نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
SOCRadar

CVE-2026-109469: CVSS 10 Entra Device Registration Flaw

Microsoft has disclosed CVE-2026-109469, a critical elevation of privilege vulnerability in Entra Device Registration, the cloud service that registers and joins devices to Microsoft Entra ID. The flaw carries a maximum CVSS score, meaning that an unauthenticated attacker could exploit it over the network with no user interaction. Customers have nothing to patch. Microsoft says […]

آسیب‌پذیری و روز صفر
خواندن متن کامل در SOCRadar درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Help Net Security

CISA tweaks cyber incident form to spot attacks that might be linked

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its online incident reporting form to help analysts spot when attacks on different organizations may be part of the same campaign. The revised questionnaire asks more specific questions and removes duplicate ones. The form asks whether an incident involved malware, attempts to trick people, hacking techniques, or an insider threat. It also u…

بدافزار و آلودگی آسیب‌پذیری و روز صفر
منبع
Orca Security

Shadow AI Generated Apps: Find Them in the Cloud and Code You Already Scan

The Orca Research Pod recently found that 51% of organizations have adopted AI to build software, yet 81% have critical vulnerabilities in AI packages (Hacker Valley News, 2026). In 2025, CVE-2025-48757 showed how a single missing database policy in AI-generated Supabase projects exposed data across more than 170 production apps. None of these apps went […]

آسیب‌پذیری و روز صفر پایگاه داده
منبع