SOCRadar سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۷:۰۷

CVE-2026-109469: CVSS 10 Entra Device Registration Flaw

Microsoft has disclosed CVE-2026-109469, a critical elevation of privilege vulnerability in Entra Device Registration, the cloud service that registers and joins devices to Microsoft Entra ID. The flaw carries a maximum CVSS score, meaning that an unauthenticated attacker could exploit it over the network with no user interaction. Customers have nothing to patch. Microsoft says […]

آسیب‌پذیری و روز صفر

خواندن متن کامل در SOCRadar درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Infosecurity Magazine سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۷:۳۰

Cloud Vulnerabilities Surge Fourfold in Less Than a Year

AI is amplifying the impact of vulnerabilities, long-lived credentials and other cloud risks, says Datadog

آسیب‌پذیری و روز صفر

منبع

The Register - Security سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۶:۵۸

Chrome zero-day whack-a-mole continues as 2026 tally hits 8

Another Chrome memory bug gets squashed, but not before attackers got their hands on it

آسیب‌پذیری و روز صفر

منبع

Malwarebytes Blog سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۶:۵۳

Update Chrome now to fix a flaw attackers are exploiting

Google has released Chrome updates for desktop and Android to patch a zero-day vulnerability already being exploited in attacks.

آسیب‌پذیری و روز صفر توسعه موبایل

منبع

Help Net Security سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۶:۴۷

CISA tweaks cyber incident form to spot attacks that might be linked

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its online incident reporting form to help analysts spot when attacks on different organizations may be part of the same campaign. The revised questionnaire asks more specific questions and removes duplicate ones. The form asks whether an incident involved malware, attempts to trick people, hacking techniques, or an insider threat. It also u…

بدافزار و آلودگی آسیب‌پذیری و روز صفر

منبع