نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
Google Threat Intelligence

The Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model Resources

Written by: Christopher Romano, Codi Starks, John Wolfram, Josh Murchie, Mathew Potaczek, Garrett Mahoney, Mike Lombardi, K Singh, Rik Dolfing Introduction Mandiant responded to multiple incidents in 2026 in which threat actors hijacked enterprise access to Large Language Models (LLMs), a tactic known as "LLMJacking." Spanning a variety of cloud and LLM providers, these intrusions impacted organizations in North Amer…

بدافزار و آلودگی آسیب‌پذیری و روز صفر فیشینگ امنیت هوش مصنوعی امنیت زنجیره تأمین هوش تهدید هوش مصنوعی و یادگیری ماشین برنامه‌نویسی و زبان‌ها توسعه وب پایگاه داده رایانش ابری سیستم‌عامل سخت‌افزار و تراشه متن‌باز پاسخ به رخداد و جرم‌یابی امنیت هویت و دسترسی
خواندن متن کامل در Google Threat Intelligence درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Help Net Security

CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)

CISA added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog on Friday, after Ivanti updated an earlier security advisory with details about the flaws. Three flaws chained to gain a foothold CVE-2026-111357, a missing authentication for a critical function vulnerability that allows a local authenticated attacker to escalate their privileges…

آسیب‌پذیری و روز صفر امنیت هویت و دسترسی
منبع
Help Net Security

Google disrupts XCPE botnet, bans the company behind it

Google shut down the servers behind XCPE, a backdoor hidden in the firmware of Android TV set-top boxes. Google’s Threat Intelligence Group attributes the operation with high confidence to Videostrong Technology, the company that manufactured many of those boxes. More than 1.3 million devices were enrolled. XCPE malware overview (Source: Google) Access The business model was access. Researchers say the company sold e…

بدافزار و آلودگی بات‌نت و DDoS امنیت اینترنت اشیا و صنعتی
منبع
Wordfence Blog

HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites

On October 22, 2026, Google published CVE-2026-111497, a critical vulnerability in Brotli, one day after the Brotli project released fixed versions. The vulnerability has circulated under several unofficial names, including HTTP2Shell, Node2Shell, and Brotli2Shell. The post HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites appeared first on Wordfence.

آسیب‌پذیری و روز صفر
منبع