Aggregator

Специалисты раскрывают основные векторы атак и ключевые группы вымогателей.

Хакеры развязали беспощадную войну против Мадуро.

Two men living a life of luxury in Florida have been charged with cyber fraud after authorities became suspicious of their extravagant spending habits. Russian national Pavel Kublitskii and Kazakhstan national Alexandr Khodyrev, who arrived in the U.S. in 2022 seeking asylum, are now facing serious charges related to their alleged involvement in dark web […]

The post Dark Web Marketplace Admins Busted Following Luxury Life appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

2024年8月16日（周五）晚上 19:00-21:00 微访谈微信群。

近在上班摸鱼的时候发现了一个好用的阅读器，他只有一行文字，可以完美的隐藏在屏幕里面，光明正大的摸鱼而不被老板发现。

Microsoft’s August Patch Tuesday saw the tech giant address nine zero-day vulnerabilities

Siemensから各製品向けのアップデートが公開されました。

Siemensから各製品向けのアップデートが公開されました。

A vulnerability was found in Adobe InCopy up to 19.4. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to integer overflow. The identification of this vulnerability is CVE-2024-41858. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe Substance3D Sampler up to 4.5. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2024-41860. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe Substance3D Sampler up to 4.5. It has been classified as problematic. This affects an unknown part. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2024-41863. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe Substance3D Sampler up to 4.5 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2024-41862. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Adobe Substance3D Designer up to 13.1.2 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to out-of-bounds write. This vulnerability is known as CVE-2024-41864. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Adobe Substance3D Sampler up to 4.5. Affected is an unknown function. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2024-41861. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in averta Slider & Popup Builder Plugin up to 3.1.1 on WordPress. This issue affects the function uploadFile. The manipulation leads to unrestricted upload. The identification of this vulnerability is CVE-2024-4389. The attack may be initiated remotely. There is no exploit available.

Kootenai Health suffered a data breach impacting over 464,000 patients following a 3AM ransomware attack. Kootenai Health disclosed a data breach impacting over 464,088 patients following the leak of their personal information by the ThreeAM (3AM) ransomware gang. Kootenai Health is a healthcare organization based in Coeur d’Alene, Idaho. It is a regional medical center […]

Вторник исправлений у Microsoft прошел с устранением 6 уязвимостей нулевого дня.

15 年前，加州旧金山分校生物物理学家 Leor Weinberger 提出了一个对抗 HIV 的大胆策略——给 HIV 感染患者注射一种经过改造的 HIV。他设想，这种被剥夺了几乎所有基因且不会引发疾病的HIV 变体，可能会击败并抑制自然状态下的 HIV。这种被称为“治疗性干扰颗粒”（TIP）的“去势”HIV，甚至具备在人与人之间传播的能力，有望降低全球艾滋病发病率。如今，这一设想得到了初步验证。Weinberger 和同事在《科学》发表论文称，他们向感染 HIV 的猴子体内注射了一次TIP，可以使其体内的病毒水平在很长一段时间内降低至 1/10000。科学家计划在人体内测试这种“以毒攻毒”的方法。如果这种方法被证明对人体安全有效，则有可能应用于所有 HIV 感染者。Weinberger指出，许多感染者很难获得抗病毒药物，或者无法坚持每日服药，“因此我们有必要尝试一些新的方法”。

Tenable Research has uncovered significant security vulnerabilities in Microsoft’s Azure Health Bot Service, a cloud platform designed to enable healthcare professionals to deploy AI-powered virtual health assistants. The Azure AI Health Bot Service is a cloud-based platform designed for healthcare organizations. It enables developers to create and deploy AI-driven virtual health assistants, which help streamline […]

The post Critical SSRF Vulnerability in Microsoft Azure Let Hackers Compromise Health Bot Services appeared first on Cyber Security News.

商家介绍 现在大厂的ssl一年期证书，基本都已经消失了。今天分享的是Sectigo一年期的免费证书，是hostloc的网友魔法实现的，啥也不说上就行了。 官方网站：https://ssl.hos...