Aggregator

CVE-2024-38603 | Linux Kernel up to 6.1.92/6.6.32/6.8.11/6.9.2 hns3 devm_add_action_or_reset memory leak (WID-SEC-2024-1418)

8 months 3 weeks ago

A vulnerability classified as critical was found in Linux Kernel up to 6.1.92/6.6.32/6.8.11/6.9.2. This affects the function devm_add_action_or_reset of the component hns3. Executing manipulation can lead to memory leak. This vulnerability is handled as CVE-2024-38603. The attack can only be done within the local network. There is not any exploit available. Upgrading the affected component is advised.

vuldb.com

CVE-2024-38604 | Linux Kernel up to 6.6.32/6.8.11/6.9.2 blkdev_iomap_begin buffer overflow (WID-SEC-2024-1418)

Vuldb Updates

8 months 3 weeks ago

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.32/6.8.11/6.9.2. This vulnerability affects the function blkdev_iomap_begin. The manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2024-38604. The attack can only be initiated within the local network. No exploit exists. It is advisable to upgrade the affected component.

vuldb.com

CVE-2024-38605 | Linux Kernel up to 6.9.2 ALSA null pointer dereference (Nessus ID 207738 / WID-SEC-2024-1418)

Vuldb Updates

8 months 3 weeks ago

A vulnerability was found in Linux Kernel up to 6.9.2 and classified as critical. The affected element is an unknown function of the component ALSA. Such manipulation leads to null pointer dereference. This vulnerability is referenced as CVE-2024-38605. The attack needs to be initiated within the local network. No exploit is available. It is suggested to upgrade the affected component.

vuldb.com

CVE-2024-38602 | Linux Kernel up to 6.1.92/6.6.32/6.8.11/6.9.2 ax25_addr_ax25dev reference count (Nessus ID 207884 / WID-SEC-2024-1418)

Vuldb Updates

8 months 3 weeks ago

A vulnerability classified as critical has been found in Linux Kernel up to 6.1.92/6.6.32/6.8.11/6.9.2. Affected by this issue is the function ax25_addr_ax25dev. Performing manipulation results in improper update of reference count. This vulnerability is known as CVE-2024-38602. Access to the local network is required for this attack. No exploit is available. It is recommended to upgrade the affected component.

vuldb.com

Microsoft to Disable Inline SVG Images Display to Outlook for Web and Windows Users

Cyber Security News

8 months 3 weeks ago

Microsoft has announced a significant security enhancement for Outlook users, implementing the retirement of inline SVG image support across Outlook for Web and the new Outlook for Windows platforms. This change represents a proactive measure to strengthen email security infrastructure and protect users from potential cybersecurity threats. The rollout timeline has been strategically structured to […]

The post Microsoft to Disable Inline SVG Images Display to Outlook for Web and Windows Users appeared first on Cyber Security News.

Florence Nightingale

评论 | 弹窗广告为何成了“打不死的小强”？

中国信息安全

8 months 3 weeks ago

弹窗广告乱象早已不是什么新鲜话题，但新闻媒体近日披露的调查结果依然令人震惊。

专家解读｜从风险清单到治理体系：人工智能安全治理框架的演进逻辑分析

中国信息安全

8 months 3 weeks ago

为应对AI快速发展带来的新风险、新挑战，有关部门和机构及时跟踪风险变化、调整风险分类、探索风险分级方法并动态更新防范措施，制定了《框架》2.0版。本文将从“提升”和“逻辑与意义”两个层面，对比解读新版框架的关键改进及其背后的深意。

专题·反电诈 | 监管视域下电信企业反诈核验处置义务辨析

中国信息安全

8 months 3 weeks ago

本文以《反电信网络诈骗法》为主线，梳理电信企业履行反诈义务的总体规定和核验处置过程中引发争议的情形，在此基础上对电信企业采取的核验处置措施的合法合理性进行剖析，并提出完善工作的建议。

第134篇：揭秘美国NSA数字网络情报分析体系的关键组件Pinwale

希潭实验室

8 months 3 weeks ago

Italy’s AI Law Comes Into Force

不安全

8 months 3 weeks ago

意大利将于2025年10月10日率先实施全国性人工智能法律，成为欧盟首个采取此类措施的国家。该法律设定了以人为本的AI治理框架，包括透明度、隐私和安全原则，并指定监管机构监督执行。同时引入刑事处罚以应对AI滥用，并加强儿童保护措施。

Italy’s AI Law Comes Into Force

Security Boulevard

8 months 3 weeks ago

On October 10, 2025, Italy will become the first EU member state to bring a national artificial intelligence law into force, moving ahead of the bloc’s landmark EU AI Act. Law No. 132 of 2025, published in the Gazzetta Ufficiale in late September, positions Italy at the center of Europe’s evolving AI governance landscape. The […]

The post Italy’s AI Law Comes Into Force appeared first on Centraleyes.

The post Italy’s AI Law Comes Into Force appeared first on Security Boulevard.

Rebecca Kappel

know a person's full name

不安全

8 months 3 weeks ago

某人已掌握某人的电话号码、地址和出生日期，但希望获取其全名，并在HowToHack社区寻求帮助。该社区是一个开放的黑客社区，旨在帮助新手成长为资深人士。

Red, Blue, Purple in Offensive Security

不安全

8 months 3 weeks ago

这篇文章探讨了企业中红队（Red Team）、蓝队（Blue Team）和紫队（Purple Team）之间的关系及挑战。作为红队成员，作者指出在公司环境中很难保持纯粹的攻击性思维；红队的工作往往更偏向防御和协作（ Purple 或 Indigo）。作者强调持续学习和创造机会进行真正“红色”工作的必要性，并认为只有深入理解 Red 的本质才能实现 Purple 的平衡。