Vulnerability News
رفتن به کانال در Telegram
Every day new posts about vulnerabilities and cybersecurity news. Get the latest news about the cyberspace! Group: @VulnerabilityNewsGroup
نمایش بیشتر5 594
مشترکین
+1124 ساعت
+737 روز
+20330 روز
در حال بارگذاری داده‌ها
کانال‌های مشابه
ابر برچسب‌ها
اشارات ورودی و خروجی
---
---
---
---
---
---
جذب مشترکین
اکتبر '26اکتبر '26
اکتبر '26
+219
در 0 کانال‌ها
سپتامبر '26
+219
در 0 کانال‌ها
Get PRO
اوت '26
+157
در 0 کانال‌ها
Get PRO
ژوئیه '26
+185
در 0 کانال‌ها
Get PRO
ژوئن '26
+156
در 0 کانال‌ها
Get PRO
مه '26
+204
در 0 کانال‌ها
Get PRO
آوریل '26
+187
در 0 کانال‌ها
Get PRO
مارس '26
+254
در 0 کانال‌ها
Get PRO
فوریه '26
+116
در 0 کانال‌ها
Get PRO
ژانویه '26
+166
در 0 کانال‌ها
Get PRO
دسامبر '25
+134
در 0 کانال‌ها
Get PRO
نوامبر '25
+139
در 0 کانال‌ها
Get PRO
اکتبر '25
+8
در 0 کانال‌ها
Get PRO
سپتامبر '25
+12
در 0 کانال‌ها
Get PRO
اوت '25
+13
در 0 کانال‌ها
Get PRO
ژوئیه '25
+11
در 0 کانال‌ها
Get PRO
ژوئن '25
+12
در 0 کانال‌ها
Get PRO
مه '25
+18
در 1 کانال‌ها
Get PRO
آوریل '25
+14
در 0 کانال‌ها
Get PRO
مارس '25
+21
در 0 کانال‌ها
Get PRO
فوریه '25
+17
در 0 کانال‌ها
Get PRO
ژانویه '25
+15
در 1 کانال‌ها
Get PRO
دسامبر '24
+262
در 1 کانال‌ها
Get PRO
نوامبر '24
+206
در 1 کانال‌ها
Get PRO
اکتبر '24
+166
در 0 کانال‌ها
Get PRO
سپتامبر '24
+146
در 0 کانال‌ها
Get PRO
اوت '24
+137
در 0 کانال‌ها
Get PRO
ژوئیه '24
+96
در 1 کانال‌ها
Get PRO
ژوئن '24
+91
در 0 کانال‌ها
Get PRO
مه '24
+95
در 0 کانال‌ها
Get PRO
آوریل '24
+104
در 0 کانال‌ها
Get PRO
مارس '24
+149
در 0 کانال‌ها
Get PRO
فوریه '24
+279
در 0 کانال‌ها
Get PRO
ژانویه '24
+395
در 0 کانال‌ها
Get PRO
دسامبر '23
+327
در 0 کانال‌ها
Get PRO
نوامبر '23
+38
در 0 کانال‌ها
Get PRO
اکتبر '23
+32
در 0 کانال‌ها
Get PRO
سپتامبر '23
+47
در 0 کانال‌ها
Get PRO
اوت '23
+53
در 0 کانال‌ها
Get PRO
ژوئیه '23
+51
در 0 کانال‌ها
Get PRO
ژوئن '23
+42
در 0 کانال‌ها
Get PRO
مه '23
+43
در 0 کانال‌ها
Get PRO
آوریل '23
+67
در 0 کانال‌ها
Get PRO
مارس '23
+65
در 0 کانال‌ها
Get PRO
فوریه '23
+45
در 0 کانال‌ها
Get PRO
ژانویه '23
+67
در 0 کانال‌ها
Get PRO
دسامبر '22
+62
در 0 کانال‌ها
Get PRO
نوامبر '22
+71
در 0 کانال‌ها
Get PRO
اکتبر '22
+70
در 0 کانال‌ها
Get PRO
سپتامبر '22
+55
در 0 کانال‌ها
Get PRO
اوت '22
+44
در 0 کانال‌ها
Get PRO
ژوئیه '22
+54
در 0 کانال‌ها
Get PRO
ژوئن '22
+78
در 0 کانال‌ها
Get PRO
مه '22
+46
در 0 کانال‌ها
Get PRO
آوریل '22
+77
در 0 کانال‌ها
Get PRO
مارس '22
+105
در 0 کانال‌ها
Get PRO
فوریه '22
+48
در 0 کانال‌ها
Get PRO
ژانویه '22
+61
در 0 کانال‌ها
Get PRO
دسامبر '21
+99
در 0 کانال‌ها
Get PRO
نوامبر '21
+68
در 0 کانال‌ها
Get PRO
اکتبر '21
+170
در 0 کانال‌ها
Get PRO
سپتامبر '21
+72
در 0 کانال‌ها
Get PRO
اوت '21
+104
در 0 کانال‌ها
Get PRO
ژوئیه '21
+72
در 0 کانال‌ها
Get PRO
ژوئن '21
+292
در 0 کانال‌ها
Get PRO
مه '21
+1 344
