Aggregator

用于代码分析的大型语言模型：LLMs真的能胜任吗？ by ourren

RTL-Breaker: 评估LLM在HDL代码生成中对抗后门攻击的安全性 by ourren

更多最新文章，请访问SecWiki

WPinfo 模块用法 1

The S2 Group Intelligence team has uncovered a Russian-origin malware known as Snake Keylogger, a stealer coded in .NET, leveraging legitimate Java utilities to bypass security tools. This operation, distributed via a Malware as a Service (MaaS) model, targets diverse victims, including companies, governments, and individuals, with a particular focus on the oil industry during […]

The post Snake Keyloggers Exploit Java Utilities to Evade Detection by Security Tools appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

De geopolitieke strijd speelt zich steeds meer af in de ruimte. Daarom heet het Commando Luchtstrijdkrachten (CLSK) sinds vandaag Commando Lucht- en Ruimtestrijdkrachten (CLRS).

A vulnerability classified as critical was found in Linux Kernel up to 5.4.201/5.10.126/5.15.50/5.18.7. This vulnerability affects the function sk_to_full_sk. The manipulation leads to improper update of reference count. This vulnerability was named CVE-2022-49697. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 5.4.188/5.10.109/5.15.32/5.16.18/5.17.1 and classified as problematic. Affected by this vulnerability is the function tcp_bpf_send_verdict. The manipulation leads to privilege escalation. This vulnerability is known as CVE-2022-49204. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 5.18.2. This affects the function create_var_ref. The manipulation leads to double free. This vulnerability is uniquely identified as CVE-2022-49410. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Linux Kernel up to 5.4.199/5.10.123/5.15.48/5.18.5. Affected by this vulnerability is the function BITS_PER_LONG. The manipulation leads to insufficient verification of data authenticity. This vulnerability is known as CVE-2022-49710. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.17.3. It has been rated as problematic. This issue affects the function skb_headlen in the library include/linux/skbuff.h. The manipulation leads to privilege escalation. The identification of this vulnerability is CVE-2022-49066. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.10. This affects the function iscsi_sw_tcp_session_create. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2023-52974. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.18.2. Affected by this issue is the function hfi1_write_iter of the component RDMA. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2022-49429. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

Cloudflare now blocks AI web crawlers by default, requiring permission from site owners for access

By the end of July 2025, all Microsoft Defender for Office 365 customers should be protected from email bombing attacks by default, Microsoft has announced on Monday. What is email bombing? Email bombing (aka spam bombing) is an attack technique that results in large volumes of email messages being sent to one or more target email addresses. It used to be performed by signing the target email address up to email list subscriptions, but these … More →

The post Microsoft introduces protection against email bombing appeared first on Help Net Security.

Мошенники придумали, как обчистить вас на первом «свидании».

Red Canary's monthly roundup of upcoming security conferences and calls for papers (CFP) submission deadlines

The Federal Bureau of Investigation (FBI) has issued a warning about a scam where criminals pretend to be…

Alleged Data Breach of DayTrans Shuttle Provider

Что же произойдёт с теми, кто не успеет эвакуировать свои данные?

A vulnerability was found in Samsung Mobile Processor, Wearable Processor and Modem Exynos. It has been rated as critical. This issue affects some unknown processing of the component GPRS Protocol Handler. The manipulation leads to out-of-bounds write. The identification of this vulnerability is CVE-2024-45185. The attack needs to be initiated within the local network. There is no exploit available.

A vulnerability has been found in radare2 5.8.8 and classified as critical. Affected by this vulnerability is the function parse_die. The manipulation leads to buffer overflow. This vulnerability is known as CVE-2024-29645. The attack can only be initiated within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.