Aggregator

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.9.2. The impacted element is an unknown function of the component mt76. Executing manipulation can lead to null pointer dereference. This vulnerability is registered as CVE-2024-38609. The attack requires access to the local network. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.9.2. It has been classified as critical. The impacted element is the function netif_device_present of the component mlx5e. Performing manipulation results in null pointer dereference. This vulnerability is identified as CVE-2024-38608. The attack can only be performed from the local network. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability identified as critical has been detected in Linux Kernel up to 5.15.160/6.1.92/6.6.32/6.8.11/6.9.2. This affects the function acrn_vm_ram_map of the component virt. The manipulation leads to use after free. This vulnerability is documented as CVE-2024-38610. The attack requires being on the local network. There is not any exploit available. You should upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.8.11/6.9.2. This issue affects the function adf_send_admin_tl_start. The manipulation results in out-of-bounds read. This vulnerability was named CVE-2024-38606. The attack needs to be approached within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.9.2 and classified as critical. Impacted is the function request_irq of the component via-macii. This manipulation causes improper initialization. The identification of this vulnerability is CVE-2024-38607. The attack needs to be done within the local network. There is no exploit available. The affected component should be upgraded.

A vulnerability classified as critical was found in Linux Kernel up to 6.1.92/6.6.32/6.8.11/6.9.2. This affects the function devm_add_action_or_reset of the component hns3. Executing manipulation can lead to memory leak. This vulnerability is handled as CVE-2024-38603. The attack can only be done within the local network. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.32/6.8.11/6.9.2. This vulnerability affects the function blkdev_iomap_begin. The manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2024-38604. The attack can only be initiated within the local network. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.9.2 and classified as critical. The affected element is an unknown function of the component ALSA. Such manipulation leads to null pointer dereference. This vulnerability is referenced as CVE-2024-38605. The attack needs to be initiated within the local network. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.1.92/6.6.32/6.8.11/6.9.2. Affected by this issue is the function ax25_addr_ax25dev. Performing manipulation results in improper update of reference count. This vulnerability is known as CVE-2024-38602. Access to the local network is required for this attack. No exploit is available. It is recommended to upgrade the affected component.

Microsoft has announced a significant security enhancement for Outlook users, implementing the retirement of inline SVG image support across Outlook for Web and the new Outlook for Windows platforms.  This change represents a proactive measure to strengthen email security infrastructure and protect users from potential cybersecurity threats. The rollout timeline has been strategically structured to […]

The post Microsoft to Disable Inline SVG Images Display to Outlook for Web and Windows Users appeared first on Cyber Security News.

弹窗广告乱象早已不是什么新鲜话题，但新闻媒体近日披露的调查结果依然令人震惊。

为应对AI快速发展带来的新风险、新挑战，有关部门和机构及时跟踪风险变化、调整风险分类、探索风险分级方法并动态更新防范措施，制定了《框架》2.0版。本文将从“提升”和“逻辑与意义”两个层面，对比解读新版框架的关键改进及其背后的深意。

本文以《反电信网络诈骗法》为主线，梳理电信企业履行反诈义务的总体规定和核验处置过程中引发争议的情形，在此基础上对电信企业采取的核验处置措施的合法合理性进行剖析，并提出完善工作的建议。

意大利将于2025年10月10日率先实施全国性人工智能法律，成为欧盟首个采取此类措施的国家。该法律设定了以人为本的AI治理框架，包括透明度、隐私和安全原则，并指定监管机构监督执行。同时引入刑事处罚以应对AI滥用，并加强儿童保护措施。

On October 10, 2025, Italy will become the first EU member state to bring a national artificial intelligence law into force, moving ahead of the bloc’s landmark EU AI Act. Law No. 132 of 2025, published in the Gazzetta Ufficiale in late September, positions Italy at the center of Europe’s evolving AI governance landscape. The […]

The post Italy’s AI Law Comes Into Force appeared first on Centraleyes.

The post Italy’s AI Law Comes Into Force appeared first on Security Boulevard.

某人已掌握某人的电话号码、地址和出生日期，但希望获取其全名，并在HowToHack社区寻求帮助。该社区是一个开放的黑客社区，旨在帮助新手成长为资深人士。

这篇文章探讨了企业中红队（Red Team）、蓝队（Blue Team）和紫队（Purple Team）之间的关系及挑战。作为红队成员，作者指出在公司环境中很难保持纯粹的攻击性思维；红队的工作往往更偏向防御和协作（ Purple 或 Indigo）。作者强调持续学习和创造机会进行真正“红色”工作的必要性，并认为只有深入理解 Red 的本质才能实现 Purple 的平衡。

文中顺便聊聊最近比较火的大型勒索事件

r/deepweb是一个Reddit社区，旨在辟谣都市传说并分享Tor深网的真实信息，同时提醒用户遵守规定，避免索要非法链接。