Aggregator

Microsoft has fixed a known issue causing the classic Outlook email client to stop responding when copying text with the CTRL+C keyboard shortcut. [...]

Microsoft has fixed a known issue causing the classic Outlook email client to stop responding when copying text with the CTRL+C keyboard shortcut. [...]

Pixel 4a 于 2020 年上市，2022 年底停产，2023 年夏天收到最后一次官方软件更新，2023 年 11 月收到了一次安全更新。2025 年 1 月 Google 意外通知

Pixel 4a 于 2020 年上市，2022 年底停售，2023 年夏天收到最后一次官方软件更新，2023 年 11 月收到了一次安全更新。2025 年 1 月 Google 意外通知用户它开始推送一次新的软件更新，但这次更新将会影响到部分手机的电池性能。Google 在声明中称：部分 Pixel 4a 手机需要更新软件以提高电池性能的稳定性。自 2025 年 1 月 8 日起，我们会面向所有 Pixel 4a 设备发布 Android 13 自动更新。对于某些设备，该软件更新会降低可用电池容量并影响充电性能。Google 称它将为受影响用户提供安抚补偿（如果用户不再使用 Pixel 4a 也有资格获得补偿），用户可选择三种方案之一：将手机送去免费更换电池；获得 50 美元；获得 100 美元用于在 Google Store 购买新 Pixel 手机。Google 没有解释为什么电池会受到影响，可能类似 2017 年苹果的电池门事件，Google 决定未雨绸缪。

Configuration drift occurs when systems deviate from their intended settings over time. This see

Addressing configuration drift - a seemingly minor issue - is essential to maintaining a secure and resilient IT environment. 

The post Security Implications of Configuration Drift  appeared first on Security Boulevard.

Research by: Antonis Terefos (@Tera0017) Key Points Introduction As of 2024, approximately 100.4 million people worldwide use macOS, accounting for 15.1% of the global PC market. Of the millions of macOS users, many falsely assume that their systems are inherently secure from malware. This perception stems from macOS’s Unix-based architecture and historically lower market share, making […]

The post Banshee: The Stealer That “Stole Code” From MacOS XProtect appeared first on Check Point Research.

A vulnerability was found in Helm up to 3.14.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. This vulnerability was named CVE-2024-25620. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Microsoft Azure Monitor Agent. This affects an unknown part. The manipulation leads to link following. This vulnerability is uniquely identified as CVE-2024-29989. Attacking locally is a requirement. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical was found in Microsoft Azure Kubernetes Service Confidential Containers. This vulnerability affects unknown code. The manipulation leads to improper access controls. This vulnerability was named CVE-2024-29990. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Microsoft Windows up to Server 2022 23H2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Text Services Framework. The manipulation leads to missing authorization. This vulnerability is known as CVE-2024-21417. Attacking locally is a requirement. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic was found in Backlink Monitoring Manager Plugin up to 0.1.3 on WordPress. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-12714. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Aklamator INfeed Plugin up to 2.0.0 on WordPress. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-12731. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in PostLists Plugin up to 2.0.2 on WordPress. Affected is an unknown function. The manipulation of the argument $_SERVER['REQUEST_URI'] leads to cross site scripting. This vulnerability is traded as CVE-2024-10815. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Asgard Security Scanner Plugin up to 0.7 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-12715. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in BU Section Editing Plugin up to 0.9.9 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-12736. It is possible to initiate the attack remotely. There is no exploit available.

AI disinformation, deep fakes, armies of lying bots, and automated deception is the bigge

IO Network and Alpha Network have formed a strategic partnership to develop infrastructure for artif

Facebook Unveils Community Notes Program But Has Done Little to Curb Fraud
Meta has decided to end its fact-checking program. Meta CEO Mark Zuckerberg announced significant changes to the company's moderation policies and practices on Tuesday, attributing the shift to a renewed commitment to free speech. Some fear the move will embolden financial scammers.