Aggregator

Protecting Firewall Capacity from DDoS and Other Threats

Netscout
10 months 4 weeks ago
Firewalls are important network devices for security and other applications. They help filter traffic based on specific criteria to prevent illegitimate users from accessing the network. They are not, however, designed specifically for distributed denial-of-service (DDoS) protection. Many networks suffer from...
Brad Christian

CVE-2024-34048 | O-RAN RIC I-Release e2mgr E2nodeConfigUpdateNotificationHandler array index

Vuldb Updates
10 months 4 weeks ago
A vulnerability was found in O-RAN RIC I-Release e2mgr. It has been declared as critical. Affected by this vulnerability is the function E2nodeConfigUpdateNotificationHandler. The manipulation leads to improper validation of array index. This vulnerability is known as CVE-2024-34048. The attack needs to be done within the local network. There is no exploit available.
vuldb.com

CVE-2016-6599 | BMC Track-It! up to 11.4 HF2 ConfigurationService Credentials credentials management (ID 146110 / EDB-43883)

Vuldb Updates
10 months 4 weeks ago
A vulnerability was found in BMC Track-It! up to 11.4 HF2. It has been classified as problematic. Affected is an unknown function of the component ConfigurationService. The manipulation leads to credentials management (Credentials). This vulnerability is traded as CVE-2016-6599. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

Vulnerabilities found in NASA’s open source software

Help Net Security
10 months 4 weeks ago

Vulnerabilities in open source software developed and used in-house by NASA could be exploited to breach their systems, claims Leon Juranić, security researcher and founder of cybersecurity startup ThreatLeap. The vulnerabilities Juranić, whose AppSec credentials include founding and leading DefenseCode, is no stranger NASA: in 2009, he discovered and reported a number of serious vulnerabilities in NASA’s Common Data Format (CDF) software library, which ended up getting fixed by the developers. His latest probing of … More →

The post Vulnerabilities found in NASA’s open source software appeared first on Help Net Security.

Zeljka Zorz

CVE-2024-50672 | Adapt Learning Adapt Authoring Tool up to 0.11.3 Mongoose find sql injection (EDB-52208)

Vuldb Updates
10 months 4 weeks ago
A vulnerability was found in Adapt Learning Adapt Authoring Tool up to 0.11.3. It has been classified as critical. Affected is the function find of the component Mongoose. The manipulation leads to sql injection. This vulnerability is traded as CVE-2024-50672. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

Windows 11 Notepad Introduces AI-Powered Writing with Copilot Integration

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
10 months 4 weeks ago

Microsoft’s venerable Notepad, a staple of Windows since the 1980s, is undergoing its most significant transformation yet. With the latest Windows 11 Insider builds, Notepad now features integrated generative AI, turning the once-basic text editor into a creative and technical assistant. The new “Write” feature allows users to summon AI-generated text, ranging from business letters […]

The post Windows 11 Notepad Introduces AI-Powered Writing with Copilot Integration appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Anupriya

Iranian Cybergroup Toufan Targets Organizations to Steal Login Credentials

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
10 months 4 weeks ago

A pro-Palestinian cybergroup called Cyber Toufan, which means “cyber storm,” has become a serious threat to Israeli groups in the changing digital battlefield of the Israel-Gaza war. Over the past year, this ideologically driven group has orchestrated over 100 breaches, focusing on sectors critical to Israel’s economy and security, including government, defense, finance, and infrastructure. […]

The post Iranian Cybergroup Toufan Targets Organizations to Steal Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

Managed ad