Aggregator

近日，德国联邦司法部起草了一项法律，目的在于为白帽黑客提供法律保护，白帽黑客在检测并弥补IT安全漏洞时的行为将不再承担刑事责任，也不会面临被起诉的风险。关注此类消息的朋友应该知道，德国不是第一个立法保护白帽黑客的国家，2022年美国司法部就对《计算机欺诈和滥用法》（CFAA）进行了修订，明确指出网络安全研究人员，即白帽黑客有着“改善技术”的良好愿景，因此司法部门将不再以CFAA的名义起诉他们；20

A vulnerability was found in Google Android 8/8.1/9 and classified as critical. This issue affects the function decrypt of the file ClearKeyCasPlugin.cpp. The manipulation leads to out-of-bounds write. The identification of this vulnerability is CVE-2018-9411. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

Russian Phobos ransomware operator faces cybercrime charges Pie

Хизер Морган закопала золото, но не зарыла следы.

A vulnerability has been found in Google Android 6/6.0.1/7 and classified as critical. This vulnerability affects the function ArrayConcatVisitor of the file builtins-array.cc. The manipulation leads to type confusion. This vulnerability was named CVE-2018-9433. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as problematic, was found in Google Andrioid 6/6.0.1/7/8/8.1. This affects the function smp_data_received of the file smp_l2c.cc. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2018-9365. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as problematic, has been found in Ganglia-web 3.73/3.74/3.75. Affected by this issue is some unknown functionality of the file /graph_all_periods.php. The manipulation of the argument g leads to cross site scripting. This vulnerability is handled as CVE-2024-52763. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic was found in Ganglia-web 3.73/3.74/3.75. Affected by this vulnerability is an unknown functionality of the file /master/header.php. The manipulation of the argument tz leads to cross site scripting. This vulnerability is known as CVE-2024-52762. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Google Android 6/6.0.1/7/8/8.1. Affected is the function writeInplace of the file Parcel.cpp. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2018-9421. Local access is required to approach this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Apple macOS on Intel. It has been classified as critical. This affects an unknown part of the component Cookie Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-44309. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple iOS and iPadOS on Intel. It has been declared as critical. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-44309. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple visionOS on Intel. It has been rated as critical. This issue affects some unknown processing of the component Cookie Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-44309. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple Safari on Intel and classified as critical. Affected by this issue is some unknown functionality of the component Cookie Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-44309. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Apple macOS on Intel. This issue affects some unknown processing of the component Web Content Handler. The manipulation leads to Remote Code Execution. The identification of this vulnerability is CVE-2024-44308. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Apple iOS and iPadOS on Intel. Affected is an unknown function of the component Web Content Handler. The manipulation leads to Remote Code Execution. This vulnerability is traded as CVE-2024-44308. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Apple visionOS on Intel and classified as critical. Affected by this vulnerability is an unknown functionality of the component Web Content Handler. The manipulation leads to Remote Code Execution. This vulnerability is known as CVE-2024-44308. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Apple Safari on Intel. This vulnerability affects unknown code of the component Web Content Handler. The manipulation leads to Remote Code Execution. This vulnerability was named CVE-2024-44308. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

Любительский эксперимент превратился в исследование редких цветов и создание новых оттенков.

孩子两岁之后，就可以在日常生活中，有意识地规划，提升孩子专注力​。

Sekoia的威胁检测与研究（TDR）团队发现了Helldown勒索软件的Linux变种，扩大了威胁范围。 Helldown 勒索软件组织以前以针对 Windows 系统而闻名，现在已将其活动范围扩大到 Linux 机器。Sekoia的威胁检测与研究（TDR）团队发现了这一新情况，他们在一条推特上提到了针对Linux系统的Helldown勒索软件的Linux变种。 Helldown 是勒索软件领域的一个相对较新的成员，于 2024 年 8 月首次出现，目前已在美国和欧洲造成 31 名受害者，其中包括 Zyxel 的欧洲子公司。该组织采用双重勒索策略，在加密文件之前先渗出敏感数据，并威胁说如果不支付赎金，就会公布窃取的信息。 Sekoia 已将几起 Helldown 攻击与 Zyxel 防火墙的漏洞联系起来。一个名为 CVE-2024-42057 的关键漏洞允许未经身份验证的代码执行，已被确定为该组织的一个可能入口点。值得注意的是 受攻击的防火墙被发现带有恶意用户账户和有效载荷，如从俄罗斯 IP 上传的 zzz1.conf 文件。 利用漏洞，攻击者可以进一步进入网络，使用高级端口扫描器等工具和命令来瘫痪防御系统 Helldown 的勒索软件以 Windows 和 Linux 系统为目标，具有独特的有效载荷： Windows 勒索软件： 采用阴影副本删除、进程终止和加密。被攻击的系统上会留下一份赎金说明 ReadMe.[encrypt_extension].txt。 Linux 勒索软件： 主要针对 VMware ESX 服务器。它会杀死虚拟机，用 RSA 加密密钥加密文件，并将密钥附加到加密文件中，只能用攻击者的私人密钥解密。 Helldown 通过渗出大量数据进行双重勒索–每个受害者的数据量从 22GB 到 431GB。被盗数据通常包括 PDF 和扫描文档，可能来自网络文件共享驱动器或 NAS 系统。 Helldown 的行为和工具与 Darkrace 和 Donex 有相似之处，两者都源自泄露的 LockBit 3 代码库。不过，这些组织之间尚未建立明确的联系。     转自安全客，原文链接：https://www.anquanke.com/post/id/302006 封面来源于网络，如有侵权请联系删除