Aggregator

韩国政府数据中心发生火灾

Solidot
8 months 3 weeks ago
韩国国家数据中心国家信息资源管理院于 9 月 26 日发生了一机房 UPS 锂电池组在搬运期间起火的事故，火情在约 22 小时后才扑灭，事故导致韩国大批政府和公共机构信息系统停运。因此次事故停摆的信息系统共 647 个，其中 96 个系统遭火灾损毁，551 个被人为关闭以防数据丢失。96 个损毁的系统将迁移至大邱分中心重建，预计耗时约四周，受直接影响的系统包括了韩国政府信访平台“国民申闻鼓”、国家法令信息中心、反恐中心官网、跨政府数据分析系统、政策简报官网等国家一级核心行政系统。其余未受直接影响的系统正陆续恢复。10 月 3 日上午，政府电算网故障应急处置负责人跳楼身亡，原因未知，初步判断是自杀，死者未因为火灾而列为调查对象。

Scattered LAPSUS$ Hunters Announced Salesforce Breach List On New Onion Site

Cyber Security News
8 months 3 weeks ago

A cybercrime collective known as Scattered LAPSUS$ Hunters has launched a new data leak site on the dark web, claiming it holds nearly one billion records from Salesforce customers. The group is orchestrating a widespread blackmail campaign, setting a ransom deadline of October 10, 2025. They have threatened to publish sensitive data and technical details […]

The post Scattered LAPSUS$ Hunters Announced Salesforce Breach List On New Onion Site appeared first on Cyber Security News.

Cyber Advisory

CVE-2025-55971 | TCL 65C655 Smart TV V8-R75PT01-LF1V269.001116 UPnP MediaRenderer Service server-side request forgery

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability described as critical has been identified in TCL 65C655 Smart TV V8-R75PT01-LF1V269.001116. This vulnerability affects unknown code of the component UPnP MediaRenderer Service. Such manipulation leads to server-side request forgery. This vulnerability is uniquely identified as CVE-2025-55971. The attack can be launched remotely. No exploit exists.
vuldb.com

CVE-2025-43400

CVE Trends
8 months 3 weeks ago
Currently trending CVE - Hype Score: 1 - An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, macOS Sequoia 15.7.1, visionOS 26.0.1, iOS 26.0.1 and iPadOS 26.0.1, iOS 18.7.1 and iPadOS 18.7.1. Processing a maliciously crafted font may ...

CVE-2024-3400

CVE Trends
8 months 3 weeks ago
Currently trending CVE - Hype Score: 1 - A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root ...

CVE-2025-57423 | MyClub 0.5 GET Request /articles sql injection

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability labeled as critical has been found in MyClub 0.5. Affected by this issue is some unknown functionality of the file /articles of the component GET Request Handler. The manipulation of the argument Content/GroupName/PersonName/lastUpdate/pool/title results in sql injection. This vulnerability is known as CVE-2025-57423. It is possible to launch the attack remotely. No exploit is available.
vuldb.com

CVE-2025-34226 | Autonomy Logic OpenPLC Runtime /upload-program-action epoch_time resource control

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability identified as critical has been detected in Autonomy Logic OpenPLC Runtime. Affected by this vulnerability is an unknown functionality of the file /upload-program-action. The manipulation of the argument epoch_time leads to improper control of resource through lifetime. This vulnerability is traded as CVE-2025-34226. It is possible to initiate the attack remotely. There is no exploit available. Applying a patch is the recommended action to fix this issue.
vuldb.com

CVE-2025-60787 | MotionEye up to 0.43.1b4 Configuration File image_file_name os command injection

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability categorized as critical has been discovered in MotionEye up to 0.43.1b4. Affected is an unknown function of the component Configuration File Handler. Executing manipulation of the argument image_file_name can lead to os command injection. This vulnerability appears as CVE-2025-60787. The attack may be performed from remote. There is no available exploit.
vuldb.com

Akira

Dark Feed IO
8 months 3 weeks ago

You must login to view this content

cohenido

Renault UK Suffers Cyberattack – Hackers Stolen Users Customers Personal Data

Cyber Security News
8 months 3 weeks ago

Renault UK has notified customers of a data breach after a cyberattack on one of its third-party service providers resulted in the theft of personal information. The company has assured its clients that its own internal systems were not compromised and that no financial data was exposed. Renault UK began sending emails to affected drivers […]

The post Renault UK Suffers Cyberattack – Hackers Stolen Users Customers Personal Data appeared first on Cyber Security News.

Guru Baran

Managed ad