نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
Security Affairs

Hackers Advertise a $1,000 Gmail Tool That Allegedly Survives Password Resets

Hackers advertise a $1,000-a-month tool claiming persistent Gmail access after password resets, but its effectiveness remains unverified. A developer of hacking tools is selling a $1,000 per month feature that allegedly gives criminals continuous access to Gmail inboxes. The cybersecurity firm Hudson Rock reports that the tool can keep reading a victim’s mailbox after a […]

بدافزار و آلودگی آسیب‌پذیری و روز صفر فیشینگ
خواندن متن کامل در Security Affairs درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
SOCRadar

October 2026: Binance Heist, ConnectWise Breach, and More

The major cyber attacks of October 2026 were some of the year’s most consequential, and many of them started with access their victims already trusted. A cryptocurrency exchange lost billions through compromised engineer workstations in the Binance hot wallet heist, a backup provider’s cloud credential reached hundreds of Microsoft 365 tenants in the ConnectWise breach, […]

بدافزار و آلودگی آسیب‌پذیری و روز صفر نشت داده
منبع
Help Net Security

Microsoft researchers demonstrate hidden backdoor technique for AI agents

Microsoft researchers have demonstrated how small changes to an AI model can implant a hidden backdoor, causing an agent to execute an attacker’s command when a specific trigger appears. The technique, called Lazarus, requires no model retraining and allows the agent to behave normally during standard safety evaluations. The company has not observed threat actors weaponizing the technique, but says the research highl…

بدافزار و آلودگی
منبع
Ubuntu Security Notices

USN-9041-1: uutils coreutils vulnerabilities

It was discovered that uutils coreutils mkfifo incorrectly continued processing when a target file already existed, applying default permissions to the existing file. A local attacker could possibly use this issue to obtain sensitive information or modify file permissions unexpectedly. (CVE-2026-35341) It was discovered that uutils coreutils dd incorrectly suppressed errors during file truncation operations. A local…

آسیب‌پذیری و روز صفر بات‌نت و DDoS
منبع
SOCRadar

November 2026 Patch Tuesday: 1,094 Flaws, One Exploited

Microsoft’s November 2026 Patch Tuesday, released on November 10, 2026, fixes 1,094 vulnerabilities across Windows, Office, SQL Server, Exchange Server, SharePoint, Azure services, and developer tools. The total falls below October’s Patch Tuesday (1,413 flaws) but still makes this the second-largest monthly release on record. The release includes one zero-day and over 60 critical-rated vulnerabilities. […]

بدافزار و آلودگی آسیب‌پذیری و روز صفر فیشینگ
منبع