Aggregator

Executive Order Gives Musk Team Hiring Authority Across Federal Government
President Donald Trump's latest executive order grants hiring authority across the federal government to his billionaire adviser Elon Musk's task force, raising concerns that the move could undermine federal cybersecurity efforts, weaken U.S. cyber defenses and leave key security positions unfilled.

Breach of GoAnywhere File Transfer App at Brightline Affected 1 Million Patients
Virtual mental health provider Brightline has agreed to pay $7 million to settle a proposed class action lawsuit involving a data breach affecting about 1 million individuals stemming from the 2023 hack by ransomware gang Clop on software vendor Fortra's GoAnywhere managed file transfer application.

CISA released twenty Industrial Control Systems (ICS) advisories on February 13, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

• ICSA-25-044-01 Siemens SIMATIC S7-1200 CPU Family
• ICSA-25-044-02 Siemens SIMATIC
• ICSA-25-044-03 Siemens SIPROTEC 5
• ICSA-25-044-04 Siemens SIPROTEC 5
• ICSA-25-044-05 Siemens SIPROTEC 5 Devices
• ICSA-25-044-06 Siemens RUGGEDCOM APE1808 Devices
• ICSA-25-044-07 Siemens Teamcenter
• ICSA-25-044-08 Siemens OpenV2G
• ICSA-25-044-09 Siemens SCALANCE W700
• ICSA-25-044-10 Siemens Questa and ModelSim
• ICSA-25-044-11 Siemens APOGEE PXC and TALON TC Series
• ICSA-25-044-12 Siemens SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor
• ICSA-25-044-13 Siemens SIMATIC PCS neo and TIA Administrator
• ICSA-25-044-14 Siemens Opcenter Intelligence
• ICSA-25-044-15 ORing IAP-420
• ICSA-25-044-16 mySCADA myPRO Manager
• ICSA-25-044-17 Outback Power Mojave Inverter
• ICSA-25-044-18 Dingtian DT-R0 Series
   
• ICSA-24-030-02 Mitsubishi Electric FA Engineering Software Products (Update C)
   
• ICSMA-25-044-01 Qardio Heart Health IOS and Android Application and QardioARM A100

CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.

•     CVE-2024-57727 SimpleHelp Path Traversal Vulnerability

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.

Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

Microsoft found that Russian state actor Seashell Blizzard has deployed an initial access subgroup to gain persistent access in a range of high-value global targets

An RA World ransomware attack in November 2024 targeting an unnamed Asian software and services company involved the use of a malicious tool exclusively used by China-based cyber espionage groups, raising the possibility that the threat actor may be moonlighting as a ransomware player in an individual capacity. "During the attack in late 2024, the attacker deployed a distinct toolset that had

Microsoft’s ongoing efforts to enhance user experience in Windows 11 have introduced native support for a variety of new archive formats via the KB5031455 update. While these changes have streamlined user workflows, they have also inadvertently opened Pandora’s box in the realm of cybersecurity, linking the operating system to potential vulnerabilities stemming from its reliance […]

The post Windows 11 Compression Features Pose libarchive Security Threats appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

小白浅谈fastjson漏洞。

A vulnerability was found in Linux Kernel up to 6.12.4. It has been rated as problematic. Affected by this issue is the function ocfs2_get_init_inode. The manipulation leads to improper initialization. This vulnerability is handled as CVE-2024-56630. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.4 and classified as critical. Affected by this issue is some unknown functionality of the component wacom. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2024-56629. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.12.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the component jfs. The manipulation leads to improper validation of array index. This vulnerability is known as CVE-2024-56595. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.4 and classified as critical. Affected by this issue is the function jfs_readdir. The manipulation leads to improper validation of array index. This vulnerability is handled as CVE-2024-56596. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.4. It has been classified as problematic. This affects the function dmt_budmin of the component jfs. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2024-56597. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.4. It has been classified as critical. Affected is the function sock_init_data. The manipulation leads to use after free. This vulnerability is traded as CVE-2024-56606. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.5. Affected is the function gs_open of the component u_serial. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2024-56670. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.12.4. This affects the function f2fs_bug_on of the file fs/f2fs/inode.c. The manipulation leads to Privilege Escalation. This vulnerability is uniquely identified as CVE-2024-56586. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.4 and classified as critical. Affected by this issue is the function debug_dma_map_sg of the component AMD GPU. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2024-56594. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.4. Affected is the function brcmf_sdiod_sglist_rw. The manipulation of the argument sd_sgentry_align leads to null pointer dereference. This vulnerability is traded as CVE-2024-56593. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.13-rc2 and classified as critical. Affected by this issue is the function cleanup_bearer of the component tipc. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2024-56661. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.