Aggregator

Netgear disclosed two critical flaws impacting multiple WiFi router models and urges customers to address them. Netgear addressed two critical vulnerabilities, internally tracked as PSV-2023-0039 and PSV-2021-0117, impacting multiple WiFi router models and urged customers to install the latest firmware. The two flaws are, respectively, a remote code execution issue and an authentication bypass vulnerability. […]

Researchers measured a threefold increase in credential stealing between 2023 and 2024, with more than 11.3 million such thefts last year.

Espionage and Cybercrime Campaign Tied to 7-Zip Mark-of-the-Web Bypass Hits
Russian hackers targeting Ukrainian government agencies and businesses - including a major automotive manufacturer - have been targeting a zero-day vulnerability in the open source and widely used 7-Zip archive utility, to infect systems with credential-stealing SmokeLoader malware.

OneTrust's Ojas Rege Details Act Requirements, AI Governance Challenges
The first set of rules banning high-risk AI systems under the European Union AI Act went into effect on Sunday. Starting this week, companies are now barred from deploying AI-driven emotion recognition in the workplace and schools. OneTrust's Ojas Rege discusses the implications.

3rd Round of Layoffs in 3 Years Comes as Rival CyberArk Surpasses Okta's Valuation
Okta will execute its third round of layoffs in three years, cutting 180 employees to reallocate resources toward priorities to drive growth. The San Francisco-based identity security giant on Tuesday shared plans to reduce its staff by 3% in what has become somewhat of an annual tradition for Okta.

'Frontier AI Framework' Identifies Risk Categories, Action Plan
Meta has set new limits on the release of its advanced artificial intelligence models, establishing a framework detailing the criteria for restricting systems deemed too dangerous for public release. Meta's Frontier AI Framework identifies two risk categories: high and critical.

A vulnerability was found in CommodityRentals CD Rental Software and classified as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument cat_id leads to sql injection. This vulnerability is handled as CVE-2010-0762. The attack may be launched remotely. Furthermore, there is an exploit available.

The Age of AI Is Upon Us The current pace of technological change beggars’ belief. Generative Artificial Intelligence (GenAI), released to the world a mere two years ago, promises to eliminate much of the tedium of the digital world. Software engineers around the world are already using it to speed up their development times (making […]

The post How Imperva Infused AI Throughout Research and Development appeared first on Blog.

The post How Imperva Infused AI Throughout Research and Development appeared first on Security Boulevard.

Targets are lured into a fake interview process that convinces them to download malware needed for a virtual interview.

A vulnerability was found in Antiboard up to 0.63. It has been classified as critical. Affected is an unknown function of the file antiboard.php. The manipulation leads to sql injection. This vulnerability is traded as CVE-2004-2062. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability has been found in ID Software Quake 4 up to 1.4.2 and classified as very critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to format string. This vulnerability is known as CVE-2007-5248. The attack can be launched remotely. Furthermore, there is an exploit available.

Zyxel has issued a security advisory about actively exploited flaws in CPE Series devices, warning that it has no plans to issue fixing patches and urging users to move to actively supported models. [...]

A vulnerability classified as critical was found in Tecnick AIOCP 1.4.001. This vulnerability affects unknown code of the file cp_html2txt.php of the component Control Panel. The manipulation of the argument page leads to code injection. This vulnerability was named CVE-2009-3220. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in WordPress 2.0.3. Affected is an unknown function of the component Installation. The manipulation leads to improper privilege management. This vulnerability is traded as CVE-2006-3390. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Cisco Unified Communications Manager. Affected is the function sipSafeStrlen. The manipulation leads to denial of service. This vulnerability is traded as CVE-2009-2051. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Linux Kernel 2.6.11.8. Affected by this issue is the function do_sigaltstack. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2009-2847. An attack has to be approached locally. Furthermore, there is an exploit available.

A vulnerability was found in Sun Java System Access Manager 7.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to information disclosure. This vulnerability is known as CVE-2009-2713. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as critical was found in Apple macOS. This vulnerability affects unknown code of the component libxpc. The manipulation leads to memory corruption. This vulnerability was named CVE-2019-6218. It is possible to launch the attack on the local host. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.