Aggregator

2026年10月31日 09:00加密货币, 科技资讯01.02K

Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has been attributed by CrowdStrike to a China-based "targeted intrusion adversary" it tracks under the moniker Vapor Panda (previously VexatiousTemper). First identified in

North Korea’s TraderTraitor group drained about $6.36 billion from Binance wallets across ten blockchains on October 29, 2026. TRM Labs, which published the findings, calls it the largest crypto theft on record. TRM Labs says the total is about four times the $1.5 billion Bybit heist of February 2025. North Korean hackers Binance theft According […]

The post North Korean Hackers Steal $6.36 Billion From Binance in Largest Crypto Hack Ever appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

eCapture 新版支持龙芯架构，text 模式新增 pcapng 数据源，借助 eCapture Decryptor 实时解密、重组完整 HTTP 消息，让 HTTPS 排查更直观，并修复丢包、配置重载及 Android 打包问题。

本文是10月16日比的数信杯数据安全大赛 数据安全个人赛的解题报告，比赛体量很大，主要包含了数据安全领域的WEB安全，AI安全 ，工控安全，量子安全，无人机安全，Reverse，Misc。

对自研政务 RAG 系统（gov-rag-demo）做白盒代码审计，发现间接提示注入、权限参数客户端可控、会话 ID 无鉴权、政务高频实体脱敏不足 4 类真实缺陷，定位到行号并完成修复。78 条业务评测用例保持 100% 零回归，安全专项断言全过。附完整复现脚本与修复后状态。

Старую схему распространения троянов приспособили для новой аудитории программных помощников.

很基础的利用

A vulnerability was found in Linux Kernel up to 6.6.60/6.11.7 and classified as critical. This vulnerability affects the function scmi_bus_notifier. Executing a manipulation can lead to use after free. This vulnerability is registered as CVE-2024-53068. The attack requires access to the local network. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.6.61/6.11.8. Affected is the function tcp_write_timer_handler of the component SMB Client. The manipulation leads to improper update of reference count. This vulnerability is listed as CVE-2024-53095. The attack must be carried out from within the local network. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.61/6.11.8. Affected by this vulnerability is the function tls_sw_ctx_rx of the component bpf. The manipulation results in memory corruption. This vulnerability is cataloged as CVE-2024-53091. The attack must originate from the local network. There is no exploit available. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.61/6.11.8 and classified as critical. This affects the function sendpage_ok of the component RDMA. Such manipulation leads to stack-based buffer overflow. This vulnerability is documented as CVE-2024-53094. The attack requires being on the local network. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.62/6.11.9. Impacted is the function onecell_data.num_domains of the component pmdomain. This manipulation causes denial of service. This vulnerability is registered as CVE-2024-53134. The attack requires access to the local network. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.63/6.11.10/6.12.1. This issue affects some unknown processing of the component TCP Connection Handler. The manipulation leads to use after free. This vulnerability is listed as CVE-2024-53168. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability marked as problematic has been reported in Linux Kernel up to 6.6.63/6.11.10/6.12.1. The affected element is the function open_cached_dir of the component smb. This manipulation causes improper update of reference count. This vulnerability is registered as CVE-2024-53178. The attack requires access to the local network. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.6.63/6.11.10/6.12.1. This impacts the function open_cached_dir of the component smb. Executing a manipulation can lead to use after free. This vulnerability appears as CVE-2024-53177. The attacker needs to be present on the local network. There is no available exploit. Upgrading the affected component is advised.

A vulnerability classified as critical was found in Linux Kernel up to 6.12.1. Affected by this issue is the function cifs_mount of the component SMB Client. The manipulation results in use after free. This vulnerability is reported as CVE-2024-53179. The attacker must have access to the local network to execute the attack. No exploit exists. Upgrading the affected component is advised.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.63/6.11.10/6.12.1. Affected by this vulnerability is an unknown functionality of the component nfsd. Executing a manipulation can lead to use after free. This vulnerability is tracked as CVE-2024-53216. The attack is only possible within the local network. No exploit exists. The affected component should be upgraded.

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.6.63/6.12.3. This impacts the function remove_full. The manipulation leads to allocation of resources. This vulnerability is traded as CVE-2024-56566. Access to the local network is required for this attack to succeed. There is no exploit available. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Linux Kernel up to 6.6.65/6.12.4. The affected element is the function migrate_enable. Executing a manipulation can lead to privilege escalation. This vulnerability is registered as CVE-2024-56583. The attack requires access to the local network. No exploit is available. It is advisable to upgrade the affected component.