أخبار البصيرة AI News Intelligence
تدفق الأخبار نتائج "Data" في security

نتائج "Data" في security

44 خبر · الصفحة 1 من 4
نتائج البحث

تم العثور على 44 خبرًا مطابقًا

تتم المطابقة داخل العنوان الأصلي والملخص العربي والتحليل والمصدر.

Data
إزالة البحث
Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords الأمن السيبراني

Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords

The Iran-linked "hacktivist" persona known as Handala Hack has been attributed to a Telegram-based surveillance backdoor called HEAVYGRAM and a Delphi-based utility known as CRUDEEXCLUDE. "HEAVYGRAM offers builtin commands supporting remote command execution, system, network and process information discovery, data and Telegram session files exfiltration, screenshot capture, DLL sideloading,

AI 0/10
The Hacker News
اقرأ المزيد ←
Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records الأمن السيبراني

Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records

A security breach at Gyazo, Helpfeel's image-sharing service, exposed about 23.62 million user records, including email addresses and password hashes, the Kyoto-based company said in a notice published Wednesday. It also exposed about 490 million image metadata records, mostly for images from January 2019 or earlier, including the IDs that make up Gyazo image links. Helpfeel said

AI 0/10
The Hacker News
اقرأ المزيد ←
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security الأمن السيبراني

N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security

N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication flows. Successful attacks can give threat actors access to valid accounts without relying on obvious malware activity. From there, a single compromised identity can open the door to sensitive data, business systems, and additional cloud

AI 0/10
The Hacker News
اقرأ المزيد ←
Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation الأمن السيبراني

Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation

Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild. The vulnerability, tracked as CVE-2026-58704 (CVSS score: 8.0), is a privilege escalation flaw. "In Cellular Modem, there is a possible permission bypass due to a logic error in the code," according to a description of the bug in the NIST National Vulnerability Database

AI 0/10
The Hacker News
اقرأ المزيد ←
Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers الأمن السيبراني

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at internet-exposed Vite development servers that's designed to steal cloud credentials, configurations from Amazon Web Services (AWS) and Microsoft Azure instances, and infrastructure state files, per F5 Labs. The

AI 0/10
The Hacker News
اقرأ المزيد ←
New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing الأمن السيبراني

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server's memory, so the processor keeps reading old encrypted data as if it were current. The attack requires an attacker who already controls the server's software and can briefly access the machine to insert a small circuit

AI 0/10
The Hacker News
اقرأ المزيد ←
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries الأمن السيبراني

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

A suspected Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise internet-facing instances as part of a multi-national campaign. "Red Heron scanned 1,386 Gitea instances across seven countries and maintained a separate dataset of 477 Taiwan-based systems," Acronis Threat Research Unit (TRU)

AI 0/10
The Hacker News
اقرأ المزيد ←
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data الأمن السيبراني

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using passkey-themed social engineering to breach cloud environments. The first campaign, per the tech giant, involved sending over a million scam emails between August 3 and 5, 2026, by masquerading as chief executive officers

AI 0/10
The Hacker News
اقرأ المزيد ←
Claude Used to Automate Exploitation and Data Theft Across Multiple Victims الأمن السيبراني

Claude Used to Automate Exploitation and Data Theft Across Multiple Victims

Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons design, propaganda, and mass surveillance between December 2025 and August 2026. The threat actors, which the artificial intelligence (AI) company has branded Generative Threat Groups (GTGs), span state-sponsored groups, financially motivated criminals, commercial

AI 0/10
The Hacker News
اقرأ المزيد ←
Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA الأمن السيبراني

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

Cybercriminals are hijacking artificial intelligence (AI) user accounts via information stealer logs to create "stolen keys" that grant illicit access to tools from model providers like Google, Anthropic, and others. Information stealers like Lumma Stealer or Vidar are equipped to harvest a wide range of data from compromised systems. This can include credential, session tokens, and API

AI 0/10
The Hacker News
اقرأ المزيد ←
Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE الأمن السيبراني

Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE

A major vulnerability is disclosed. The alert lands immediately. Then comes the harder question: Are we actually exposed? For many security teams, answering that means jumping between vulnerability scanners, endpoint tools, cloud inventories, SBOMs, repositories, and application data to build enough context to act. As AI accelerates vulnerability discovery and research, that delay matters more

AI 0/10
The Hacker News
اقرأ المزيد ←
ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account الأمن السيبراني

ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account

Check Point Research said in a report published today that a single instruction planted in a ChatGPT conversation could cause ChatGPT to quietly work for an attacker while answering the user's question as usual. In the company's proof of concept, that hidden work read data from the user's connected Gmail account and passed it to a second ChatGPT account through a hidden channel

AI 0/10
The Hacker News
اقرأ المزيد ←