Aggregator

Sophos discovers the threat actors behind RansomHub ransomware using EDRKillShifter in attacks

The phishing attack uses infostealer malware to target saved passwords, credit cards & Bitcoin info

今日暂未更新资讯~
更多最新文章，请访问SecWiki

旧金山停车场的 Waymo 无人驾驶汽车被发现存在奇怪的 bug，它们彼此会反复的鸣笛，干扰了附近居民的睡眠和日常生活。鸣笛的现象是随机发生的，有多名居民为此投诉。当地居民 Randol White 表示在凌晨四点被汽车的鸣笛声惊醒，另一名居民 Russell Pofsky 表示，过去两周被惊醒的次数超过了过去二十年的总和。Waymo 发表声明承认汽车有故障，表示已经确定了原因正在进行修复。

A vulnerability was found in MStore API Plugin up to 4.15.2 on WordPress. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper authentication. This vulnerability is known as CVE-2024-7628. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in Zephyr Project Manager Plugin up to 3.3.101 on WordPress. It has been classified as critical. Affected is an unknown function. The manipulation leads to improper authentication. This vulnerability is traded as CVE-2024-7624. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Insert PHP Code Snippet Plugin up to 1.3.6 on WordPress and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The identification of this vulnerability is CVE-2024-7420. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in Adobe Acrobat Reader up to 20.005.30636/24.002.20965/24.002.20964/24.001.30123 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to time-of-check time-of-use. This vulnerability was named CVE-2024-39425. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Adobe InDesign Desktop up to 18.5.2/19.4. This affects an unknown part. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2024-41866. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

News of a major data breach that could affect nearly three billion records comes to light from a somewhat unusual...

The post Data Breach Exposes 3 Billion Personal Information Records appeared first on McAfee Blog.

A vulnerability, which was classified as critical, has been found in Adobe Acrobat Reader up to 20.005.30636/24.002.20965/24.002.20964/24.001.30123. Affected by this issue is some unknown functionality. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2024-39426. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Adobe InDesign Desktop up to 18.5.2/19.4. Affected by this vulnerability is an unknown functionality. The manipulation leads to null pointer dereference. This vulnerability is known as CVE-2024-39395. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Adobe InDesign Desktop up to 18.5.2/19.4. Affected is an unknown function. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2024-39393. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe InDesign Desktop up to 18.5.2/19.4. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to heap-based buffer overflow. The identification of this vulnerability is CVE-2024-41853. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe InDesign Desktop up to 18.5.2/19.4. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to stack-based buffer overflow. This vulnerability was named CVE-2024-41852. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe InDesign Desktop up to 18.5.2/19.4. It has been classified as critical. This affects an unknown part. The manipulation leads to integer overflow. This vulnerability is uniquely identified as CVE-2024-41851. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe InDesign Desktop up to 18.5.2/19.4 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to heap-based buffer overflow. This vulnerability is handled as CVE-2024-41850. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Adobe Bridge up to 13.0.8/14.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to out-of-bounds write. This vulnerability is known as CVE-2024-41840. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Adobe Acrobat Reader up to 20.005.30636/24.002.20965/24.002.20964/24.001.30123. Affected is an unknown function. The manipulation leads to use after free. This vulnerability is traded as CVE-2024-41831. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Adobe Acrobat Reader up to 20.005.30636/24.002.20965/24.002.20964/24.001.30123. This issue affects some unknown processing. The manipulation leads to use after free. The identification of this vulnerability is CVE-2024-41830. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.