Aggregator

Following the takedown of RedLine Stealer by international authorities, ESET researchers are publicly releasing their research into the infostealer’s backend modules

Cyber resilience is all about how well an organization can withstand attacks and operate successfully, even while navigating cybersecurity incidents.

The post Steps Organizations Can Take to Improve Cyber Resilience appeared first on Security Boulevard.

世界知识产权组织（WIPO）公布了年度报告《世界知识产权指标（WIPI）报告》，显示 2023 年全球专利申请活动量再创新高，申请量首次突破 350 万件，同比增长 2.7%，连续第四年增长。按国家看，中国（164万件）、美国（518,364件）、日本（414,413件）、韩国（287,954件）和德国（133,053件）是全球专利申请量最多的国家。印度（64,480件）的专利申请量增长了 15.7%，排名上升一位至第六位。印度还首次在 WIPI 中的三类主要知识产权排名中都跻身前十位，专利和工业品外观设计申请量在 2018 年至 2023 年期间都增长了一倍以上，商标申请量增长了 60%。

网络安全研究人员发现了针对英国、美国、西班牙、澳大利亚和日本用户的“Xiū gǒu”网络钓鱼工具包。

A vulnerability, which was classified as problematic, was found in Philippine Long Distance Telephone SpeedSurf 504AN GAN9.8U26-4-TX-R6B018-PH.EN. This affects an unknown part of the file form2WlanSetup.cgi. The manipulation of the argument ssid leads to cross site scripting. This vulnerability is uniquely identified as CVE-2015-5992. It is possible to initiate the attack remotely. There is no exploit available.

Неуловимые кибератаки обходят даже самые современные системы безопасности.

根据发表在《Circulation》期刊上的一项研究，每天运动五分钟有助于降低血压；如果每天用 20-27 分钟的运动取代久坐行为，也可能带来具有临床意义上的血压降低。论文主要作者 Emmanuel Stamatakis 教授表示，高血压是全球最大的健康问题之一，但不同于导致心血管病死亡的其它主因，除药物治疗外，可能还存在相对容易实现的问题解决方法。高血压是全球过早死亡的主因之一，影响全球 12.8 亿成年人，可能导致中风、心脏病、心力衰竭、肾脏损伤等健康问题，由于缺乏症状，它常被称为“沉默杀手”。研究小组分析五个国家 14,761 名志愿者的健康数据，了解在一天中用一种运动行为替代另一种运动行为与血压之间的关系。参与者的大腿绑上了一个加速度计去测量活动和血压。结果发现，每天用 20-27 分的运动代替久坐行为，有助于将心血管疾病发病率降低最多 28%。

总结推荐本周的热点资讯、安全事件、一周好文和省心工具，保证大家不错过本周的每一个重点！

A vulnerability was found in Martin Diphoorn Com Ds-syndicate 1.1.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index2.php. The manipulation of the argument feed_id leads to sql injection. This vulnerability is known as CVE-2008-4623. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in XOOPS makale 0.26. This affects an unknown part of the file makale.php. The manipulation of the argument id leads to sql injection. This vulnerability is uniquely identified as CVE-2008-4653. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Limbo CMS Com Privmsg and classified as critical. This vulnerability affects unknown code of the file open.php. The manipulation of the argument id leads to sql injection. This vulnerability was named CVE-2008-6078. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in e107 CMS and classified as critical. This issue affects some unknown processing. The manipulation of the argument ue[] leads to sql injection. The identification of this vulnerability is CVE-2008-5320. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in e107 CMS up to 0.7.2. It has been classified as critical. Affected is an unknown function of the file usersettings.php. The manipulation of the argument ue[] leads to sql injection. This vulnerability is traded as CVE-2008-5320. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in rGallery plugin 1.09. This issue affects some unknown processing of the file index.php of the component Wrapper. The manipulation of the argument itemID leads to sql injection. The identification of this vulnerability is CVE-2008-4627. The attack may be initiated remotely. Furthermore, there is an exploit available.

GBounty是一款快速可靠高度可定制的Web安全漏洞检测工具，旨在帮助安全测试人员有效识别 Web App中的潜在问题，并提升应用安全性。

A key supplier for oilfields said a ransomware attack last week has caused disruptions and limited

-Lazarus组织不断更新Contagious Interview活动策略 -APT-C-08（蔓灵花）组织：多元攻击载体大揭秘 -MSI 文件滥用新趋势：新海莲花组织首度利用 MST 文件投递特马

iPhone в полицейских лабораториях начали жить своей жизнью.

A vulnerability classified as very critical was found in Hasomed Elefant. Affected by this vulnerability is an unknown functionality. The manipulation leads to use of default password. This vulnerability is known as CVE-2024-50588. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.