Aggregator

DroidBot, lo spyware Android che mette nel mirino gli istituti finanziari: come difendersi

Festività e weekend nel mirino degli attacchi ransomware: come mitigare il rischio

Gli hacker ora entrano nella cassetta della posta: difendiamoci dal phishing “cartaceo”

La guerra dei chip tra Stati Uniti e Cina: un conflitto tecnologico e commerciale

Cybersecurity e business continuity: il ruolo chiave degli Internet Service Provider

Accordi tra big tech dell’IA ed esercito USA: perché è svolta

Cooperate with Salt Typhoon probe, House chairman tells telecoms

A Technical Look at the New ‘Termite’ Ransomware that Hit Blue Yonder

脚本介绍独角数卡 发卡价格库存监控 Python 脚本，主要用于对监测同行的发卡库存情况与价格变动，通过telegram bot进行通知提醒，便于及时掌握商品库和价格变动。监测同行价格，只要他降...

zizmor would have caught the Ultralytics workflow vulnerability

12.9~12.23 全域高危双倍，还有反爬最高5w等你来拿！

How to hack into a private telegram channel?

A vulnerability was found in Apple tvOS. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sandbox issue. This vulnerability is known as CVE-2024-23278. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple iOS and iPadOS. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to sandbox issue. This vulnerability is handled as CVE-2024-23278. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Apple macOS. This affects an unknown part. The manipulation leads to sandbox issue. This vulnerability is uniquely identified as CVE-2024-23278. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Apple watchOS. This vulnerability affects unknown code. The manipulation leads to sandbox issue. This vulnerability was named CVE-2024-23278. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in SMS for Lead Capture Forms Plugin up to 1.1.0 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Message Handler. The manipulation leads to missing authorization. This vulnerability is known as CVE-2024-11353. The attack can be launched remotely. There is no exploit available.

Does Cellebrite have a solution that can remotely collect iCloud backups w/o requiring physical device access?

MACOBOX The all-in-one hacking toolbox for hardware penetration testing. MACOBOX is designed to simplify and enhance hardware penetration testing by providing a comprehensive toolset for analyzing and extracting firmware from various hardware interfaces. With...

The post MACOBOX: The all-in-one hacking toolbox for hardware penetration testing appeared first on Penetration Testing Tools.

OneGadget When playing ctf pwn challenges we usually need the one-gadget RCE (remote code execution), which leads to call execve(‘/bin/sh’, NULL, NULL). This gem provides such gadgets finder, no need to use objdump or IDA-pro...

The post OneGadget: The best tool for finding one gadget RCE appeared first on Penetration Testing Tools.