نبض سایبری اخبار امنیت سایبری، با ذکر منبع
Help Net Security

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951)

In another record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including a Mark of the Web bypass vulnerability (CVE-2026-96951) exploited by attackers in the wild. CVE-2026-96951 is a command injection vulnerability in Windows Shell that can be triggered by remote attackers via a file that is designed to exploit the vulnerability. Such a file can be sent to the user via email, instant mes…

آسیب‌پذیری و روز صفر سیستم‌عامل
خواندن متن کامل در Help Net Security درخواست حذف

این صفحه فقط عنوان و خلاصهٔ کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
The Hacker News

Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach

Japan's GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay an extortion demand. The reward program opened on October 28 and pays only if a tip helps lead to an arrest or an international wanted notice. The service hosts Windows desktops used for FX trading,

نشت داده سیستم‌عامل
منبع
Qualys Blog

Can’t Patch Node.js Yet? Build a Stopgap with the Controls You Own

Executive Summary Node.js has fixed CVE-2026-111497, a Brotli decoder flaw that can permit remote code execution, in 22.23.4, 24.22.1, and 26.12.1, but upgrading at scale is slow. In Qualys telemetry, only 42,000 of roughly 3 million Node.js installations have been patched, and 1.7 million run end-of-life lines that will never receive a fix. In the […]

آسیب‌پذیری و روز صفر
منبع
Help Net Security

Bellini Capital CISO on AI security governance and the limits of patching faster

In this Help Net Security interview, Brian Blakley, CISO at Bellini Capital, explains why AI makes finding vulnerabilities faster while fixing them still takes time. He argues that “patch faster” is not enough and that teams need to cut exposure while remediation is pending. Blakley describes a shared metric for CIOs and CISOs, how his team tests for silent model updates, who owns the damage when an AI agent makes a…

آسیب‌پذیری و روز صفر امنیت هوش مصنوعی
منبع
دیجیاتو

ردمی K100 با باتری ۱۰ هزار میلی‌آمپرساعتی و اسنپدراگون ۸ الیت معرفی شد

این دستگاه به همراه گواهی مقاومت بسیار بالای IP69K، سیستم‌عامل اندروید ۱۷ و شارژ سریع سیمی ۱۰۰ واتی وارد بازار شده است. The post ردمی K100 با باتری ۱۰ هزار میلی‌آمپرساعتی و اسنپدراگون ۸ الیت معرفی شد appeared first on دیجیاتو.

سیستم‌عامل
منبع