Aggregator

英特尔突然宣布 CEO 基辛格退休；人人网曝停止服务：正在升级；网络低智，「大脑腐烂」成牛津年度热词 | 极客早知道

Ruby Event Manager, Hangman, and Tackling Coolant Leaks: My Journey Through It All

Вебинар Positive Technologies состоится 5 декабря в 14:00.

UK cyber chief warns country is ‘widely underestimating’ risks from cyberattacks

A vulnerability was found in Catb gif2png. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file gif2png.c of the component CGI Program. The manipulation of the argument command-line leads to memory corruption. This vulnerability is known as CVE-2009-5018. The attack can be launched remotely. Furthermore, there is an exploit available.

The ‘Bootkitty’ Linux UEFI bootkit exploits the LogoFAIL flaws (CVE-2023-40238) to target systems using vulnerable firmware. Cybersecurity researchers from ESET recently discovered the first UEFI bootkit designed to target Linux systems, called by its authors Bootkitty. The bootkit allows attackers to disable the kernel’s signature verification feature and to preload two as yet unknown ELF […]

此次合作是对数字资产基金合规治理水平的一次全面提升！

APT36, a Pakistani cyber-espionage group, has recently upgraded its arsenal with ElizaRAT, a sophisticated Windows RAT that, initially detected in 2023, employs advanced evasion tactics and robust C2 capabilities to target Indian government agencies, diplomatic personnel, and military installations.  The group leverages multiple platforms, including Windows, Linux, and Android, to broaden its attack surface as […]

The post ElizaRAT Exploits Google, Telegram, & Slack Services For C2 Communications appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

В стране произошел юридический триумф против интернет-ограничений.

悬镜供应链安全情报中心连续捕获多起针对Windows NPM的木马投毒事件，涉及9个恶意组件包，34个不同版本，属于同一攻击者所为。

本次大会邀请了国内外在网络空间仿真与评测领域的业界专家和研究人员近300人，共同探讨仿真与评测相关的理论与方法、技术与平台，关键基础行业的网络系统仿真与评测等。

A vulnerability, which was classified as critical, has been found in Nicolas Boullis mah-jong 1.4. This issue affects some unknown processing. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2003-0705. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

微软超高危漏洞“狂躁许可”：从无回显漏洞看传统漏扫局限性

2024“古剑山”第二届全国大学生网络攻防大赛 writeup by Mini-Venom

Agile Is Rigor Mortis as Software’s State Religion

亚马逊入局AI，另辟蹊径能走远吗？

Arti 1.3.1 is released: onion services, RPC, relay development, and more

Update: 1768.py Version 0.0.22

派早报：荣耀发布荣耀 300 系列等新品，人人网无法正常登录等

A vulnerability, which was classified as critical, was found in Intel VirusScan Enterprise Linux up to 2.0.3. Affected is an unknown function of the file NailsConfig.html. The manipulation leads to code injection. This vulnerability is traded as CVE-2016-8020. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.