بحرانی
۱۴۰۵/۰۵/۱۸
How AI Exposed a Browser Security Gap that Enterprises Cannot Ignore
AI did not create a new browser security problem. It exposed one that enterprises have long been able …
پایش زنده تهدیدات · ۲۴/۷
هشدارهای امنیت سایبری
آسیبپذیریها و تهدیدات روز با رتبهبندی CVSS و شدت — مستقیم از تیم تحلیل تهدیدات سیاره فناوری اطلاعات.
CRITICAL
بحرانی
HIGH
بالا
MEDIUM
متوسط
LOW
پایین
متوسط
۱۴۰۵/۰۵/۱۸
New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes
Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an …
متوسط
۱۴۰۵/۰۵/۱۸
Swiss government SharePoint breach compromised 200 accounts
Switzerland's federal IT office says hackers exploited vulnerabilities to breach its Microsoft SharePoint servers and compromised approximately 200 …
متوسط
۱۴۰۵/۰۵/۱۸
ClickFix attack pushes macOS infostealer for crypto theft attacks
A Go-based malware delivered in ClickFix attacks targeting macOS users is stealing cryptocurrency assets, browser-stored passwords, Apple Keychain …
متوسط
۱۴۰۵/۰۵/۱۸
Real emails, hijacked payments: Two H1 2026 attack chains
Gen's H1 2026 Threat Report examines two separate attack chains. One used compromised business inboxes and browser manipulation …
بحرانی
۱۴۰۵/۰۵/۱۸
Metabase SQLi zero-day exploited in customer data-theft attacks
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft …
متوسط
۱۴۰۵/۰۵/۱۸
Hackers breach TrueConf to trojanize client installers with backdoors
The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace client …
بالا
۱۴۰۵/۰۵/۱۸
VU#141367: AT&T's Arris BGW210-700 gateway contains authentication bypass vulnerability in LAN-side management interface
Overview Firmware versions 2.7.7 and earlier of the Arris BGW210-700 residential gateway contain an authentication bypass vulnerability, tracked …
بالا
۱۴۰۵/۰۵/۱۸
VU#305509: OPeNDAP Hyrax is vulnerable to SSRF and Credential Disclosure
Overview A vulnerability has been discovered in the OPeNDAP Hyrax software solution. A remote attacker with the ability …
پایین
۱۴۰۵/۰۵/۱۸
VU#293714: Arbitrary File Overwrite in Develar app-builder (zipx.Unzip) via Symlink Following on macOS (APFS)
Overview A vulnerability in the zipx.Unzip extraction routine of Develar’s app-builder allows an attacker to overwrite arbitrary files …