Aggregator

Инфракрасные лазеры на страже здоровья.

Editor’s note: The current article is authored by Anna Pham (also known as RussianPanda), a threat intelligence researcher. You can find her latest research and insights on X, LinkedIn, and her blog. ANY.RUN introduced Threat Intelligence Lookup in February 2024, followed by the YARA Search in April 2024. This article will explore both services and […]

The post TI Lookup: Real-World Use Cases <br>from a Malware Researcher appeared first on ANY.RUN's Cybersecurity Blog.

Attackers are actively exploiting CVE-2024-45519, a critical Zimbra vulnerability that allows them to execute arbitrary commands on vulnerable installations. Proofpoint’s threat researchers say that the attacks started on September 28 – several weeks after Zimbra developers released patches for CVE-2024-45519 and other flaws, and a day after ProjectDiscovery’s analysts published a detailed technical write-up about the vulnerability and a PoC exploit to demonstrate the potential for local exploitation. Other researchers have published PoCs on GitHub … More →

The post Critical Zimbra RCE vulnerability under mass exploitation (CVE-2024-45519) appeared first on Help Net Security.

Dynamic malware analysis is a key part of any threat investigation. It involves executing a sample of a malicious program in the isolated environment of a malware sandbox to monitor its behavior and gather actionable indicators. Effective analysis must be fast, in-depth, and precise. These five tools will help you achieve it with ease. 1. Interactivity Having the ability to interact with the

Крошечная машина с настоящим мозгом изменит будущее медицины.

AI Act General Purpose AI Rules to be Enforced in 2025
The European Commission appointed a 13 member team to draft the general purpose artificial intelligence code of practice mandated by the AI Act. The commission on Monday announced four working groups that will oversee drafting of the rules.

We are making progress on our mission to ensure that artificial general intelligence benefits all of humanity.

Three different organizations in the U.S. were targeted in August 2024 by a North Korean state-sponsored threat actor called Andariel as part of a likely financially motivated attack. "While the attackers didn't succeed in deploying ransomware on the networks of any of the organizations affected, it is likely that the attacks were financially motivated," Symantec, part of Broadcom, said in a

De Explosieven Opruimingsdienst Defensie heeft in het Utrechtse Bunnik een Britse 500-ponder onschadelijk gemaakt. Dat gebeurde door de ontsteker te verwijderen. De militaire specialisten brachten de vliegtuigbom uit de Tweede Wereldoorlog op de Leusderheide tot ontploffing. Een overzicht van Defensieoperaties in de week van 25 september tot en met 1 oktober 2024.  

Akamai раскрывает очередную брешь в системе печати UNIX.

Мессенджер сотрудничает с властями при наличии официальных запросов.

The third phase of Operation Cronos, which involved officers from the UK National Crime Agency (NCA), the FBI, Europol and other law enforcement agencies, has resulted in the arrest of four persons for allegedly participating in the LockBit ransomware-as-a-service operation in various roles. “A suspected developer of LockBit was arrested at the request of the French authorities, while the British authorities arrested two individuals for supporting the activity of a LockBit affiliate,” Europol announced on … More →

The post 4 new LockBit-related arrests, identities of suspected Evil Corp members, affiliates revealed appeared first on Help Net Security.

A recently discovered vulnerability in Bluetooth technology has raised significant security concerns. This flaw could allow hackers to intercept passcodes during the device pairing process, affecting a wide range of Bluetooth devices and potentially having far-reaching implications for users worldwide. The Vulnerability: CVE-2020-26558 The vulnerability, CVE-2020-26558, is found in devices supporting the Passkey Entry association […]

The post New Bluetooth Vulnerability Leak, Your Passcode to Hackers During Pairing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Журналы событий Windows знают гораздо больше, чем может показаться.

Threat actors attempt to exploit recently disclosed vulnerability CVE-2024-45519 in Synacor’s Zimbra Collaboration. Proofpoint cybersecurity researchers reported that threat actors are attempting to exploit a recently disclosed vulnerability, tracked as CVE-2024-45519, in Synacor’s Zimbra Collaboration. Starting on September 28, 2024, threat actors have been attempting to exploit the issue to achieve remote code execution on […]

Meta has announced a new information-sharing partnership with UK financial institutions to target social media fraud

Обычные пользователи рискуют стать невольными помощниками хакеров в проведении взлома.