Aggregator

De berging van de Vickers Wellington HE346 in het Friese Holwert is afgerond. Belangrijkste was dat er stoffelijke resten zijn gevonden. Dat was 13 september al het geval. Verder zijn er sinds de berging die 29 juli begon persoonlijke voorwerpen gevonden zoals een kleine hoeveelheid vliegeruitrusting, een leren vliegercap en een zuurstofmasker. Ook zijn beide motoren aangetroffen, net als het landingsgestel, de geschutskoepel, een dinghy, radiocomponenten en munitieresten.

A vulnerability, which was classified as critical, was found in Covet Fashion - Shopping Game 2.14.40. This affects an unknown part of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is uniquely identified as CVE-2014-6830. The attack can only be initiated within the local network. There is no exploit available.

Mozilla 宣布将于 12 月 17 日关闭其 Mastodon 实例退出联邦宇宙，以专注于 Firefox 和 AI。 Mozilla.social 规模很小，只有 270 名活跃用户。相比下最大 Mastodon 实例 Mastodon.social 有 247,500 名月活跃用户。Mozilla 联合创始人 Mitchell Baker 今年初辞去 CEO 一职，由董事 Laura Chambers 担任临时 CEO。此后 Mozilla 调整了产品战略，集中力量于 Firefox 和 AI，缩减其它方面的工作。Mozilla.social 的用户可以下载数据和转移账号。

A vulnerability, which was classified as critical, was found in Webavis 0.1.1. Affected is an unknown function of the file class/class.php. The manipulation of the argument root leads to file inclusion. This vulnerability is traded as CVE-2007-2943. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

17 сентября по всему Ливану произошла серия взрывов пейджеров.

Another encrypted communication platform used by criminals has been dismantled and its alleged mastermind arrested, the Australian Federal Police has announced on Tuesday. “AFP Operation Kraken charged a NSW man, aged 32, for creating and administering Ghost, a dedicated encrypted communication platform, which the AFP alleges was built solely for the criminal underworld,” the law enforcement agency says. As the man was being arrested, other arrests (51 suspects in all) happened across Australia, Ireland, Italy, … More →

The post Ghost: Criminal communication platform compromised, dismantled by international law enforcement appeared first on Help Net Security.

NIST research in a kitchen fire laboratory shows that updated smoke detectors still produce nuisance alarms during cooking.

Can cyber defenders use the presence of infostealers as a canary in the coal mine to preempt ransomware attacks?

CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.

• CVE-2024-27348 Apache HugeGraph-Server Improper Access Control Vulnerability
• CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
• CVE-2019-1069 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
• CVE-2022-21445 Oracle JDeveloper Remote Code Execution Vulnerability
• CVE-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.

Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

Apple released security updates to address vulnerabilities in multiple Apple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. 

CISA encourages users and administrators to review the following advisories and apply necessary updates:

• iOS 18 and iPadOS 18
• iOS 17.7 and iPadOS 17.7
• Safari 18
• macOS Sequoia 15
• macOS Sonoma 14.7
• macOS Ventura 13.7
• tvOS 18
• watchOS 11
• visionOS 2
• Xcode 16

A vulnerability, which was classified as critical, has been found in Gethook Hook 0.9.3. Affected by this issue is some unknown functionality of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is handled as CVE-2014-6829. The attack can only be done within the local network. There is no exploit available.

Новое армейское подразделение призвано усилить цифровую оборону государства.

A vulnerability, which was classified as critical, has been found in BMC Patrol Agent up to 3.2.6. Affected by this issue is some unknown functionality of the component SNMP File Handler. The manipulation leads to improper privilege management. This vulnerability is handled as CVE-1999-1460. An attack has to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

美团SRC活动时间：2024.09.19-09.30

A vulnerability, which was classified as critical, was found in tcpdump up to 4.8.x. Affected is an unknown function of the file print-geonet.c of the component GeoNetworking Parser. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2016-7986. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Продолжат ли облачные гиганты винить друг друга или попытаются изменить ситуацию?

A vulnerability classified as critical has been found in rhboot shim on 32-bit. Affected is the function verify_sbat_section. The manipulation leads to heap-based buffer overflow. This vulnerability is traded as CVE-2023-40548. Access to the local network is required for this attack. There is no exploit available.

A vulnerability has been found in Poppler up to 24.06.0 and classified as problematic. This vulnerability affects unknown code of the component pdfinfo. The manipulation of the argument dests leads to denial of service. This vulnerability was named CVE-2024-6239. The attack needs to be approached within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic has been found in Red Hat Service Interconnect 1. Affected is an unknown function of the component Skupper. The manipulation leads to use of default credentials. This vulnerability is traded as CVE-2024-6535. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Red Hat OpenShift Container Platform 3.11/4. It has been rated as critical. Affected by this issue is the function authHandlerWithUser of the file /API/helm/verify. The manipulation leads to missing authentication. This vulnerability is handled as CVE-2024-7079. The attack may be launched remotely. There is no exploit available.