Aggregator

Submit #434449 / VDB-283365

Interpol disrupts 22,000 malicious IP addresses, 59 servers, 43 electronic devices, and arrests 41 suspected cybercriminals.

Georgia, a ransomware attack disrupted Memorial Hospital and Manor’s access to its Electronic Health Record system. A ransomware attack hit Memorial Hospital and Manor in Bainbridge, Georgia, and disrupted the access to its Electronic Health Record system. Memorial Hospital and Manor is a community hospital and healthcare facility that serves Decatur County and surrounding areas […]

A vulnerability was found in RabbitMQ Server. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper access controls. This vulnerability is known as CVE-2024-51988. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in capricorn86 happy-dom up to 15.10.1. It has been classified as critical. Affected is an unknown function. The manipulation leads to code injection. This vulnerability is traded as CVE-2024-51757. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Gradio up to 5.4.x and classified as critical. This issue affects some unknown processing of the component File/UploadButton. The manipulation leads to path traversal. The identification of this vulnerability is CVE-2024-51751. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in twigphp Twig up to 3.11.1/3.14.0 and classified as problematic. This vulnerability affects the function __isset. The manipulation leads to exposure of resource. This vulnerability was named CVE-2024-51755. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in twigphp Twig up to 3.11.1/3.14.0. This affects the function __toString. The manipulation leads to exposure of resource. This vulnerability is uniquely identified as CVE-2024-51754. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

anonmoose Allegedly Leaked the Data of ROSSKO

A Threat Actor is Allegedly Selling Citrix Access to an Unidentified Company in Germany

A vulnerability was found in FtpLocate 2.02. It has been classified as critical. Affected is an unknown function of the file flsearch.pl. The manipulation of the argument fsite leads to improper privilege management. This vulnerability is traded as CVE-2005-2420. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Lincoln University Has Been Claimed a Victim to MEOW Ransomware

Authors/Presenters: Yisroel Mirsky

Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.

Permalink

The post DEF CON 32 – Your AI Assistant Has A Big Mouth: A New Side Channel Attack appeared first on Security Boulevard.

新闻速览•《终端计算机通用安全技术规范》等3项网络安全国家标准获批发布•OWASP推出三大AI应用安全指南 全方位应对生成式AI风险•美国联邦机构发布全新零信任数据安全指南•突破性进展！Google

当前，随着数字经济的快速发展，数字中国的建设在各行各业中蓬勃推进。金融作为数字化转型的先锋行业，其探索已经从浅层的流程优化逐步深入到更为全面、深刻的系统革新。金融业务需要快速响应市场变化，推动业务的高

A vulnerability classified as problematic has been found in Idera Uptime Infrastructure Monitor up to 7.6. Affected is an unknown function of the component up.time Client. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2015-2896. It is possible to launch the attack remotely. There is no exploit available.

Учёные проверили концепцию устойчивого транспорта в вакуумной среде.

如今，刷脸支付已悄然成为热门支付方式之一，但刷脸支付的安全保障却未得到应有重视。近期，某市地铁站自动售货机等一大批设备供应商被有关部门约谈，要求全面整改，这无疑给“不设防”的刷脸支付敲响了警钟。

在数字化转型的大潮中，中间件的管理与维护成为企业IT架构中的关键环节。面对复杂多变的业务需求和信创战略的深入实施，宝兰德推出了中间件统一管理平台，为信创环境下各种商用、开源、云上、云下的中间件运维管理带来了创新性的改变。