לא נמצא חיבור אינטרנט
ניוז קליק

פיד: SecurityWeek

SecurityWeek Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections
Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections

Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis. The post https://www.se…

לפני 13 שעות
SecurityWeek PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

The two RCE bugs can be exploited against WordPress, Drupal, Joomla, and other popular applications. The post https://www.securityweek.com/php2shell-p…

לפני 14 שעות
SecurityWeek ‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets
‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Deceptive prompts lure AI agents into decoys and dead ends, cutting attack success by up to 91% in tests and raising the cost of a successful attack 2…

לפני 15 שעות
SecurityWeek High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7
High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7

Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents. The post htt…

לפני 15 שעות
SecurityWeek Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security
Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security

Asymptote Labs raises $5.5M seed led by Tower Research Ventures to commercialize its Beacon AI agent runtime security platform. The post https://www.s…

לפני 17 שעות
SecurityWeek Memory Bugs Account for Most of Chrome’s 353 New Security Fixes
Memory Bugs Account for Most of Chrome’s 353 New Security Fixes

The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities. The post https://www.securityweek.com/memory-bugs-…

לפני 17 שעות
SecurityWeek OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor
OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor

In two internal incidents, agents read routine coding instructions as permission to weaken monitoring, and one gave a false answer about it. The post …

לפני 18 שעות
SecurityWeek Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys

The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them. The post https://www.secur…

לפני 19 שעות
SecurityWeek China Defends DeepSeek After US Ban of Its AI From Government Systems
China Defends DeepSeek After US Ban of Its AI From Government Systems

The DHS said agencies should remove DeepSeek products as well as third-party products and services developed using DeepSeek from their IT systems. The…

לפני 19 שעות
SecurityWeek Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor
Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor

Tasked with writing an application for a US defense contractor, the model made the code 19% more likely to be hackable. The post https://www.securityw…

לפני 20 שעות
SecurityWeek PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution. The post https://www.securit…

לפני 23 שעות
SecurityWeek Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI
Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI

Researchers say the developer’s account was compromised in March with a GlassWorm-linked loader. The post https://www.securityweek.com/hijacked-develo…

לפני 1 ימים
SecurityWeek Accenture, Dragos, SANS Launch $10M Initiative to Defend Small US Utilities
Accenture, Dragos, SANS Launch $10M Initiative to Defend Small US Utilities

The first phase will cover up to 500 utilities, which will get free security tools, equipment, deployment help and training. The post https://www.secu…

לפני 1 ימים
SecurityWeek US Agencies Detail Incident Response Practices for Rogue AI Agents
US Agencies Detail Incident Response Practices for Rogue AI Agents

NIST, CISA and NSA share ten voluntary practices for preparing for, detecting, responding to, recovering from, and reporting rogue AI agent incidents.…

לפני 1 ימים
SecurityWeek AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign
AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign

Across multiple short compromise windows, users were served a downloader for the ShinyRoad modular backdoor framework. The post https://www.securitywe…

לפני 1 ימים
SecurityWeek The Key to AI Software Security Isn’t Speed, It’s Maturity
The Key to AI Software Security Isn’t Speed, It’s Maturity

Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk. The post https://www.securityweek.com/th…

לפני 1 ימים
SecurityWeek Ahold Delhaize Restoring Services Disrupted by Cyberattack
Ahold Delhaize Restoring Services Disrupted by Cyberattack

The company has restored many websites and apps in Europe and expects e-commerce brands in the US to be restored in days. The post https://www.securit…

לפני 1 ימים
SecurityWeek AI Platform Cairn Abused to Hack Over 100 Organizations
AI Platform Cairn Abused to Hack Over 100 Organizations

At least three threat actors have been abusing Cairn for persistent access and financial theft. The post https://www.securityweek.com/ai-platform-cair…

לפני 1 ימים
SecurityWeek Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors Say
Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors Say

Abdulrahman Alfozan’s wife and young son also left the country the day after the 35-year-old Saudi national’s arrest. The post https://www.securitywee…

לפני 1 ימים
SecurityWeek Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring
Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring

Microsoft says companies should treat AI agents as insiders, and is adding controls that grant access per task and tighten it as an agent’s risk rises…

לפני 1 ימים