Aggregator

你可能错过的新鲜事Arc 开发商宣布转向新浏览器10 月 25 日，Arc 浏览器开发商 The Browser Company 发布一则视频，宣布将推出一款比 Arc 更加「简洁易用」的浏览器，

A vulnerability, which was classified as problematic, has been found in Jon Zeeff Lmail 2.7. This issue affects some unknown processing of the component Temp File Handler. The manipulation leads to symlink following. The identification of this vulnerability is CVE-2001-1085. Local access is required to approach this attack. Furthermore, there is an exploit available.

议题将分享斗象科技在线安全运营、实战安全服务、众包模式等一体化安全服务创新模式实践。

Участники соревнований установили рекорд на Pwn2Own Ireland.

利用MSIX安装包传播恶意软件攻击样本的详细分析

Инженеры из Веллингтона создают искусственное Солнце на Земле.

A vulnerability was found in Contact Form 7 + Telegram Plugin up to 0.8.5 on WordPress. It has been classified as problematic. Affected is an unknown function of the component Subscription Handler. The manipulation leads to missing authorization. This vulnerability is traded as CVE-2024-9629. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Vmware Spring Security up to 6.3.3 and classified as critical. This issue affects some unknown processing of the component WebFlux. The manipulation leads to improper authorization. The identification of this vulnerability is CVE-2024-38821. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

参与 SpaceX 载人航天任务的一名宇航员出现「医疗问题」并住院；抖音出手整治：严打 AI 骗取老年人行为

Защита ядра оказалась бессильной перед новым PoC-эксплойтом.

本篇文章主要以Windows域环境为基础，记录了一些在内网渗透过程中需要知道的一些基本知识点，记录较为简练概括，方便以后自己扩展学习。

ReliaQuest researchers observed Black Basta affiliates relying on Microsoft Teams to gain initial access to target networks. ReliaQuest researchers warn that Black Basta ransomware affiliates switched to Microsoft Teams, posing as IT support to deceive employees into granting access. The BlackBasta ransomware operators were spotted posing as corporate help desks and contacting employees to help […]

Связка функций требует особой настройки для предотвращения атаки с откатом обновлений.

《报告》深入剖析我国网络安全产业发展面临的总体形势。

构建高效、安全、可追溯的网络管理环境。

Filigran announces the completion of its $35 million Series B fundraise, led by global software investor Insight Partners, with continued support from existing investors Accel and Moonfire. This new round of funding comes just months after the company’s $16 million Series A, underscoring Filigran’s impressive growth and commitment to expanding its global footprint and accelerating product innovation. This funding will fuel the company’s global expansion, particularly in the United States and the Pacific region, while … More →

The post Filigran raises $35 million to drive global expansion appeared first on Help Net Security.