Aggregator

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 7 | Security Affairs newsletter Round 485 by Pierlui

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Deciphering the Brain Cipher Ransomware   Ideal typosquat ‘solana-py’ steals your crypto wallet keys   Ransomware attackers introduce new EDR killer to their arsenal Beyond the wail: deconstructing the BANSHEE infostealer   A Deep Dive into a New ValleyRAT […]

A vulnerability, which was classified as critical, has been found in DouPHP 1.7 Release 20220822. Affected by this issue is some unknown functionality of the file /admin/system.php of the component Favicon Handler. The manipulation of the argument site_favicon leads to unrestricted upload. This vulnerability is handled as CVE-2024-7917. The attack may be launched remotely. Furthermore, there is an exploit available.

当前，智能CPS系统已成为智能汽车、智能机器人、智能制造等多个领域的研究热点。

Submit #389296 / VDB-275042

A vulnerability classified as problematic was found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this vulnerability is an unknown functionality of the file addNominee.php of the component Add Nominee Page. The manipulation of the argument Nominee-Client ID leads to cross site scripting. This vulnerability is known as CVE-2024-7916. The attack can be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #388906 / VDB-199683

Submit #388905 / VDB-275041

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 7 | Security Affairs newsletter Round 485 by Pierlui

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Large-scale extortion campaign targets publicly accessible environment variable files (.env) OpenAI dismantled an Iranian influence operation targeting the […]

Правительство пытается спасти уникальные бумаги.

Large-scale extortion campaign targets publicly accessible environment variable files (.env)A

A large-scale extortion campaign compromised multiple organizations by exploiting publicly accessible environment variable files (.env). Palo Alto Unit 42 researchers uncovered a large-scale extortion campaign that successfully compromised and extorted multiple victim organizations by leveraging exposed environment variable files (.env files). The exposed files contained sensitive variables such as credentials belonging to various applications. This extortion […]

Sponsored by: Whilst there definitely weren't 2.x billion people in the National Public Dat

Нейроны раннего и позднего типа работают вместе для хранения воспоминаний.

Planning a day trip to Chimelong Safari Park in Guangzhou, China? This practica

During the 2024 Dragon Boat Festival holiday, my wife and I embarked on a self-

看雪论坛作者ID：yirucandy

欢迎成为 SDC 2024一份子！