Aggregator

CVE-2024-10461 | Mozilla Thunderbird up to 131 Response Header Content-Disposition cross site scripting (Nessus ID 209869)

Vuldb Updates
2 months 2 weeks ago
A vulnerability was found in Mozilla Thunderbird up to 131. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Response Header Handler. The manipulation of the argument Content-Disposition leads to cross site scripting. This vulnerability is handled as CVE-2024-10461. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Packers and Crypters in Malware and How to Remove Them

Anyrun
2 months 2 weeks ago

In this article, we’ll explore the most common types of protectors—packers and crypters—along with simple ways to detect and remove them.   We’ll also introduce some useful tools to simplify the process and improve your malware analysis skills.  What Are Protectors and What Types Are There?  Protectors are tools designed to complicate code analysis, making […]

The post Packers and Crypters in Malware <br>and How to Remove Them appeared first on ANY.RUN's Cybersecurity Blog.

Maksim Mikhailov

Google fixed a critical vulnerability in Chrome browser

Security Affairs
2 months 2 weeks ago
Google addressed a critical vulnerability in its Chrome browser, tracked as CVE-2024-10487, which was reported by Apple. Google has patched a critical Chrome vulnerability, tracked as CVE-2024-10487, reported by Apple Security Engineering and Architecture (SEAR) on October 23, 2024. The vulnerability is an out-of-bounds write issue that resides in the Dawn implementation. Dawn is an open-source […]
Pierluigi Paganini

Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA News
2 months 2 weeks ago

Fortinet has updated their security advisory addressing a critical FortiManager vulnerability (CVE-2024-47575) to include additional workarounds and indicators of compromise (IOCs). A remote, unauthenticated cyber threat actor could exploit this vulnerability to gain access to sensitive files or take control of an affected system. At this time, all patches have been released.

CISA previously added this vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation, as confirmed by Fortinet.

CISA strongly encourages users and administrators to apply the necessary updates, hunt for any malicious activity, assess potential risk from service providers, report positive findings to CISA, and review the following articles for additional information: 

CISA

Enhancing Security Operations with ReversingLabs and MicrosoftSentinel Integrations

Security Boulevard
2 months 2 weeks ago
Introduction

Within today’s quickly transforming threat context, security operations centers (SOCs) need robust tools to detect, analyze, and respond to threats efficiently. ReversingLabs’ integration with Microsoft Sentinel, a cloud-native Security Information and Event Management (SIEM) solution, empowers SOCs with advanced threat intelligence and file enrichment capabilities. This blog post explores how these integrations enhance security operations and streamline incident response.

The post Enhancing Security Operations with ReversingLabs and MicrosoftSentinel Integrations appeared first on Security Boulevard.

Stuart Phillips

Managed ad