Check Point Blog پنجشنبه ۷ آبان ۱۴۰۵ · ۱۲:۴۷

HTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js

The key point: CVE-2026-111497 now increasingly referred to as HTTP2Shell and initially reported as Node2Shell, is broader than a Node.js vulnerability. The vulnerability is associated with Brotli decompression, so defenders need to find vulnerable implementations across applications and infrastructure, confirm whether untrusted compressed data can reach them, and patch the affected component. AT A GLANCE · CVE: CVE-…

آسیب‌پذیری و روز صفر امنیت هوش مصنوعی

خواندن متن کامل در Check Point Blog درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

SecurityWeek پنجشنبه ۷ آبان ۱۴۰۵ · ۱۳:۱۷

Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August

Cisco on Wednesday released fixes for an exploited vulnerability affecting its Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. Tracked as CVE-2026-76418 and assigned a CVSS score of 8.6, the bug resides in the Remote Access SSL VPN service. Attackers can exploit it remotely, without authenticating, to force the device […] The post Attackers Exploit Second Cisco Fir…

آسیب‌پذیری و روز صفر

منبع

CSO Online پنجشنبه ۷ آبان ۱۴۰۵ · ۱۲:۳۰

Securing MCP servers before the AI rollout outpaces security

Your company’s CTO has a plan to implement your company’s first LLM-based application. The board approved it, and now you’re finding out about it. It’s a typical story I hear all the time, and I’ve lived it myself. You’ve heard everything about models and LLMs, but now you see this new term all over the place: Model Context Protocol (MCP) servers —and the realization that you now need to make sure they are implemente…

آسیب‌پذیری و روز صفر امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین

منبع

دیجیاتو پنجشنبه ۷ آبان ۱۴۰۵ · ۱۲:۱۳

از ثبت داده تا اقدام هوشمند؛ نسل نوین ERP در عصر هوش مصنوعی

گزارش دیجیاتو از سمینار «سفر به سازمان‌های هوشمند؛ از Co-Pilot تا Agentic ERP» را در ادامه ببینید. The post از ثبت داده تا اقدام هوشمند؛ نسل نوین ERP در عصر هوش مصنوعی appeared first on دیجیاتو.

امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین

منبع

CSO Online پنجشنبه ۷ آبان ۱۴۰۵ · ۱۱:۵۵

PHP2Shell will persist in enterprise environments for years

Two critical vulnerabilities were announced last week in PHP, the internet’s most widely used web application runtime, and they came with the familiar warning to patch immediately. But CISOs will have to deal with the long tail of these flaws for years due to widespread PHP integration into third-party products with patching cycles customers don’t control. NAS devices, firewalls, VPN gateways, printers, building mana…

آسیب‌پذیری و روز صفر امنیت ابری امنیت هوش مصنوعی

منبع