Aggregator

[This is a Guest Diary by Joshua Tyrrell, an ISC intern as part of the SANS.edu BACS program]Mana

Hackers interested in targeting OnlyFans users have themselves been singled out by an infostealing campaign

万象AI，安全新生！CCS2024总日程。

Киберугрозы затрагивают критическую инфраструктуру и национальную безопасность РФ.

综述CVE-2024-30051 该漏洞最早由卡巴斯基发现，但是最初卡巴发现的并不是在野样本，而是该漏洞的简

A vulnerability has been found in KBO sports2i 2014 5.1.00 and classified as critical. This vulnerability affects unknown code of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability was named CVE-2014-5890. The attack can only be initiated within the local network. There is no exploit available.

赛制大公开，文末送好礼

Новый инструмент для тех, кто устал переставлять окна вручную.

Инструмент для Red Team превратился в мощное средство для скрытных атак по всему миру.

CVE-2024-30051漏洞最早由卡巴斯基发现，根据最初上传到VT的该漏洞的简单分析报告，我们通过该报告中漏洞的特征，找到了QakBot利用的实际样本并对其进行了详细分析。

Recently, multiple high-severity vulnerabilities were discovered in Intel Microcode that could potentially lead to privilege escalation. Canonical, the organization behind Ubuntu, has acted swiftly by releasing security updates to address these vulnerabilities. This article explores the details of these vulnerabilities and offers essential guidance on safeguarding your Ubuntu systems.   Overview of Intel Microcode Vulnerabilities […]

The post High-Severity Intel Microcode Vulnerabilities Fixed in Ubuntu appeared first on TuxCare.

The post High-Severity Intel Microcode Vulnerabilities Fixed in Ubuntu appeared first on Security Boulevard.

A vulnerability was found in WebKalk2 1.9.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file engine/engine.inc.php. The manipulation of the argument absolute_path leads to file inclusion. This vulnerability is handled as CVE-2007-2307. The attack may be launched remotely. Furthermore, there is an exploit available.

macOS后门，以中国钉钉和微信用户为目标的HZRat后门攻击场景复现及木马检测方法

方正畅享新闻采编系统 binary.do SQL注入漏洞分析复现

缓存投毒之CPDOS

A vulnerability was found in mxBB Mx Shotcast 1.0 Rc2 and classified as critical. Affected by this issue is some unknown functionality of the file getinfo1.php. The manipulation of the argument mx_root_path leads to file inclusion. This vulnerability is handled as CVE-2007-2313. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in androidforums Forum For Android 2.4.4.9. This affects an unknown part of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is uniquely identified as CVE-2014-5889. The attack can only be done within the local network. There is no exploit available.

美国第二巡回上诉法院维持了 Hachette v. Internet Archive 一案的原判决，裁定互联网档案馆的数字借阅项目侵犯了版权法，驳回了互联网档案馆所持的论点——即借阅行为受到了合理使用原则的保护。因新冠疫情导致了图书馆关闭，互联网档案馆于 2020 年 3 月启动了 National Emergency Library 项目，向困住家中的民众大批量提供电子书的数字借阅服务，不再限制一本电子书一次只借给一个人。该项目立即遭到了出版商和作家的反对。互联网档案馆后来恢复了借阅限制。2020 年 6 月，主要出版商 Hachette、HarperCollins、Penguin Random House 和 Wiley 提起了侵权诉讼。2023 年 3 月，地方法院裁定出版商胜诉。互联网档案馆提起上诉，现在上诉法院再次做出了不利于它的判决。