Aggregator

This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.

Threat Attack Daily - 18th of June 2025

Why traditional SOC playbooks and AI agents fall short. Learn how Morpheus AI delivers autonomous security operations without the complexity.

The post Beyond Playbooks and AI Agents: Embracing Persistent, Autonomous Security Operations appeared first on D3 Security.

The post Beyond Playbooks and AI Agents: Embracing Persistent, Autonomous Security Operations appeared first on Security Boulevard.

A pair of AI tools advertised on hacking forums were developed using commercial AI models from xAI and Mistral, according to Cato Networks.

The post Researchers say AI hacking tools sold online were powered by Grok, Mixtral appeared first on CyberScoop.

Ransomware Attack Update for the 17th of June 2025

在安全开发流程（SDL）中，安全培训的定位既要 “知识传递” ，又要是 “能力建设”。通过覆盖全角色、全流程的体系化培训，将安全意识与技能转化为开发团队的内生能力，这是安全培训的终极目标。 安全培训几乎贯穿了整个SDL，包括安全规范、标准的宣传培训，亦可是安全设计、威胁分析的技能培训，还是安全工具的使用培训、漏洞修复培训等。不过，有三条经验可以借鉴： 1、根据培训群体，定制针对性的课件才会更加有效果； 2、借助公司组织，比如技术学院等联合扩大培训范围； 3、为了更好效果，可以设置考试甚至将内容融入检测。 为了推行SDL，安全培训必不可少，尤其是在一个技术氛围浓厚的团队中，很容易忽视或轻视此活动。 1、SDL 100问 SDL100问：我与SDL的故事 SAST误报太高，如何解决？ SDL需要哪些人参与？ SDL如何做成平台化以及价值？ 安全SDK提供安全API是怎么做的？ 安全测试，测不出逻辑漏洞怎么办？ 如何逐步建设XAST安全测试工具？ 如何设计安全开发平台的架构和功能？ 大家都有哪些SDL运营指标？ 业务系统是否可以带漏洞上线？ 按千行代码漏洞数进行量化，如何制定指标？ SDL 72/100问：如何定位安全与业务的关系？ 2、SDL创新实践 首发！“ 研发安全运营 ” 架构研究与实践 DevSecOps实施关键：研发安全团队 DevSecOps实施关键：研发安全流程 DevSecOps实施关键：研发安全规范 DevSecOps实施关键：研发安全工具 从安全视角，看研发安全 数字化转型下研发安全痛点 一个思考：安全测试驱动产品安全？

Last week at Microsoft Build, Azure CTO Mark Russinovich made headlines by telling the truth.

Related: A basis for AI optimism

In a rare moment of public candor from a Big Tech executive, Russinovich warned that current AI architectures—particularly … (more…)

The post MY TAKE: Microsoft takes ownership of AI risk — Google, Meta, Amazon, OpenAI look the other way first appeared on The Last Watchdog.

The post MY TAKE: Microsoft takes ownership of AI risk — Google, Meta, Amazon, OpenAI look the other way appeared first on Security Boulevard.

There’s no room for guesswork in today’s data center operations. Modern IT environments demand tools that provide real-time insights, predictive analytics, and seamless integration to ensure uptime and efficiency. By leveraging cutting-edge SaaS-based DCIM solutions, you gain holistic visibility into your infrastructure, enabling proactive risk management and optimized performance—key factors for staying ahead in a competitive landscape.

The post Why SaaS DCIM is the Perfect Fit for Modern Data Centers appeared first on Hyperview.

The post Why SaaS DCIM is the Perfect Fit for Modern Data Centers appeared first on Security Boulevard.

A vulnerability classified as problematic was found in Apple macOS. This vulnerability affects unknown code of the component WebKit. The manipulation leads to privilege escalation. This vulnerability was named CVE-2023-40385. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Apple macOS and classified as problematic. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manipulation leads to privilege escalation. This vulnerability is known as CVE-2023-40411. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple iOS and iPadOS and classified as problematic. Affected by this issue is some unknown functionality of the component Private Relay Handler. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2023-40385. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple Safari. It has been classified as problematic. This affects an unknown part of the component Private Relay Handler. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2023-40385. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple macOS up to 11.7.4/12.6.3/13.2. It has been declared as problematic. This vulnerability affects unknown code of the component App. The manipulation leads to improper access controls. This vulnerability was named CVE-2023-28197. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Elite CRM 1.2.11. This issue affects some unknown processing of the file /ngs/login. The manipulation of the argument Language leads to cross site scripting. The identification of this vulnerability is CVE-2022-40361. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Apple macOS up to 13.2. Affected is an unknown function of the component App. The manipulation leads to path traversal. This vulnerability is traded as CVE-2023-40383. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Totolink A3300R 17.0.0cu.557_B20221024. Affected is the function setDmzCfg. The manipulation of the argument ip leads to command injection. This vulnerability is traded as CVE-2024-23060. The attack needs to be initiated within the local network. There is no exploit available.

A vulnerability classified as problematic was found in Verytops Verydows 2.0. Affected by this vulnerability is an unknown functionality of the file /protected/controller/backend/role_controller. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2023-51949. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Emlog Pro 2.1.14. Affected is an unknown function of the file /admin/article.php?action=write. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2023-41619. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Knovos Discovery 22.67.0. This affects an unknown part of the file /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2023-47459. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Huawei HarmonyOS and EMUI. Affected by this issue is some unknown functionality. The manipulation leads to authentication bypass by spoofing. This vulnerability is handled as CVE-2023-44117. The attack needs to be approached within the local network. There is no exploit available.