Aggregator

CVE-2024-23291 | Apple tvOS Notifications log file

Vuldb Updates
2 months 1 week ago
A vulnerability described as problematic has been identified in Apple tvOS. The affected element is an unknown function of the component Notifications Handler. Executing a manipulation can lead to sensitive information in log files. This vulnerability is registered as CVE-2024-23291. The attack needs to be launched locally. No exploit is available. Upgrading the affected component is recommended.
vuldb.com

CVE-2024-23291 | Apple iOS/iPadOS Notifications log file

Vuldb Updates
2 months 1 week ago
A vulnerability classified as problematic has been found in Apple iOS and iPadOS. The impacted element is an unknown function of the component Notifications Handler. The manipulation leads to sensitive information in log files. This vulnerability is documented as CVE-2024-23291. The attack needs to be performed locally. There is not any exploit available. It is recommended to upgrade the affected component.
vuldb.com

Malicious Chrome Extension “ChatGPT Ad Blocker” Steals ChatGPT Conversations

Cyber Security News
2 months 1 week ago

As OpenAI introduces advertisements to its free tier, cybercriminals are seizing the opportunity to trick users with fake utility tools. Security researchers have discovered a malicious Google Chrome extension named “ChatGPT Ad Blocker.” While it claims to hide unwanted ads, its true purpose is to steal private user conversations and send them to a hidden […]

The post Malicious Chrome Extension “ChatGPT Ad Blocker” Steals ChatGPT Conversations appeared first on Cyber Security News.

Abinaya

Company that Secretly Records and Publishes Zoom Meetings

不安全
2 months 1 week ago
好的，我现在需要帮用户总结一篇关于WebinarTV的文章，控制在100字以内。首先，我得仔细阅读文章内容，理解主要信息。 文章提到WebinarTV通过互联网搜索公开的Zoom会议邀请，加入这些会议后秘密录制，并发布这些录音。重要的是，他们没有使用Zoom的内置录制功能，所以Zoom无法采取措施阻止。 接下来，我需要将这些关键点浓缩成一句话。要确保涵盖公司名称、行为、技术手段以及影响。同时，语言要简洁明了，避免使用复杂的术语。 可能的结构是：公司名称 + 行为 + 技术手段 + 影响。例如，“WebinarTV秘密录制并发布公开Zoom会议，利用非Zoom功能规避监管。” 检查字数是否在限制内，并确保信息准确无误。最后，确认没有使用任何开头词如“这篇文章总结了...”，直接描述内容。 WebinarTV秘密录制并发布公开Zoom会议，利用非Zoom功能规避监管。

UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack

The Hackers News
2 months 1 week ago
The maintainer of the Axios npm package has confirmed that the supply chain compromise was the result of a highly-targeted social engineering campaign orchestrated by North Korean threat actors tracked as UNC1069. Maintainer Jason Saayman said the attackers tailored their social engineering efforts "specifically to me" by first approaching him under the guise of the founder of a
The Hacker News

Managed ad