Aggregator

From May 1 to July 31, 2024, ReliaQuest analyzed customer incident data and cybercriminal forums to identify common MITRE ATT&CK TTPs and gather additional intelligence.

From May 1 to July 31, 2024, ReliaQuest analyzed customer incident data and cybercriminal forums to identify common MITRE ATT&CK TTPs and gather additional intelligence.

Vulnerability / CybercrimeThe Russia-aligned threat actor known as RomCom has been linked to the z

A vulnerability was found in ProfilePress Plugin up to 4.15.18 on WordPress. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2024-11083. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Otter Blocks Plugin up to 3.0.6 on WordPress. It has been declared as critical. This vulnerability affects unknown code of the component Image View. The manipulation leads to path traversal. This vulnerability was named CVE-2024-11219. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in TCPDF up to 6.7.5. It has been classified as problematic. This affects an unknown part. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2024-51058. The attack can only be initiated within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in smub Sugar Calendar Plugin up to 3.3.0 on WordPress and classified as problematic. Affected by this issue is the function add_query_arg/remove_query_arg. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-10878. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in gRPC-C++ up to 1.66.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument GRPC_ARG_TCP_TX_ZEROCOPY_ENABLED leads to incorrect calculation. This vulnerability is known as CVE-2024-11407. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

Commandant der Strijdkrachten generaal Onno Eichelsheim heeft vanmiddag namens de krijgsmacht de Carnegie Wateler Vredesprijs in ontvangst genomen. De krijgsmacht krijgt de vredesprijs voor alle inzetten in meer dan 80 vredesmissies ter wereld.

聚焦源代码安全，网罗国内外最新资讯！编译：代码卫士供应链管理公司 Blue Yonder 提醒称，一起勒索攻击对其服务造成重大破坏，导致位于英国的百货商店连锁服务中断。Blue Yonder（此前名

聚焦源代码安全，网罗国内外最新资讯！编译：代码卫士QNAP 在上周末发布安全通告，修复了多个漏洞，其中包括三个严重漏洞，用户应尽快予以修复。从 QNAP Notes Station 3（该公司NAS

The China-linked threat actor known as Earth Estries has been observed using a previously undocumen

The source code of Banshee Stealer leaked online Pierluigi Paga

via the comic humor & dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘D Combinatorics’ appeared first on Security Boulevard.

EnergyWeaponUser is Allegedly Selling Access of an Unidentified Electronics Company in Taiwan

Новое стелс-покрытие толщиной с бумагу.

Исследование раскрывает, как мозг адаптировался к стрессу и токсинам.

Malwarebytes' Black Friday 2024 deals are now live, offering a 50% discount for one and two-year subscriptions to personal, family, and business subscriptions to its standalone anti-malware software, VPN, and Personal Data Remover services. [...]

A Threat Actor Claims to be Selling a 0-day Exploit for Android