Aggregator

Ivanti has released a security update to address an admin bypass vulnerability (CVE-2024-8963) affecting Ivanti Cloud Services Appliance (CSA) version 4.6.  A cyber threat actor could exploit this vulnerability in conjunction with CVE-2024-8190–detailed in a Sept. 13 Ivanti security advisory–to take control of an affected system. This vulnerability impacts all versions prior to patch 519.

Ivanti has confirmed limited exploitation and recommends that users upgrade to CSA version 5.0, as version 4.6 is end-of-life and no longer supported. CISA urges users and administrators review the Ivanti security advisory and apply the necessary updates. 

Note: CISA has added CVE-2024-8963 to its Known Exploited Vulnerabilities Catalog, which, per Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities, requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the specified due date to protect FCEB networks against active threats.  
 

CISA released six Industrial Control Systems (ICS) advisories on September 19, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

• ICSA-24-263-01 Rockwell Automation RSLogix 5 and RSLogix 500
• ICSA-24-263-02 IDEC PLCs
• ICSA-24-263-03 IDEC CORPORATION WindLDR and WindO/I-NV4
• ICSA-24-263-04 MegaSys Computer Technologies Telenium Online Web Application
• ICSA-24-263-05 Kastle Systems Access Control System
   
• ICSA-20-168-01 Treck TCP/IP (Update I)

CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.

VMware released a security advisory addressing vulnerabilities in the VMware Cloud Foundation and the vCenter Server. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system.

CISA encourages users and administrators to review the following VMware security advisory and apply the necessary updates:

• VCDSA24968

The rapid proliferation of Artificial Intelligence (AI) promises significant value for industry, consumers, and broader society, but as with many technologies, new risks from these advancements in AI must be managed to realize it’s full potential. The NIST AI Risk Management Framework (AI RMF) was developed to manage the benefits and risks to individuals, organizations, and society associated with AI and covers a wide range of risk ranging from safety to lack of transparency and accountability. For those of us at NIST working in cybersecurity, privacy and AI, a key concern is how advancements

The only thing worse than getting stuck in a bumper-to-bumper traffic jam is getting trapped in an IT war room for hours, days, or even weeks trying to resolve enterprise network problems. In fact, customers using war rooms to troubleshoot their issues tell NETSCOUT it has taken from 15 hours to 6 weeks to resolve a...

胡金鱼

A vulnerability was found in Inout Scripts Inout Meta Search Engine. It has been rated as critical. This issue affects some unknown processing of the component Search Engine. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2007-2988. The attack may be initiated remotely. Furthermore, there is an exploit available.

Германия лишила вымогателей голоса и нашла необычные сходства с другими хакерами.

A vulnerability, which was classified as critical, has been found in Phil-a-Form 1.2.0.0. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument form_id leads to sql injection. This vulnerability is handled as CVE-2007-2933. The attack may be launched remotely. Furthermore, there is an exploit available.

Как австралийский “компьютерный гик” создал криминальную империю.

证书+1

全球首起针对通信设备的大规模定向物理攻击分析报告

A vulnerability, which was classified as critical, was found in Apple tvOS up to 10.0. This affects an unknown part of the component CoreMedia Playback. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2016-7588. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Техническая лазейка помогла соцсети вновь заработать после блокировок.

APT组织Lazarus 在Rootkit（获取内核权限）攻击中使用了微软的0day漏洞;APT组织Kimsuky利用软件公司产品安装程序进行伪装展开攻击;NoName057(16)组织DDoSia项目持续更新;

Что стоит за перебоями популярного мессенджера?

具透 | 精心细调更懂你：watchOS 11 中值得关注的更新 少数派编辑部 等 2 位作者 11:309 月 17 日凌晨，经过 WWDC24 首次亮相之后的数个版本的测试，iPhone、iPad

主站 分类 漏洞 工具 极客

守护智慧港口平稳运行！