Aggregator

IntroductionOn November 20, 2024, Shubham Shah and I discovered a security vulnerability in Subaru’

Автоматический выход отправляется на цифровую свалку.

In a candid discussion with HackerNoon, the leadership team of Fedrok AG detail their journey into e

The development of generative AI offered both opportunities for beneficial productivity transformation and opportunities for malicious exploitation.  GhostGPT, an uncensored AI chatbot created specifically for cybercrime, is the most recent threat in this domain. GhostGPT, which researchers at Abnormal Security identified, is a new frontier in the use of artificial intelligence for illicit activities, such […]

The post GhostGPT – New AI Black Hat Tool Used by Hackers to Generative Malware & Exploits appeared first on Cyber Security News.

After TikTok was briefly banned in the US last weekend, an unusual phenomenon unearthed. Report

Cybersecurity researchers have uncovered a new large-scale campaign invol

Fall was a busy conference

Fall was a busy conference season for Tidal Cyber. My colleagues and I participated in events including Black Hat, FutureCon, Health-ISAC, FS-ISAC, ATT&CKCon, and numerous regional Cybersecurity Summits. As we spoke with attendees, one of the big takeaways was that organizations are trying to understand their risk associated with using AI. Rick Gordon and I had the opportunity to dig into this in more detail at the ACSC 2024 Annual Member Conference. The theme was “Developing AI Governance and Security Practice”, and several discussions focused on how organizations can assess the risk versus the reward of bringing AI into their organization as a business tool. 

The post Operationalizing MITRE ATLAS to Defend Against Attacks on AI appeared first on Security Boulevard.

Published: 22 January 2025 at 14:45 UTC

US agencies revealed Chinese threat actors used two advanced exploit chains to breach Ivanti Cloud Service Appliances (CSA). The US government’s cybersecurity and law enforcement revealed that Chinese threat actors used at least two sophisticated exploit chains to compromise Ivanti Cloud Service Appliances (CSA). A CISA and FBI published a joint advisory warning that Chinese hackers […]

Chinese threat actors used two advanced exploit chains to hack Ivanti CSA

A vulnerability classified as problematic was found in HCL BigFix Patch Management Download Plug-ins up to 1177. This vulnerability affects unknown code. The manipulation leads to download of code without integrity check. This vulnerability was named CVE-2024-42183. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability, which was classified as problematic, was found in HCL BigFix Patch Management Download Plug-ins up to 1177. Affected is an unknown function of the component Download File Handler. The manipulation leads to path traversal. This vulnerability is traded as CVE-2024-42187. An attack has to be approached locally. There is no exploit available.

A vulnerability classified as problematic was found in HCL BigFix Patch Management Download Plug-ins up to 1177. Affected by this vulnerability is an unknown functionality of the component File Scheme Handler. The manipulation leads to improper neutralization of encoded uri schemes in a web page. This vulnerability is known as CVE-2024-42184. Attacking locally is a requirement. There is no exploit available.

A vulnerability, which was classified as problematic, was found in HCL BigFix Patch Management Download Plug-ins up to 1177. This affects an unknown part. The manipulation leads to improper certificate validation. This vulnerability is uniquely identified as CVE-2024-42186. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Elastic Kibana up to 7.17.22/8.14.x. It has been rated as critical. This issue affects some unknown processing of the file /api/metrics/snapshot of the component Request Handler. The manipulation leads to allocation of resources. The identification of this vulnerability is CVE-2024-52972. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Elastic Kibana up to 8.14.x. Affected is an unknown function. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2024-43707. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Elastic Kibana up to 8.14.x. Affected by this vulnerability is an unknown functionality of the file /api/fleet/health_check. The manipulation leads to server-side request forgery. This vulnerability is known as CVE-2024-43710. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.