Aggregator

据BleepingComputer消息，美国CISA和FBI发现，名为BlackSuit的新型勒索软件组织自2022年成立以来已累计向受害者索要了超5亿美元巨额赎金。

网络安全公司Bitdefender近日披露了两大广泛使用的太阳能管理平台中的重大安全漏洞，攻击者可造成大规模停电并破坏电力分配系统，可能影响全球20%的光伏发电，涉及190多个国家和地区的200多万个光伏电站。

法国巴黎大皇宫是负责管理法国多家博物馆和文化场所的机构。它负责监督博物馆运营的各个方面，包括展览、文化节目和运营。

1. Hunters勒索团伙公布新的受害公司 2. Play团伙公布新的受害公司 3. Cactus勒索团伙公布了新的受害公司

Как аквариумный питомец стал звездой Twitch.

KCon大会培训日回归！课程人员有限，先到先得~

漏洞猎手的招募火热进行中。

KCon大会培训日回归！课程人员有限，先到先得~

漏洞猎手的招募火热进行中。

A vulnerability classified as critical has been found in Zabbix up to 5.0.42/6.0.30/6.4.15/7.0.0rc2. Affected is an unknown function of the component Agent Application. The manipulation leads to preservation of permissions. This vulnerability is traded as CVE-2024-22121. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Zabbix Server up to 5.0.42/6.0.30/6.4.15/7.0.0rc2. It has been rated as problematic. This issue affects some unknown processing of the component SMS Notification Handler. The manipulation of the argument Number leads to command injection. The identification of this vulnerability is CVE-2024-22122. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

ReliaQuest found that Rclone, WinSCP and cURL were the top three data exfiltration tools utilized by threat actors over the past year

Новый международный стандарт противодействия кибератакам.

ADT Inc., a prominent security and automation solutions provider, reported that unauthorized actors accessed specific databases containing customer order information. The company swiftly addressed the breach, which raised concerns about data security and customer privacy. Unauthorized Access and Immediate Response ADT became aware of the breach when unauthorized actors illegally accessed customer order information databases. […]

The post ADT Data Breach: Customers Personal Information Exposed appeared first on Cyber Security News.

2024年7月，Microsoft官方发布公告，披露 CVE-2024-38077 Windows Server 远程桌面授权服务(Remote Desktop Licensing Service，简称RDL) 远程代码执行漏洞。

2024年7月，Microsoft官方发布公告，披露 CVE-2024-38077 Windows Server 远程桌面授权服务(Remote Desktop Licensing Service，简称RDL) 远程代码执行漏洞。

2024年7月，Microsoft官方发布公告，披露 CVE-2024-38077 Windows Server 远程桌面授权服务(Remote Desktop Licensing Service，简称RDL) 远程代码执行漏洞。

2024年7月，Microsoft官方发布公告，披露 CVE-2024-38077 Windows Server 远程桌面授权服务(Remote Desktop Licensing Service，简称RDL) 远程代码执行漏洞。

2024年7月，Microsoft官方发布公告，披露 CVE-2024-38077 Windows Server 远程桌面授权服务(Remote Desktop Licensing Service，简称RDL) 远程代码执行漏洞。