Aggregator

Suspected Russian hackers were caught exploiting a recently patched Windows vulnerability as a zero-day in ongoing attacks targeting Ukrainian entities. [...]

A vulnerability, which was classified as critical, has been found in Intel Binary Configuration Tool Software 3.4.4 on Windows. Affected by this issue is some unknown functionality. The manipulation leads to uncontrolled search path. This vulnerability is handled as CVE-2024-23312. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Intel Xeon. Affected by this vulnerability is an unknown functionality of the component SGX. The manipulation leads to improper sanitization of custom special characters. This vulnerability is known as CVE-2024-23918. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability classified as critical has been found in Intel Xeon. Affected is an unknown function of the component SGX. The manipulation leads to incorrect default permissions. This vulnerability is traded as CVE-2024-21820. Attacking locally is a requirement. There is no exploit available.

A vulnerability was found in Intel PROSet, Wireless Software and Killer Wi-Fi. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to improper initialization. The identification of this vulnerability is CVE-2024-25563. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Intel TDX Seamldr Module Software. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to sensitive information in resource not removed before reuse. This vulnerability was named CVE-2024-21850. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Intel PROSet, Wireless Software and Killer Wi-Fi. It has been classified as problematic. This affects an unknown part. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2024-28049. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Intel Wireless Bluetooth up to 23.20 on Windows and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to denial of service. This vulnerability is handled as CVE-2024-24984. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

Get ready for holiday 2024 bot attacks. Learn how adversaries are targeting eCommerce to disrupt sales and what you can do to protect revenue and customer trust.

The post Top Bot Attack Predictions for Holiday Sales 2024 appeared first on Security Boulevard.

A vulnerability has been found in Intel PROSet, Wireless Software and Intel Killer Wi-Fi and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to denial of service. This vulnerability is known as CVE-2024-23198. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in YugabyteDB Anywhere. Affected is an unknown function of the component LDAP BIND Password Handler. The manipulation leads to sensitive information in log files. This vulnerability is traded as CVE-2024-11193. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A Threat Actor is Selling Access of Banco de Bolivia

The shift to cloud means securing your organization's digital assets requires a proactive, multilayered approach.

A Threat Actor is Allegedly Selling Access to Pazomat - Of Paz Oil Company LTD

The group seeks out aerospace professionals by impersonating job recruiters — a demographic it has targeted in the past as well — then deploys the SlugResin backdoor malware.

A vulnerability classified as problematic was found in Linux Kernel up to 6.8.8. This vulnerability affects the function its_vpe_irq_domain_alloc. The manipulation leads to double free. This vulnerability was named CVE-2024-35847. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A Threat Actor is Allegedly Selling VPN Access to an Unidentified Canadian Company