-based Message Authentication, Reporting, and Conformance (DMARC) aggregate report showing email passing DomainKeys Identified Mail (DKIM) verification as though it came from your domain, sent from IP addresses you don’t recognize to recipients you didn’t contact. To clear the issue, you rotate your DKIM […]

امنیت هویت و دسترسی قوانین و مدیریت فناوری
منبع
Censys Research

Thoughts on Vulnerability Response in the Era of the Vulnpocalypse and PHP2Shell

There is no shortage of security vulnerabilities. Threat actors have never needed sophisticated exploits to breach organizations; they can and do use simple methods of initial access. They don’t even need a CVE: stolen credentials and good old-fashioned social engineering are still painfully effective. So when various AI products are marketed with doomsday warnings that […] The post Thoughts on Vulnerability Response…

آسیب‌پذیری و روز صفر نشت داده
منبع
AWS Security Bulletins

CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench

Bulletin ID: 2026-162-AWS Publication Date: 11/02/2026 09:30 AM PST Description: Virtual Engineering Workbench (VEW) is an open-source platform where platform engineers define and publish development environments, and developers provision them on demand through a web portal. We identified CVE-2026-119085, where improper neutralization of special elements used in a template engine in the publishing component of Amazon…

آسیب‌پذیری و روز صفر رایانش ابری متن‌باز
منبع
Industrial Cyber

Hackers manipulate supermarket freezer temperatures across Europe, exposing weaknesses in connected OT systems

A new spree of cyberattacks targeting supermarket refrigeration systems has spread across Europe, affecting grocery chains in at... The post Hackers manipulate supermarket freezer temperatures across Europe, exposing weaknesses in connected OT systems appeared first on Industrial Cyber.

بدافزار و آلودگی آسیب‌پذیری و روز صفر فیشینگ
منبع