Aggregator

APT组织Lazarus 在Rootkit（获取内核权限）攻击中使用了微软的0day漏洞;APT组织Kimsuky利用软件公司产品安装程序进行伪装展开攻击;NoName057(16)组织DDoSia项目持续更新;

Что стоит за перебоями популярного мессенджера?

具透 | 精心细调更懂你：watchOS 11 中值得关注的更新 少数派编辑部 等 2 位作者 11:309 月 17 日凌晨，经过 WWDC24 首次亮相之后的数个版本的测试，iPhone、iPad

主站 分类 漏洞 工具 极客

守护智慧港口平稳运行！

黎巴嫩“BP机爆炸”引发关于网络安全及关基设施保护的深刻反思。

A vulnerability has been found in Solidweb Novus 1.0 and classified as problematic. This vulnerability affects unknown code of the file buscar.asp. The manipulation leads to cross site scripting. This vulnerability was named CVE-2007-5142. The attack can be initiated remotely. Furthermore, there is an exploit available.

The Coalition for Secure AI (CoSAI) has expanded its roster of members with the addition of threat intelligence management, collaboration, and response orchestration vendor Cyware.

以色列对黎巴嫩发动了史无前例可能也令人印象深刻的袭击。这事实上是一次恐怖袭击，不是针对性的而是无差别的攻击，有大量平民受到附带伤害。纽约时报援引匿名以色列军方官员的消息称，这次袭击确实是该

A botnet operated by the Chinese state-sponsored threat actor known as Flax Typhoon has been disrupted by the law enforcement agency and abandoned by the group, FBI Director Chris Wray confirmed on Wednesday. “We executed court-authorized operations to take control of the botnet’s infrastructure. When the bad guys realized what was happening, they tried to migrate their bots to new servers and even conducted a distributed denial-of-service attack against us,” he told the audience at … More →

The post FBI forced Flax Typhoon to abandon its botnet appeared first on Help Net Security.

A vulnerability, which was classified as problematic, was found in grafana-plugin-sdk-go Grafana Plugin SDK up to 0.249.0. Affected is an unknown function. The manipulation leads to insufficiently protected credentials. This vulnerability is traded as CVE-2024-8986. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Red Hat Enterprise Linux 6/7/8/9. This issue affects the function usb_ep_get of the file hw/net/core.c of the component QEMU. The manipulation leads to reachable assertion. The identification of this vulnerability is CVE-2024-8354. Local access is required to approach this attack. There is no exploit available.

A vulnerability classified as critical has been found in WAnewsletter 2.1.3. Affected is an unknown function of the file newsletter.php. The manipulation of the argument waroot leads to file inclusion. This vulnerability is traded as CVE-2007-2969. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A clever threat campaign is abusing GitHub repositories to distribute the Lumma Stealer password-stealing malware targeting users who frequent an open source project repository or are subscribed to email notifications from it. [...]

Veeam Backup & Replication未授权远程代码执行漏洞（CVE-2024-40711）

A Manchester law firm has filed a lawsuit against outsourcing giant Capita, representing nearly 8000 claimants who were affected by a cyber-attack in 2023

Cybersecurity in healthcare has never been more urgent. As the most vulnerable industry and largest target for cybercriminals, healthcare is facing an increasing wave of cyberattacks. When a hospital's systems are held hostage by ransomware, it’s not just data at risk — it’s the care of patients who depend on life-saving treatments. Imagine an attack that forces emergency care to halt, surgeries

A vulnerability has been found in EyeXam 1.4 and classified as critical. This vulnerability affects unknown code of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability was named CVE-2014-6854. The attack can only be done within the local network. There is no exploit available.

9月10日，苹果公司发布会以“ 高光时刻”为主题带来了多款新品。其中，Apple Intelligence作为iPhone16的核心宣传点，被称为史上第一台AI iPhone，库克兴奋的说道：“新iP

Как обычная функция стала кошмаром безопасности?