Aggregator

For the latest discoveries in cyber research for the week of 26th August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES California-based Patelco Credit Union has confirmed a data breach following a ransomware attack resulted in the exposure of sensitive personal information belongs to 726K clients and employees. The compromised data includes names, […]

The post 2nd September – Threat Intelligence Report appeared first on Check Point Research.

·政策 自由贸易试验区数据出境负面清单管理办法、负面清单（2024版） ·报告 《中国网络安全市场十大创新方向》 ·标准 《网络安全技术 安全技术 网络安全 第7部分：网络虚拟化安全》征求意见稿 《数据安全技术 二手电子产品信息清除技术要求》 《网络安全技术　网络安全试验平台　体系架构》 《网络安全技术 网络空间安全图谱要素表示要求》

安全419将带来2024 CCS独家报道，敬请期待！

2024羊城杯wp-AI AK篇

A vulnerability has been found in Oracle Communications Diameter Signaling Router up to 8.5.0.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the component API Gateway. The manipulation leads to information disclosure. This vulnerability is known as CVE-2021-34429. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

数据备份的国产化替代如何安全又高效？

A vulnerability classified as critical was found in Zoho WebNMS Framework 5.2/5.2 SP1. Affected by this vulnerability is an unknown functionality of the component HTTP Header Handler. The manipulation of the argument UserName leads to improper input validation. This vulnerability is known as CVE-2016-6603. The attack can be launched remotely. Furthermore, there is an exploit available.

Google раскрыла шпионаж в правительственных сетях с хитрым способом заражения.

8月25日，在中国信息安全测评中心的指导下，由广东省网络空间安全产业创新联合会主办、广州锦行网络科技有限公司承办的2024第一届青马红客“精英训练营”顺利结营

Миллионы бразильцев остались без платформы.

КНДР нашла очередной способ заработка криптовалюты, проникая в сердце систем.

全国首创！朝阳用安全大模型做政务网络安全保障了

A vulnerability was found in SolidWorks Desktop up to 2023. It has been rated as critical. This issue affects some unknown processing of the component DWG File Handler. The manipulation leads to use after free. The identification of this vulnerability is CVE-2023-2763. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as critical has been found in Dassault Systèmes eDrawings up to 2023/2024. This affects an unknown part of the component File Handler. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2024-1847. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability has been found in Dassault Systèmes SOLIDWORKS Desktop 2024/2024 SP1 and classified as critical. Affected by this vulnerability is an unknown functionality of the component File Handler. The manipulation leads to use after free. This vulnerability is known as CVE-2024-1848. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability was found in MediaTek MT6765, MT6768, MT6779, MT6785, MT8385, MT8666, MT8667, MT8766, MT8768, MT8781, MT8788 and MT8789. It has been rated as critical. Affected by this issue is some unknown functionality of the component Vdec. The manipulation leads to out-of-bounds write. This vulnerability is handled as CVE-2024-20086. The attack needs to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical has been found in MediaTek MT6765, MT6768, MT6779, MT6785, MT8385, MT8666, MT8667, MT8766, MT8768, MT8781, MT8788 and MT8789. This affects an unknown part of the component Vdec. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2024-20087. An attack has to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in Linen and classified as problematic. Affected by this vulnerability is an unknown functionality of the file apps/web/pages/api/forgot-password/index.ts of the component Setting Handler. The manipulation leads to Privilege Escalation. This vulnerability is known as CVE-2024-45522. Access to the local network is required for this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as problematic, has been found in Linen. Affected by this issue is some unknown functionality of the component Setting Handler. The manipulation leads to Privilege Escalation. This vulnerability is handled as CVE-2024-45522. Access to the local network is required for this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.

VioHawk是一个通过危险程度引导的仿真测试工具，专门用于检测自动驾驶系统（ADS）的交通违规行为。