Aggregator

Proposal Will Be Open for Public Comment Next, But Will It Go Anywhere?
The Department of Health and Human Service last Friday submitted for White House review long-awaited updates to the 20-year-old HIPAA Security Rule containing modifications aimed at strengthening the cybersecurity of electronic protected health information.

A vulnerability was found in Ethereal 0.9.0/0.9.1/0.9.2/0.9.3. It has been declared as critical. This vulnerability affects unknown code of the component SMB Dissector. The manipulation leads to null pointer dereference. This vulnerability was named CVE-2002-0401. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

近日，360数字安全集团成功中标中国移动2024年至2026年终端安全软件产品集采项目。本次中标合作，将依托360终端安全管理系统打造智能化终端安全防护新体系，整体提升中国移动企业内部的数字安全防护能

9月20日，德国黑森州警方发布警告：有华裔男子通过小红书、微信等国内平台，以“紧急求租”、“买房”等借口约见单身女房东，见面后即会性侵。目前法兰克福及周边地区已发生四起相关连环性侵案，嫌犯疑似为同一华

近日，湖北省“HW2024”网络攻防实战演习在武汉圆满落下帷幕。经过为期五天的激烈比拼，默安科技攻击队凭借总分第一的成绩，在23支参赛队伍中脱颖而出，荣获“攻击方一等奖”。同时，默安科技还凭借卓越的防

A vulnerability has been found in Rob Flynn Gaim 0.57 and classified as problematic. This vulnerability affects unknown code of the file /tmp of the component Temp File Handler. The manipulation leads to improper privilege management. This vulnerability was named CVE-2002-0377. Local access is required to approach this attack. There is no exploit available.

New variants of a banking malware called Grandoreiro have been found to adopt new tactics in an eff

聚焦源代码安全，网罗国内外最新资讯！编译：代码卫士安全研究员发现大量可疑包被发布在注册表中，收割以太坊密钥并通过SSH协议来获得对设备的远程访问权限。Phylum 公司的研究人员在上周发布的分析报告

聚焦源代码安全，网罗国内外最新资讯！编译：代码卫士距离美国国会要求由网络安全专家组成的团队重新思考美国的数字化安全方法已过去六年，基本上该团队提出的所有提案均已执行。不过有一个例外为政策制定者和提倡

A vulnerability was found in Oracle Outside In Technology 8.5.4/8.5.5 and classified as very critical. This issue affects some unknown processing of the component Installation. The manipulation leads to out-of-bounds write. The identification of this vulnerability is CVE-2016-10328. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

Segugio Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extracting the malware’s final stage configuration. Segugio was created to address the need for...

The post Segugio: Tracking Malware from Click to Configuration appeared first on Penetration Testing Tools.

2024年10月14日-2024年10月20日本周漏洞态势研判情况本周信息安全漏洞威胁整体评价级别为中。国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞272个，其中高危漏洞1

漏洞名称：VMware vCenter Server堆溢出漏洞(CVE-2024-38812)组件名称：VMware-vCenter影响范围：VMware vCenter Server 8.0 < 8

September2024年9月奖励公告2024年9月共有25位白帽师傅来到OSRC挖出有效漏洞具体名单如下：注：根据OSRC漏洞奖励规定，每月奖励将通过“UP小帮手”平台发放，也可在OSRC官网商城

引言如今，AIGC、大模型等技术正在与更多场景深度融合，以数据构建关键要素，重塑数字生产力的当下，数据和隐私安全也更受到行业和用户的关注。10 月 17 日，2024 年 OPPO 开发者大会（简称“

msldap LDAP library for auditing MS AD   Feature Comes with a built-in console LDAP client All parameters can be controlled via a convenient URL Supports integrated windows authentication (SSPI) both with NTLM and...

The post msldap: LDAP library for auditing MS AD appeared first on Penetration Testing Tools.

A vulnerability was found in SGI IRIX up to 6.5.16 and classified as very critical. This issue affects some unknown processing of the file xfsmd of the component XFS File System. The manipulation leads to improper privilege management. The identification of this vulnerability is CVE-2002-0359. The attack may be initiated remotely. There is no exploit available.

sn0int sn0int is an OSINT framework and package manager. It was built for IT security professionals and bug hunters to gather intelligence about a given target or about yourself. It is an enumerating attack...

The post sn0int: OSINT framework and package manager appeared first on Penetration Testing Tools.

Digital Echo Chambers and Erosion of Trust – Key Threats to the US ElectionsResecurity reports

A vulnerability was found in 0xJacky Nginx-UI up to 2.0.0-beta.35. It has been declared as problematic. This vulnerability affects unknown code of the file /api/configs of the component Log File Content Handler. The manipulation leads to missing authorization. This vulnerability was named CVE-2024-49367. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.