اخبار امنیتی

Schneier on Security

Compromised TLS Certificates

۱۴۰۵/۰۸/۰۱ · ۱۵ روز پیش امنیت سایبری Schneier on Security

The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys : The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2 384 , or a number with 116 digits,…

Krebs on Security

Widespread PHP Flaw May Cause Many Site Outages Today

۱۴۰۵/۰۷/۲۹ · ۱۶ روز پیش آسیب‌پذیری Krebs on Security

Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaws, and that these critical bugs are already being exploited in the wild.

پوشش در رسانه‌های دیگر: Schneier on Security

CVE-2026-109619CVE-2026-109618

WeLiveSecurity

MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration

۱۴۰۵/۰۷/۳۰ · ۱۶ روز پیش بدافزار WeLiveSecurity

ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved the way for a destructive attack against a Ukrainian grain firm

Graham Cluley

Smashing Security podcast #489: How a brand new crypto wallet came with a spy inside

۱۴۰۵/۰۷/۳۰ · ۱۶ روز پیش هوش مصنوعی Graham Cluley

Imagine buying a brand new hardware wallet for your cryptocurrency with the shrink-wrap still on... what could possibly be hiding inside? We break out a Geiger counter and a cat to find out. Meanwhile, malicious ads are targeting journalists with zero-click attacks. Plus, Origin’s Spencer Thompson reveals what AI agents are really getting up to on your employees’ laptops when nobody’s looking.…

Graham Cluley

Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death

۱۴۰۵/۰۷/۲۸ · ۱۸ روز پیش باج‌افزار Graham Cluley

A 28-year-old Russian man has been arrested by German police, suspected of being a key member of the Qilin ransomware gang. Detectives have linked the man to the attack against blood-testing firm Synnovis, that disrupted London hospitals, and resulted in the death of a patient. Read more in my article on the Hot for Security blog.

WeLiveSecurity

Is the ad a scam? How to tell before you click

۱۴۰۵/۰۷/۲۸ · ۱۸ روز پیش فیشینگ و کلاهبرداری WeLiveSecurity

You can trust a social media platform and still get scammed by an ad running on it

Krebs on Security

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

۱۴۰۵/۰۷/۲۷ · ۱۹ روز پیش باج‌افزار Krebs on Security

U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters…

Graham Cluley

Irish police force has its Twitter hacked in cryptocurrency scam

۱۴۰۵/۰۷/۲۴ · ۲۱ روز پیش فیشینگ و کلاهبرداری Graham Cluley

There must have been red faces in the social media department of Ireland's police headquarters after two of its accounts were hijacked this week. Read more in my article on the Hot for Security blog.

Graham Cluley

Krybit ransomware: what you need to know

۱۴۰۵/۰۷/۲۴ · ۲۲ روز پیش باج‌افزار Graham Cluley

Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted, and what organisations can do to protect themselves. Read more in my article on the Fortra blog.

WeLiveSecurity

Inbox flooded with sign-up messages? Email bombing explained

۱۴۰۵/۰۷/۲۴ · ۲۲ روز پیش امنیت سایبری WeLiveSecurity

If you’re suddenly being overwhelmed with sign-up emails, it could very well be a sign of something more serious

Graham Cluley

Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference

۱۴۰۵/۰۷/۲۳ · ۲۳ روز پیش باج‌افزار Graham Cluley

A ransomware negotiator attended a cybersecurity conference, only to be arrested by the FBI in connection with its investigation into the ShinyHunters gang. Meanwhile, hackers get the keys to ASOS's app and the chance to message every single customer. What did they say? And how did the company respond? We have thoughts. All this and more is discussed in episode 488 of the "Smashing Security"…

Krebs on Security

U.K. Sanctions Cryptomus for RU Money Laundering

۱۴۰۵/۰۷/۲۲ · ۲۴ روز پیش قانون و پلیس Krebs on Security

The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial restrictions.

WeLiveSecurity

Medicare scam calls, texts and ads: What to watch for this Open Enrollment

۱۴۰۵/۰۷/۲۲ · ۲۴ روز پیش فیشینگ و کلاهبرداری WeLiveSecurity

Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safe

Krebs on Security

Microsoft Patches More Than 1,400 Security Flaws

۱۴۰۵/۰۷/۲۲ · ۲۴ روز پیش آسیب‌پذیری Krebs on Security

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond.

CVE-2026-96951CVE-2026-108398