Aggregator

Hiatus Could Embolden Moscow
Reports suggesting that the U.S. federal government is going soft on Russia in cyberspace sent shockwaves through the cybersecurity community. Resuming computer network attacks and other exploitation efforts after a pause isn't as simple as flipping a switch.

Code of Practice for Software Vendors Sets Baseline Security Expectations
A British government proposal to strengthen software supply chain security received positive feedback from vendors who said voluntary best practices could strengthen cyber defenses. The guidelines suggest requiring multifactor authentication for developers and timely vulnerability patching.

Gartner's Bart Willemsen on Need to Adopt Post-Quantum Cryptography
Nation-state adversaries will likely harvest stolen encrypted data for decryption using quantum decryption, when available. Bart Willemsen, vice president analyst at Gartner, urges enterprises to transition to post-quantum cryptography algorithms to safeguard their data.

Author/Presenter: Jeffrey Knockel, Mona Wang

Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.

Permalink

The post DEF CON 32 – War Stories – Breaking Network Crypto In Popular Chinese Keyboard Apps appeared first on Security Boulevard.

Windows RPC服务漏洞挖掘之旅 by ourren

AI大模型代码审计-Java漏洞挖掘 by ourren

基于eBPF的安全可信协议栈 by ourren

利用异构信息网络增强对混淆HTTPS隧道流量的检测 by ourren

更多最新文章，请访问SecWiki

JumboJet Claims to be Selling a TP-Link RCE Private 0-day Exploit (Video)

The China-linked threat actor behind the zero-day exploitation of security flaws in Microsoft Exchange servers in January 2021 has shifted its tactics to target the information technology (IT) supply chain as a means to obtain initial access to corporate networks. That's according to new findings from the Microsoft Threat Intelligence team, which said the Silk Typhoon (formerly Hafnium) hacking

DXPLOIT Defaced the Website of V & P Solution S.r.l

A vulnerability, which was classified as problematic, was found in WP Show Posts Plugin up to 1.1.5 on WordPress. Affected is an unknown function. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2023-6731. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in WP ULike Plugin up to 4.6.9 on WordPress and classified as critical. Affected by this issue is some unknown functionality of the component Shortcode Handler. The manipulation leads to sql injection. This vulnerability is handled as CVE-2024-1797. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in WP ULike Plugin up to 4.6.9 on WordPress. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-1759. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in WP ULike Plugin up to 4.6.9 on WordPress. Affected by this issue is some unknown functionality of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-1572. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in Linux Kernel up to 6.6.22/6.7.10/6.8.1 and classified as problematic. This vulnerability affects unknown code of the file net/core/xdp.c of the component vmxnet3. The manipulation leads to Privilege Escalation. This vulnerability was named CVE-2024-27026. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Exclusive Addons Elementor Plugin up to 2.6.9.1 on WordPress and classified as problematic. This issue affects some unknown processing. The manipulation leads to missing authorization. The identification of this vulnerability is CVE-2024-33914. The attack may be initiated remotely. There is no exploit available.

Eric Gan, who last month filed a lawsuit against top Cybereason investors for rejecting multiple financing plans, reportedly resigned as the company's CEO after months of turmoil within the cybersecurity company's boardroom.

The post Cybereason CEO Resigns Amid Funding Dispute with Investors appeared first on Security Boulevard.

YouTube warns that scammers are using an AI-generated video featuring the company's CEO in phishing attacks to steal creators' credentials. [...]

#NVMS-LFI #NSCP(NSClient)权限提升 #Chameleon反向shell #regsvcs.exe #DLL注入权限提升

United States Sanctions Nemesis Darknet Market Admin with 49 Crypto Addresses

A vulnerability, which was classified as problematic, was found in Perforce Gliffy up to 4.14.0-6. Affected is an unknown function of the component Signup. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2025-1714. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as very critical, has been found in OpenText Identity Manager Advanced Edition up to 4.8.7.0102/4.9.0.0. This issue affects some unknown processing. The manipulation leads to insufficiently protected credentials. The identification of this vulnerability is CVE-2024-12799. The attack may be initiated remotely. There is no exploit available.