CSO Online سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۵:۲۷

Microsoft’s email security is unexpectedly blocking legitimate business mail

Microsoft’s email filters meant to protect users from malicious messages appear to be rejecting legitimate ones. Over the last few days, some mail sent to Microsoft consumer addresses have bounced if they did not publish a domain-based message authentication, reporting, and conformance (DMARC) record. This includes messages to Outlook, Hotmail, Live, and MSN. The refusals began November 5 and are ongoing as of public…

فیشینگ شبکه و اینترنت امنیت هویت و دسترسی

خواندن متن کامل در CSO Online درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

CSO Online سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۶:۰۶

SonicWall releases patches for 7 flaws in its firewalls, most involving unauthenticated access

SonicWall on Monday updated its advisory about seven cybersecurity holes affecting its Gen 7 and Gen 8 firewalls, five of which allow unauthenticated remote attacks, to warn that it is aware of “potential” active exploitation of at least one of the bugs, CVE-2026-19868, a bypass of SAML authentication controls in its SonicOS SSL VPN service. And Frank Dickson, principal analyst at Dickson Research, pointed out that t…

بدافزار و آلودگی آسیب‌پذیری و روز صفر بات‌نت و DDoS

منبع

Ubuntu Security Notices سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۲:۴۲

USN-8890-3: libsoup regression

USN-8890-1 fixed vulnerabilities in libsoup. Unfortunately, that update introduced a memory leak in the cookie jar and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of service. This issue only affecte…

آسیب‌پذیری و روز صفر نشت داده بات‌نت و DDoS

منبع

Tenable Blog سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۰۱:۳۰

U.S. urges critical infrastructure orgs to secure refrigeration systems ASAP after EU supermarket and blood bank attacks

Following recent cyber attacks on French blood banks and European supermarkets, U.S. federal agencies are urging critical infrastructure organizations to immediately secure industrial refrigeration systems against remote tampering and temperature manipulation.Key takeawaysCybercriminals are actively targeting unpatched flaws, misconfigurations, and weak or hard-coded passwords in commercial cold-chain and refrigerati…

آسیب‌پذیری و روز صفر امنیت زنجیره تأمین امنیت اینترنت اشیا و صنعتی

منبع

Proofpoint دوشنبه ۱۸ آبان ۱۴۰۵ · ۲۱:۰۹

BluePhishing: Initial Access via Third-Party Agent Blueprint Consent

Key TakeawaysMicrosoft Entra Agent Identity extends Entra to AI agents and closely mirrors the traditional application model, inheriting many of the same opportunities for abuse.Proofpoint researchers present “BluePhishing” as the next evolution of OAuth consent abuse, enabling attackers to leverage agent identities for initial access.Attackers can configure the blueprint with inheritable permissions and requiredReso…

فیشینگ سیستم‌عامل امنیت هویت و دسترسی

منبع