Aggregator

An ongoing social engineering campaign with alleged links to the Black Basta ransomware group has been linked to "multiple intrusion attempts" with the goal of conducting credential theft and deploying a malware dropper called SystemBC. "The initial lure being utilized by the threat actors remains the same: an email bomb followed by an attempt to call impacted users and offer a fake solution,"

via the respected Software Engineering expertise of Mikkel Noe-Nygaard and the lauded Software Engineering / Enterprise Agile Coaching work of Luxshan Ratnaravi at Comic Agilé!

Permalink

The post Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #303 — The Scrum Master To-Do List appeared first on Security Boulevard.

Допинг-тесты тысяч атлетов оказались в открытом доступе.

In the rapidly evolving world of cybersecurity, emerging threats pose significant challenges to organizations worldwide. These threats, characterized by their novelty and complexity, often exploit new vulnerabilities and technologies, making them difficult to predict and defend against. As cybercriminals continually refine their methods, businesses must stay informed and proactive to protect their assets. One powerful […]

The post How to Investigate Emerging Cyber Threats in 2024 – SOC/DFIR Team Guide appeared first on Cyber Security News.

Hackers targeted AutoCanada in a cyberattack last Sunday that impacted the automobile dealership group's internal IT systems, which may lead to disruptions. [...]

SolarWinds addressed a critical remote code execution vulnerability in its Web Help Desk solution for customer support. SolarWinds fixed a critical vulnerability, tracked as CVE-2024-28986 (CVSS score 9.8), in SolarWinds’ Web Help Desk solution for customer support. The flaw is a Java deserialization issue that an attacker can exploit to run commands on a vulnerable host leading to […]

A vulnerability classified as critical has been found in IBM SDK and Java Technology Edition up to 7.1.5.18/8.0.8.26. This affects an unknown part of the component Object Request Broker. The manipulation leads to channel accessible by non-endpoint. This vulnerability is uniquely identified as CVE-2024-27267. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in IBM QRadar Suite Software and Cloud Pak for Security. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Back-End Command Handler. The manipulation leads to invocation of process using visible sensitive information. This vulnerability is handled as CVE-2024-28799. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

Sophos discovers the threat actors behind RansomHub ransomware using EDRKillShifter in attacks

The phishing attack uses infostealer malware to target saved passwords, credit cards & Bitcoin info

今日暂未更新资讯~
更多最新文章，请访问SecWiki

旧金山停车场的 Waymo 无人驾驶汽车被发现存在奇怪的 bug，它们彼此会反复的鸣笛，干扰了附近居民的睡眠和日常生活。鸣笛的现象是随机发生的，有多名居民为此投诉。当地居民 Randol White 表示在凌晨四点被汽车的鸣笛声惊醒，另一名居民 Russell Pofsky 表示，过去两周被惊醒的次数超过了过去二十年的总和。Waymo 发表声明承认汽车有故障，表示已经确定了原因正在进行修复。

A vulnerability was found in MStore API Plugin up to 4.15.2 on WordPress. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper authentication. This vulnerability is known as CVE-2024-7628. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in Zephyr Project Manager Plugin up to 3.3.101 on WordPress. It has been classified as critical. Affected is an unknown function. The manipulation leads to improper authentication. This vulnerability is traded as CVE-2024-7624. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Insert PHP Code Snippet Plugin up to 1.3.6 on WordPress and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The identification of this vulnerability is CVE-2024-7420. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in Adobe Acrobat Reader up to 20.005.30636/24.002.20965/24.002.20964/24.001.30123 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to time-of-check time-of-use. This vulnerability was named CVE-2024-39425. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Adobe InDesign Desktop up to 18.5.2/19.4. This affects an unknown part. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2024-41866. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Adobe Acrobat Reader up to 20.005.30636/24.002.20965/24.002.20964/24.001.30123. Affected by this issue is some unknown functionality. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2024-39426. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Adobe InDesign Desktop up to 18.5.2/19.4. Affected by this vulnerability is an unknown functionality. The manipulation leads to null pointer dereference. This vulnerability is known as CVE-2024-39395. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Adobe InDesign Desktop up to 18.5.2/19.4. Affected is an unknown function. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2024-39393. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.