در 0 کانال‌ها
| تاریخ | رشد مشترکین | اشارات | کانال‌ها | |
| 29 اکتبر | +1 | |||
| 28 اکتبر | +11 | |||
| 27 اکتبر | +10 | |||
| 26 اکتبر | +11 | |||
| 25 اکتبر | +10 | |||
| 24 اکتبر | +10 | |||
| 23 اکتبر | +9 | |||
| 22 اکتبر | +17 | |||
| 21 اکتبر | +9 | |||
| 20 اکتبر | +10 | |||
| 19 اکتبر | +7 | |||
| 18 اکتبر | +8 | |||
| 17 اکتبر | +6 | |||
| 16 اکتبر | +10 | |||
| 15 اکتبر | +4 | |||
| 14 اکتبر | +6 | |||
| 13 اکتبر | +5 | |||
| 12 اکتبر | +3 | |||
| 11 اکتبر | +7 | |||
| 10 اکتبر | +8 | |||
| 09 اکتبر | +6 | |||
| 08 اکتبر | +9 | |||
| 07 اکتبر | +7 | |||
| 06 اکتبر | +7 | |||
| 05 اکتبر | +7 | |||
| 04 اکتبر | +4 | |||
| 03 اکتبر | +4 | |||
| 02 اکتبر | +6 | |||
| 01 اکتبر | +7 |
پست‌های کانال
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit.
The post CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts appeared first on SecurityWeek.
https://www.securityweek.com/cisa-warns-of-node2shell-exploitation-as-honeypots-log-attack-attempts/
| 2 | Hackers Start Probing Fresh Oracle EBS Vulnerability
CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution.
The post Hackers Start Probing Fresh Oracle EBS Vulnerability appeared first on SecurityWeek.
https://www.securityweek.com/hackers-start-probing-fresh-oracle-ebs-vulnerability/ | 32 |
| 3 | Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise
The company will use the Series B funds to expand its platform for securing AI agents’ access to sensitive systems.
The post Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise appeared first on SecurityWeek.
https://www.securityweek.com/secrets-management-firm-infisical-valued-at-600-million-after-40-million-raise/ | 22 |
| 4 | Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
The post Nobody Trusts the Security Questionnaire. We Rely on It Anyway. appeared first on SecurityWeek.
https://www.securityweek.com/nobody-trusts-the-security-questionnaire-we-rely-on-it-anyway/ | 20 |
| 5 | Long-Hidden Flaws Patched in EPICS Research Facility Control Software
Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.
The post Long-Hidden Flaws Patched in EPICS Research Facility Control Software appeared first on SecurityWeek.
https://www.securityweek.com/long-hidden-flaws-patched-in-epics-research-facility-control-software/ | 17 |
| 6 | China-Linked Hackers Exploit PHP2Shell to Root Firewalls
The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization.
The post China-Linked Hackers Exploit PHP2Shell to Root Firewalls appeared first on SecurityWeek.
https://www.securityweek.com/china-linked-hackers-exploit-php2shell-to-root-firewalls/ | 12 |
| 7 | TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices
FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to eavesdroppers.
