Siber Güvenlik Haberleri

Güvenilir yayınlardan canlı haberler, DayBreach CVE verileriyle eşleştirilmiş olarak.

Tüm kaynaklarArs Technica · 64BleepingComputer · 164CERT Polska · 78Cisco Talos · 46CrowdStrike · 32Dark Reading · 69DataBreaches.net · 29Krebs on Security · 13Microsoft Security Blog · 38Proofpoint · 37Rapid7 · 68SANS Internet Storm Center · 55Security.NL · 306SecurityWeek · 66SentinelOne · 33The Cyber Express · 70TheCyberThrone · 56The Hacker News · 290The Record · 39Unit 42 · 46
The Hacker News2 ay önce

Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses

Cybersecurity researchers have disclosed a security issue with Apple's iCloud Private Relay tool that can expose a user's real IP address. Introduced with iOS 15, iCloud Private Relay employs a dual-hop architecture to ensure users' privacy by routing their Safari web traffic through two relays so that no single third-party, including Apple, can determine where the request is originating from

İlişkili Şirketler
W
WebKit logo
WebKit
I
ivanti logo
ivanti
PP
proxy project logo
proxy project
A
apple logo
apple
P
Private logo
Private
İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku
The Hacker News2 ay önce

AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory

A new class of prompt injection is spreading across commercial websites. It requires no malware, no stolen credentials, and no zero-day exploit. It abuses a standard feature built into almost every major AI assistant: pre-filled deep links. We observed production websites embedding hidden prompt injection payloads inside "Ask AI" buttons on marketing and competitor comparison pages. When a user

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku
The Hacker News2 ay önce

Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access

Attackers broke into an organization's Oracle database through a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit without writing an executable to disk. They fed Java source code to the database, let Oracle compile it into stored schema objects, and ran commands from inside the database engine. Huntress, which tracks the toolkit as khunt,

İlişkili Şirketler
M
microsoft logo
microsoft
O
octobercms logo
octobercms
O
oracle logo
oracle
İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

991-1000 / 1390 haber gösteriliyor