Aggregator

Learn about API testing best practices and find out why fuzzing has limitations for enterprises that need API security.

Threat actors with ties to North Korea have been observed delivering a previously undocumented backdoor and remote access trojan (RAT) called VeilShell as part of a campaign targeting Cambodia and likely other Southeast Asian countries. The activity, dubbed SHROUDED#SLEEP by Securonix, is believed to be the handiwork of APT37, which is also known as InkySquid, Reaper, RedEyes, Ricochet Chollima,

A vulnerability, which was classified as problematic, was found in Redis up to 7.2.5. Affected is an unknown function of the file src/util.c of the component Pattern Matching. The manipulation leads to denial of service. This vulnerability is traded as CVE-2024-31228. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Redis up to 7.2.5. This issue affects the function ACLSetSelector of the file src/acl.c of the component ACL Selector Handler. The manipulation leads to denial of service. The identification of this vulnerability is CVE-2024-31227. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

愿心中的火永不熄灭！

愿心中的火永不熄灭！

愿心中的火永不熄灭！

A vulnerability classified as problematic was found in Redis up to 7.2.5. This vulnerability affects the function bit_tohex of the file deps/lua/src/lua_bit.c. The manipulation leads to integer overflow. This vulnerability was named CVE-2024-31449. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Canonical Authd up to 0.3.4. This affects an unknown part of the component Broker Handler. The manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2024-9313. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apache Avro Java SDK up to 1.11.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Schema Parser. The manipulation leads to deserialization. This vulnerability is handled as CVE-2024-47561. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apache Commons IO up to 2.13.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component org.apache.commons.io.input.XmlStreamReader. The manipulation leads to resource consumption. This vulnerability is known as CVE-2024-47554. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

Group-IB раскрывает схему обмана, которой мошенники успешно пользовались с прошлого года.

Вспышка уже привела к сбоям в радиосвязи, ожидаются новые последствия.

Paint и Photos стали ещё умнее, но только на Copilot Plus.

The Police Service of Northern Ireland (PSNI) has been ordered to pay a £750,000 fine following a significant data breach last year. The breach involved the accidental release of the personal details of 9,400 officers and staff. Despite representations to the Information Commissioner’s Office (ICO) to reduce the penalty, the fine remains unchanged. Details of […]

The post Northern Ireland Police to Pay £750,000 Fine Following Data Breach appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.