Aggregator

Cybersecurity firm Recorded Future has been listed as an “undesirable” organization by the Prosecutor General's Office of the Russian Federation

[This is a Guest Diary by Sahil Shaikh, an ISC intern as part of the SANS.edu BACS program]Introd

Крупнейшие компании мира стали жертвами уязвимости на сервере производителя GPS-трекеров.

Europol has published a groundbreaking report titled “Leveraging Legitimacy: How the EU’s Most Threatening Criminal Networks Abuse Legal Business Structures.”  The report uncovers the alarming extent to which organized crime groups exploit legitimate business structures to strengthen their power, evade law enforcement, and expand their illegal activities. Building on the findings of its April 2024 study, “Decoding […]

The post Europol Details on How Cyber Criminals Exploit legal businesses for their Economy appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

De aanhoudende (militaire) conflicten en geopolitieke spanningen in verschillende delen van de wereld leggen ook in 2025 een grote druk op de nationale veiligheid en maatschappelijke weerbaarheid. Tegelijkertijd vraagt ook de dreiging in Nederland van terrorisme, extremisme en criminele ondermijning volgend jaar om voortdurende alertheid. De AIVD doet daarbij zijn werk steeds meer in het grijze gebied waarin landen opereren tussen conflict en vrede. Het kabinet investeert daarom in de capaciteit van de AIVD en intensiveert met name extra in onderzoeken naar China en criminele ondermijning. Dat schrijft minister Uitermark (BZK) in de jaarplanbrief die vandaag naar de Tweede Kamer is gestuurd.

A vulnerability was suspected in Linux Kernel up to 5.10.145/5.15.67/5.19.8. Further investigation has shown that this issues is a false-positive. Please review the sources mentioned and consider not using this entry at all.

A vulnerability was found in Button Block Plugin up to 1.1.5 on WordPress. It has been rated as problematic. This issue affects some unknown processing of the component Post Handler. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2024-12560. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as critical has been found in Download Manager Plugin up to 3.3.03 on WordPress. Affected is an unknown function. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2024-11768. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was suspected in Linux Kernel up to 5.15.9/5.15.13. This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all.

身为父母，如果要给孩子一些建议，有哪些（别太多，太多了，他们懒得听）。

A vulnerability classified as problematic was found in moby 25.0.5. This vulnerability affects the function EnsureLayer of the file builder/builder-next/adapters/snapshot/layer.go. The manipulation leads to race condition. This vulnerability was named CVE-2024-36621. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in git-urls 1.0.1 and classified as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The identification of this vulnerability is CVE-2023-46402. The attack needs to be done within the local network. There is no exploit available.

A vulnerability, which was classified as critical, was found in GNU C Library on Fedora. Affected is the function getrandom. The manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2024-12455. Attacking locally is a requirement. There is no exploit available.

A vulnerability was found in Broken Link Checker Plugin up to 2.5.0 on WordPress. It has been classified as critical. This affects an unknown part. The manipulation leads to server-side request forgery. This vulnerability is uniquely identified as CVE-2024-12121. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in IBM Robotic Process Automation 21.0.1/21.0.2/21.0.3 and classified as problematic. This issue affects some unknown processing. The manipulation leads to insufficiently protected credentials. The identification of this vulnerability is CVE-2022-33954. It is possible to launch the attack on the physical device. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in wedevs WP Project Manager Plugin up to 2.6.15 on WordPress. This affects an unknown part of the file /wp-json/pm/v2/projects/1/task-lists of the component Project Task List. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2024-10548. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.