The post TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices appeared first on SecurityWeek.
https://www.securityweek.com/tls-flaws-found-in-goahead-web-server-used-in-hundreds-of-millions-of-devices/ | 13 |
| 8 | Chrome and Firefox Updates Patch Over 200 Vulnerabilities
The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches.
The post Chrome and Firefox Updates Patch Over 200 Vulnerabilities appeared first on SecurityWeek.
https://www.securityweek.com/chrome-and-firefox-updates-patch-over-200-vulnerabilities/ | 12 |
| 9 | Upwind Security Raises $400 Million at $3.8 Billion Valuation
The massive funding round comes just days after reports emerged that Upwind had attracted acquisition interest from several companies, including Datadog
The post Upwind Security Raises $400 Million at $3.8 Billion Valuation appeared first on SecurityWeek.
https://www.securityweek.com/upwind-security-raises-400-million-at-3-8-billion-valuation/ | 10 |
| 10 | Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks.
The post Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison appeared first on SecurityWeek.
https://www.securityweek.com/ukrainian-hive-and-nefilim-ransomware-affiliate-gets-70-months-in-us-prison/ | 11 |
| 11 | Nefilim and Hive ransomware affiliate gets 70 months in prison
A Ukrainian national was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals, government entities, and high-revenue businesses worldwide between 2018 and 2021. [...]
https://www.bleepingcomputer.com/news/security/nefilim-and-hive-ransomware-affiliate-gets-70-months-in-prison/ | 11 |
| 12 | CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-now-exploiting-critical-node2shell-flaw/ | 11 |
| 13 | Hackers now scanning systems for recently-patched Oracle flaw
Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability. [...]
https://www.bleepingcomputer.com/news/security/hackers-now-scanning-systems-for-recently-patched-oracle-flaw/ | 11 |
| 14 | Even after PHP2Shell, blast radius matters more than a CVSS score
PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the access of service accounts, API keys, and AI agents is just as important as fixing vulnerabilities to reduce the damage from a breach. [...]
https://www.bleepingcomputer.com/news/security/even-after-php2shell-blast-radius-matters-more-than-a-cvss-score/ | 11 |
| 15 | InfraTrust report warns of exploited flaws in critical network infrastructure
Attackers are actively exploiting vulnerabilities across critical network infrastructure, and PHP flaws known as "PHP2Shell" put the web management interfaces of firewalls, VPNs, application delivery controllers, and other appliances at risk. [...]
https://www.bleepingcomputer.com/news/security/infratrust-report-warns-of-exploited-flaws-in-critical-network-infrastructure/ | 10 |
| 16 | Microsoft urges Entra ID admins to migrate users to passkeys
Microsoft again asked Entra ID administrators to migrate users to phishing-resistant methods to avoid sign-in disruptions before it retires SMS and voice authentication in February 2027. [...]
https://www.bleepingcomputer.com/news/microsoft/microsoft-reminds-entra-id-admins-to-migrate-users-to-passkeys/ | 13 |
| 17 | Volt Typhoon hides zero-day attacks using 'Silent Train' framework
Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. [...]
https://www.bleepingcomputer.com/news/security/volt-typhoon-hides-zero-day-attacks-using-silent-train-framework/ | 12 |
| 18 | Sony ISP subsidiary data breach exposes 2.5 million customer records
Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers' personal information. [...]
https://www.bleepingcomputer.com/news/security/sony-isp-subsidiary-data-breach-exposes-25-million-customer-records/ | 16 |
| 19 | Discord to let search engines index public server messages
Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation. [...]
https://www.bleepingcomputer.com/news/security/discord-to-let-search-engines-index-public-server-messages/ | 17 |
| 20 | Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
U.S. law enforcement has seized the primary domain of Virtualine, a bulletproof hosting service advertised on cybercrime forums for facilitating illegal activities. [...]
https://www.bleepingcomputer.com/news/security/police-seize-virtualine-bulletproof-service-tied-to-ransowmare-cybercrime/ | 20 |
