ثبت‌نام

اخبار امنیتی

آخرین CVEها اخبار امنیتی
Help Net Security

Open-source file sync tool rsync 3.5.2 fixes a CPU exhaustion flaw

۱۴۰۵/۰۸/۱۳ · ۱ ساعت پیش آسیب‌پذیری Help Net Security

The rsync project released version 3.5.2, and it closes a flaw that let a connecting client tie up a server’s CPU with checksum math that leads nowhere. The new version also lets you push a transfer to the back of the queue for CPU and disk, so a big sync stops elbowing everything else on the machine. rsync is an open-source utility that copies files locally and across a network, and it is widely…
Help Net Security

Secure your containers without breaking what works

۱۴۰۵/۰۸/۱۳ · ۳ ساعت پیش آسیب‌پذیری Help Net Security

Container security has a familiar problem. Teams identify vulnerabilities, but turning those findings into lower risk is much harder. A standard container image may include operating-system packages, development tools, debugging utilities and libraries that an application never uses. Each unnecessary component can expand the attack surface and add vulnerabilities to investigate, patch or explain…
Help Net Security

Novee puts forgotten internet-facing assets through penetration testing

۱۴۰۵/۰۸/۱۲ · ۱۹ ساعت پیش آسیب‌پذیری Help Net Security

Novee’s External Surface Testing is a new capability in its AI penetration testing platform that helps security teams discover internet-facing assets and validate exploitable vulnerabilities. It tests newly disclosed CVEs and findings imported from third-party external attack surface management (EASM) tools. “Attackers don’t limit themselves to the applications you’re already testing. They look…
Schneier on Security

AIs Hacking the Law

۱۴۰۵/۰۸/۱۲ · ۲۱ ساعت پیش آسیب‌پذیری Schneier on Security

In both a 2021 essay and my 2022 book, A Hacker’s Mind , I talk about AIs finding vulnerabilities and exploits—hacking—the legal system. Here’s some demonstrations of this from Germany: Legal systems encode the foundations of social order in natural language. Similar to computer systems, the written law can contain vulnerabilities that invite exploitation.1 Courts absorb most exploits through…
صفحه ۱ اخبار قدیمی‌تر ←