Aggregator

Name: H7CTF International (an H7CTF International event.)
Date: Sept. 26, 2024, 3:30 a.m. — 27 Sept. 2024, 11:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.h7tex.com/
Rating weight: 22.67
Event organizers: H7Tex

Google Says Rust Language Initiative Eliminates Cross-Site Scripting, Other Flaws
Google says switching to a memory-safe language such as Rust under its Safe Coding program has helped significantly reduce the number of vulnerabilities in Android systems. The number of vulnerabilities uncovered in Android devices has fallen from over 200 in 2019 to fewer than 50 by 2024.

Also: Ransomware Surged in 2023, MoneyGram Back in Service After Cyberattack
This week, advice on spotting North Korean staff; ransomware attacks rose; MoneyGram back online; FCC fined political operative; CISA warned of water system attacks; Ukraine restricted Telegram use; North Korean hackers used new malware; U.K. arrested alleged hacker; PSNI is in data leak talks.

Draft Guidelines Call for Longer, Randomized Passwords Instead of Memorized Phrases
The National Institute of Standards and Technology is calling for longer, randomized passwords instead of memorized phrases containing combinations of upper and lowercase letters in new guidance that aims to modernize current password practices across the public and private sectors.

Featurespace's AI Expertise Will Enhance Visa's Fraud, Risk and Payments Technology
Visa has signed a definitive agreement to acquire AI-driven fraud prevention leader Featurespace. This acquisition will reinforce Visa's fraud detection capabilities, integrating advanced machine learning technology to strengthen financial crime prevention and protect global transactions.

As Superman has kryptonite, software has weaknesses — with misconfigurations leading the pack.

A vulnerability has been found in Linux Kernel up to 6.1.108/6.6.49/6.10.8 and classified as problematic. This vulnerability affects unknown code of the component AMD Display. The manipulation leads to Privilege Escalation. This vulnerability was named CVE-2024-46812. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.10.9. This affects the function rt_mutex_handle_deadlock. The manipulation leads to deadlock. This vulnerability is uniquely identified as CVE-2024-46829. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.10.9. Affected by this issue is the function get_cpu_for_acpi_id. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2024-46822. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

Илон Маск неожиданно изменил свою тактику в споре с властями.

The US has sanctioned Cryptex, PM2BTC and a Russian national for processing hundreds of millions of dollars derived from cybercrime

A vulnerability classified as critical has been found in Google Chrome up to 54.0. Affected is an unknown function of the component Product Security. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2016-5194. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

2024年9月最值得关注的安全动态

New and updated coverage for Windows Downdate Attacks, Quick Share Vulnerability Exploit, MagicRAT, and More

The post Cicada3301 Ransomware, LummaC2 Infostealer, Obfuscated Net Loader, and More: Hacker’s Playbook Threat Coverage Round-up: September 2024 appeared first on SafeBreach.

The post Cicada3301 Ransomware, LummaC2 Infostealer, Obfuscated Net Loader, and More: Hacker’s Playbook Threat Coverage Round-up: September 2024 appeared first on Security Boulevard.

В сети оказались конфиденциальные данные двух известных  политиков.

ESET research examines the group's malicious wares as used to spy on targets in Ukraine in the past two years

Порой даже минута простоя может вылиться в гигантские суммы убытков…

Feds indict Russian money launderer, Mallox ransomware affiliate rebrands Kryptina to target Linux, and Kimsuky deploys two new malware strains.

The post The Good, the Bad and the Ugly in Cybersecurity – Week 39 appeared first on SentinelOne.

Learn how GitGuardian can help you go from a world of secrets sprawl to a future with secrets-free machine identity frameworks by adopting SPIFFE/SPIRE.

The post How To Get There: Bridging The Technology Gap Preventing You From Adopting A Secrets-free Machine Identity Framework appeared first on Security Boulevard.