Aggregator

为遏制空气污染引起的疾病，巴基斯坦旁遮普省（Punjab）禁止了大部分户外活动，下令部分地区的商店、市场和商场从周一起提前关闭。旁遮普省关闭了包括 Lahore 市在内地区的教育机构和公园、动物园等公共场所，这一临时措施将一直持续到 11 月 17 日。Lahore 是世界空气污染最严重的城市之一，周一的空气质量指数超过 600。政府称，Lahore、Multan、 Faisalabad 和 Gujranwala 等地区的呼吸系统疾病、眼部和咽喉刺激以及红眼病患者数量空前增加，“由于细菌或病毒感染、烟雾、灰尘或化学物质暴露而导致的结膜炎/红眼病的传播对公众健康构成了严重且迫在眉睫的威胁。”宗教仪式、以及药店、油库、奶制品店和水果蔬菜店等不受禁令限制。

Introduction Microsoft’s November 2024 Patch Tuesday addresses 87 vulnerabilities across its software suite, including critical zero-day vulnerabilities actively exploited in […]

The post Microsoft November 2024 Patch Tuesday- Critical Updates and Key Vulnerabilities appeared first on HawkEye.

A cyberattack on the parent company of several prominent U.S. supermarkets is causing issues at sto

朝鲜黑客正使用Flutter创建的木马应用来攻击苹果 macOS 系统，这些应用程序具有合法的苹果开发人员ID签名和公证。

Microsoft today released updates to plug at least 89 security holes in its Windows oper

In a critical security disclosure, it has been revealed that thousands of end-of-life (EOL) D-Link DSL-6740C routers are vulnerable to password change attacks. The vulnerability tracked as CVE-2024-11068 has been rated as critical by the TWCERT/CC, with an alarming CVSS score of 9.8. The affected routers, no longer supported by D-Link as of January 15, 2024, are […]

The post Thousands of EOL D-Link Routers Vulnerable to Password Change Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

许多CSO对其所在组织近期遭遇的安全事件原因可能一无所知，就算同样的网络攻击再来一遍，他们可能还是跟第一次一样 […]

新闻速览 •工信部：发展低空产业 安全是重要前提 •首届“数证杯”电子数据取证分析大赛报名启动 •新型勒索软件 […]

微软计划年底前停止支持 Windows 11 的 Mail、Calendar 和 People 应用，现有用户将转移到新的 Outlook for Windows 应用。Windows Mail、Calendar 和 People 应用的终止支持日期为 12 月 31 日。微软警告，停止支持后未转移到新 Outlook 的用户将无法再发送和接收电子邮件。新的 Outlook for Windows 应用于今年 8 月进入 GA 阶段，它也将最终取代桌面版 Outlook。对微软 Outlook 不感冒的用户也可以尝试开源替代 Thunderbird。

A vulnerability was found in Linux Kernel up to 6.7.1. It has been classified as problematic. Affected is the function thunderx_ocx_com_threaded_isr of the file drivers/edac/thunderx_edac.c of the component thunderx. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2023-52464. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 4.19/5.15.147/6.1.74/6.6.13/6.7.1 and classified as problematic. This vulnerability affects the function check_flow_keys_access of the component BPF. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2024-26589. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.6.13/6.7.1 and classified as critical. Affected by this vulnerability is the function pfn_hi of the component iommu. The manipulation leads to buffer overflow. This vulnerability is known as CVE-2023-52455. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.10.208/5.15.147/6.1.74/6.6.13/6.7.1. It has been declared as critical. This vulnerability affects the function is_spilled_reg of the component BPF. The manipulation leads to stack-based buffer overflow. This vulnerability was named CVE-2023-52462. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Fortinet FortiManager, FortiSwitchManager, FortiPAM, FortiProxy, FortiPortal and FortiOS. Affected is an unknown function of the component Packets Handler. The manipulation leads to missing authentication. This vulnerability is traded as CVE-2024-26011. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.