Aggregator

The initial investigation shows early signs of links with the FIN11 and Clop cyber extortion groups

The threat actor known as Confucius has been attributed to a new phishing campaign that has targeted Pakistan with malware families like WooperStealer and Anondoor. "Over the past decade, Confucius has repeatedly targeted government agencies, military organizations, defense contractors, and critical industries -- especially in Pakistan – using spear-phishing and malicious documents as initial

自 2000 年以来 15-49 岁人群癌症发病率增加了 10%，而老年人口的癌症发病率却略有下降。其中年轻女性的癌症率比同年龄段男性高 83%。美国癌症研究协会(American Association for Cancer Research)会议上发表的一项涉及 15 万人的研究发现，根据血液生物标志物，千禧一代的生物衰老速度看起来比前几代人更快。这种加速现象与肺癌、胃肠道肿瘤和子宫恶性肿瘤等癌症风险增加最高 42% 相关。研究人员将癌症发病率上升与怀孕期间服用的药物、摄入的超加工食品、人造光、轮班工作造成的昼夜节律紊乱，以及化学物质暴露联系起来。

A vulnerability described as critical has been identified in Zoom Workplace Desktop App, Meeting SDK and Rooms Client up to 6.1.4 on macOS. This affects an unknown part. Executing manipulation can lead to improper privilege management. This vulnerability is tracked as CVE-2024-42442. The attack is restricted to local execution. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in AMI AptioV up to 5.37 and classified as critical. Affected is an unknown function. Executing manipulation can lead to improper access controls. This vulnerability appears as CVE-2024-2315. The attack requires local access. There is no available exploit.

A vulnerability was found in AMI AptioV up to 5.37. It has been declared as critical. Affected by this issue is some unknown functionality. The manipulation results in memory corruption. This vulnerability is known as CVE-2024-33658. Attacking locally is a requirement. No exploit is available.

A vulnerability classified as problematic was found in AMI AptioV up to 5.37. This impacts an unknown function of the component SPI Flash Handler. Such manipulation leads to download of code without integrity check. This vulnerability is listed as CVE-2024-33660. The attack can be executed directly on the physical device. There is no available exploit.

A vulnerability, which was classified as problematic, was found in AMI AptioV up to BKS_5.38. This affects an unknown function of the component BIOS. The manipulation results in improper input validation. This vulnerability was named CVE-2024-33659. The attack needs to be approached locally. There is no available exploit.

A vulnerability was found in AMI AptioV up to BKS_5.38. It has been rated as critical. Impacted is an unknown function. Performing manipulation results in time-of-check time-of-use. This vulnerability is identified as CVE-2024-54084. The attack is only possible with local access. There is not any exploit available.

A vulnerability marked as problematic has been reported in AMI AptioV up to 5.011. This impacts an unknown function. The manipulation leads to improper input validation. This vulnerability is uniquely identified as CVE-2025-33043. Local access is required to approach this attack. No exploit exists.

A vulnerability has been found in Iron Mountain Archiving Services enVision and classified as critical. This issue affects some unknown processing. This manipulation causes os command injection. This vulnerability is registered as CVE-2025-9588. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability was found in AMI AptioV up to BKS_5.38 and classified as problematic. Affected by this vulnerability is an unknown functionality. Executing manipulation can lead to time-of-check time-of-use. This vulnerability is registered as CVE-2024-42444. The attack needs to be launched locally. No exploit is available.

Как $2 за видео превратили владельцев камер Eufy в невольных актёров криминального кино.

A vulnerability described as critical has been identified in Linux Kernel up to 6.12.16/6.13.4/6.14-rc3. Affected by this issue is the function migrate_device_finalize. Executing manipulation can lead to improper update of reference count. This vulnerability is tracked as CVE-2025-21861. The attack is only possible within the local network. No exploit exists. Upgrading the affected component is recommended.

A vulnerability has been found in tpm2-tools and classified as problematic. This impacts an unknown function of the file tools/misc/tpm2_checkquote.c of the component pcr Selection Value Handler. Performing manipulation results in incorrect comparison. This vulnerability is known as CVE-2024-29039. Access to the local network is required for this attack. No exploit is available. To fix this issue, it is recommended to deploy a patch.

Okta Threat Intelligence uncovered a large-scale and sustained operation, reflecting the North Korean regime’s pursuit of any opportunity that allows for remote employment.

The post North Korea IT worker scheme swells beyond US companies appeared first on CyberScoop.

Defensie beschikt sinds vandaag over moderne mobiele laadplaatsen. Het gaat om 5 nieuwe zogenoemde kopladingen. Ze zijn bedoeld om treinwagons met militair materieel te beladen en te lossen, wanneer er geen raccordement beschikbaar is. Daarnaast komen ze van pas om vrachtwagens en trailers te lossen op locaties waar geen laaddok is. Met het nieuwe materieel vergroot Defensie de inzetmogelijkheden en daarmee de operationele flexibiliteit.

​Microsoft is working to resolve a bug that causes Defender for Endpoint to incorrectly tag some devices' BIOS (Basic Input/Output System) firmware as outdated, prompting users to update it. [...]

A vulnerability, which was classified as critical, was found in AMI AptioV up to 5.040. This affects an unknown part of the component BIOS. Executing manipulation can lead to race condition. This vulnerability is tracked as CVE-2025-22830. The attack is restricted to local execution. No exploit exists.

A vulnerability has been found in AMI AptioV up to 5.040 and classified as problematic. This vulnerability affects unknown code of the component BIOS. The manipulation leads to improper initialization. This vulnerability is listed as CVE-2025-22834. The attack must be carried out locally. There is no available exploit.