Aggregator

In this new report, learn how threat actors are leveraging cloud services to target web services with ransomware attackers.

The post The State of Cloud Ransomware in 2024 appeared first on SentinelOne.

智能代码助手文心快码升级至3.0版本，现场王海峰进一步演示了文心快码完成系统的功能开发、代码测试和问题修复等能力。

A vulnerability was found in Linux Kernel up to 6.10.8. It has been classified as critical. This affects an unknown part of the component AMD Display. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2024-47661. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.111/6.6.52/6.10.11. It has been rated as problematic. This issue affects the function iwl_trans_wait_tx_queues_empty of the component iwlwifi. The manipulation leads to Privilege Escalation. The identification of this vulnerability is CVE-2024-47672. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.111/6.6.52/6.10.11. It has been classified as problematic. Affected is the function iwl_trans_send_cmd of the file drivers/net/wireless/intel/iwlwifi/iwl-trans.c. The manipulation leads to state issue. This vulnerability is traded as CVE-2024-47673. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.6.50/6.10.9. Affected by this vulnerability is the function hisi_calc_effective_speed of the component hisi-kunpeng. The manipulation leads to divide by zero. This vulnerability is known as CVE-2024-47664. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.10.9. This affects the function btrfs_lookup_extent_info. The manipulation leads to Privilege Escalation. This vulnerability is uniquely identified as CVE-2024-46841. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.10.9. This issue affects some unknown processing of the component ethtool. The manipulation leads to out-of-bounds read. The identification of this vulnerability is CVE-2024-46834. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

Осенние соревнования пройдут в онлайн-формате с 26 по 29 ноября.

主站 分类 漏洞 工具 极客

Steam 客户端最新更新停止了对 Windows 7 和 Windows 8 的支持。此举并不出人意料，微软早已停止支持这些旧版本 Windows，而 Valve 提前了两年向客户通知了它的计划。Steam 现在只支持 Windows 10、Windows 11、Linux 和 macOS。根据 10 月的 Steam 硬件调查，只有 0.28% 的 Windows 玩家运行 Windows 7，而运行 Windows 8 和 Windows 8.1 的玩家人数则更少。

Google has once again raised the bar for mobile security by introducing two new AI-powered real-time protection features for Android users. With a strong commitment to user privacy and safety, these innovative tools aim to shield users from scams, fraud, malware, and dangerous apps, all while ensuring that users remain in control of their data. […]

The post Google Unveils New Intelligent, Real-Time Protections for Android Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability classified as problematic has been found in VaeMendis Ubooquity up to 2.1.4. Affected is an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2024-47914. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in VaeMendis Ubooquity up to 2.1.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2024-47915. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Boa. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability was named CVE-2024-47916. The attack can be initiated remotely. There is no exploit available. It is recommended to replace the affected component with an alternative.

Французский трейдер сорвал куш, а агенты ФБР пришли к американцу.

第六届数字发展论坛丨梆梆安全获国家级特色案例 日期：2024年11月14日 阅：23

Check Point

梆梆安全成为中国网络空间安全协会智能网联安全专业委员会首批成员单位 日期：2024年11月14日 阅：25

互动有礼 | 权威研究报告《中国互联网站与移动应用现状及其安全报告（2024）》发布 日期：2024年11月14日 阅：21