Aggregator

与朝鲜相关的恶意软件 FASTCash正利用针对Linux的新变体实施攻击，目的是窃取资金。

Google has announced a significant security update for its Chrome browser, addressing 17 vulnerabilities in the latest build. The update, which affects the Stable and Extended Stable channels, will roll out over the coming days and weeks for Windows, Mac, and Linux users. Update Details The Stable channel has been updated to versions 130.0.6723.58/.59 for […]

The post Chrome Security Update, 17 Vulnerabilities Patched appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Akeyless announced its Unified Secrets and Machine Identity Platform, designed to address the leading cause of breaches—compromised identity credentials. Organizations are more exposed than ever as machine identities far outnumber human identities. High-profile breaches in 2024 demonstrate the risks of unsecured machine identities and compromised secrets. As machines —such as applications, containers, and services—proliferate, each carries a unique identity. These machine identities often use multiple secrets, like API keys or certificates, to authenticate securely. When left … More →

The post Akeyless unveils Unified Secrets and Machine Identity Platform appeared first on Help Net Security.

Name: CTF MetaRed Mexico Anuies-TIC 2024 (an CTF Internacional MetaRed event.)
Date: Oct. 15, 2024, 3 p.m. — 16 Oct. 2024, 03:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctfd.anuies.mx/
Rating weight: 0.00
Event organizers: UV-CSIRT

“Hey, wanna chat?” This innocent phrase can take on a sinister meaning when it comes from an adult to a child online – and even be the start of a predatory relationship

Какие секреты таят в себе атаки CounterSEVeillance и TDXDown?

NASA、NOAA 和 Solar Cycle Prediction Panel 周二宣布，太阳活动进入极大期，预计会持续到明年。太阳周期是太阳在高低磁场活动之间转变的自然周期，一个周期平均约 11 年。在太阳磁场活动的高峰期，磁极会发生翻转，这相当于地球南北磁极互换。在太阳活动极小期，其表面几乎没有黑子；而在极大期，黑子会大量出现。2024 年 5 月，太阳耀斑持续爆发，日冕物质抛射 (CME) 向地球发射带电粒子云和磁场，形成了 20 年以来地球最强的地磁风暴，产生了可能也是过去 500 年有记录以来最强的极光。科学家预计，太阳活动高峰期将持续一年左右，之后太阳将进入活动的低谷。

Cassini – последняя миссия центра Льюиса и толчок для новых открытий.

A vulnerability, which was classified as very critical, was found in SUSE Rancher up to 2.7.13/2.8.4. Affected is an unknown function. The manipulation leads to improper authentication. This vulnerability is traded as CVE-2023-22650. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

台积电市值再触万亿美元；微信宣布小程序翻译功能上线；文远知行发布全新量产 Robotaxi 车型。

A vulnerability, which was classified as problematic, has been found in paytiumsupport Paytium Plugin up to 4.3.7 on WordPress. This issue affects the function create_mollie_profile. The manipulation leads to missing authorization. The identification of this vulnerability is CVE-2023-7294. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic was found in paytiumsupport Paytium Plugin up to 4.3.7 on WordPress. This vulnerability affects the function check_mollie_account_details. The manipulation leads to missing authorization. This vulnerability was named CVE-2023-7293. The attack can be initiated remotely. There is no exploit available.

Брешь в безопасности мессенджера позволяет узнать ОС и устройства собеседника.

A vulnerability classified as problematic has been found in File Manager Pro Plugin up to 8.3.9 on WordPress. This affects the function mk_file_folder_manager_shortcode of the component Shortcode Handler. The manipulation leads to unrestricted upload. This vulnerability is uniquely identified as CVE-2024-8746. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in SolarWinds Serv-U up to 15.4.2 HF2. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-45714. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in SolarWinds Platform up to 2024.2.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Edit Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-45715. The attack can be launched remotely. There is no exploit available.