Aggregator

By understanding the unique challenges of protecting IoT and OT devices, organizations can safeguard these critical assets against evolving cyber threats.

译文 | 百舸争流，能者自渡：本地大语言模型（LLM）那些事

Where to Start

A Threat Actor is Allegedly Selling a Blind XSS Vulnerability to an E-Commerce Website

Cybersecurity researchers have released a proof-of-concept (PoC) exploit that strings together a now-patched critical security flaw impacting Mitel MiCollab with an arbitrary file read zero-day, granting an attacker the ability to access files from susceptible instances. The critical vulnerability in question is CVE-2024-41713 (CVSS score: 9.8), which relates to a case of insufficient input

Europol on Thursday announced the shutdown of a clearnet marketplace called Manson Market that facilitated online fraud on a large scale. The operation, led by German authorities, has resulted in the seizure of more than 50 servers associated with the service and the arrest of two suspects. More than 200 terabytes of digital evidence have been collected. In addition, over 80 data storage devices

A Threat Actor Claims to be Selling RDP Access to an Unidentified Organization in India

A Threat Actor Claims to be Selling Data from a Mexican peer-to-peer Lending and Credit Management Application

英文维基百科 2024 年最受欢迎文章

A vulnerability, which was classified as problematic, has been found in CyberPanel. This issue affects the function restartMySQL. The manipulation leads to denial of service. The identification of this vulnerability is CVE-2024-54679. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical was found in SonicWall SMA100 up to 10.2.1.13-72sv. This vulnerability affects unknown code of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. This vulnerability was named CVE-2024-45318. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in SonicWall SMA100 up to 10.2.1.13-72sv. This affects an unknown part. The manipulation leads to cryptographically weak prng. This vulnerability is uniquely identified as CVE-2024-53702. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in SonicWall SMA100 up to 10.2.1.13-72sv. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to hard-coded credentials. This vulnerability is handled as CVE-2024-45319. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in SonicWall SMA100 up to 10.2.1.13-72sv. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to heap-based buffer overflow. This vulnerability is known as CVE-2024-40763. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Documenso SaaS and Hosted. It has been classified as problematic. Affected is an unknown function. The manipulation leads to clickjacking. This vulnerability is traded as CVE-2024-52271. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in SonicWall SMA100 up to 10.2.1.13-72sv and classified as critical. This issue affects the function mod_httprp of the component SSLVPN. The manipulation leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2024-53703. The attack may be initiated remotely. There is no exploit available.

Amazon Web Services (AWS) this week made a bevy of updates to improve cloud security, including additional machine learning algorithms for the Amazon GuardDuty service that make it simpler to detect attack patterns.

The post AWS Adds Mutiple Tools and Services to Strengthen Cloud Security appeared first on Security Boulevard.

Mitek announced Digital Fraud Defender (DFD), an advanced, multi-layered solution to safeguard digital identity verification processes against sophisticated AI-enabled fraud tactics. Designed for financial institutions, fintech, online gaming providers, and enterprises requiring remote identity verification, the new suite addresses the urgent and growing challenges posed by generative AI’s potential to create highly realistic fake images, documents, and videos. According to Deloitte’s Center for Financial Services, fraud losses from generative AI could surge from $12.3 billion … More →

The post Mitek Digital Fraud Defender combats AI generated fraud appeared first on Help Net Security.