Aggregator

马斯克(Elon Musk)与巴西最高法院大法官莫赖斯（Alexandre de Moraes）之间的冲突在继续。莫赖斯正式下令暂停 X 在巴西的业务，直至 X 任命一名代表在巴西法庭上代

North Korea-linked APT exploited the recently patched Google Chrome zero-day CVE-2024-7971 to deploy the FudModule rootkit. North Korea-linked group Citrine Sleet (aka AppleJeus, Labyrinth Chollima, UNC4736, Hidden Cobra) have exploited the recently patched Google Chrome zero-day CVE-2024-7971(CVSS score 8.8) to deploy the FudModule rootkit, states Microsoft. Microsoft researchers linked with medium confidence the attacks to Citrine […]

A data breach leaked millions of people’s PII information including social security numbers online.

Defensie doneert 28 amfibische rupsvoertuigen aan Oekraïne. De zogeheten Bandvagn Vikings zijn al onderweg naar het oosten. Het materieel was in gebruik bij het Korps Mariniers. Dat heeft dan ook de Oekraïense collega’s opgeleid om met het systeem te kunnen werken. De training betrof tevens het technisch onderhoud van het materieel.

马斯克(Elon Musk)的微博平台 X/Twitter 今天有很多竞品，其中包括 Meta 的 Threads，以及联邦宇宙平台如 Mastodon，基于 AT Protocol 协议的 Bluesky。在巴西屏蔽 X 之后，Bluesky 开发者报告有大量巴西用户涌入 Bluesky，他们观察到流量创下了新高。Threads 以及 Mastodon 尚未披露是否观察到类似现象。

在当今竞争激烈的市场中，有效的营销资料不仅能提升品牌曝光度，还能显著增加客户获取率。利用 AI 技术来创建和优化这些资料，已经成为提升营销效率和效果的重要手段

安全公司 ESET 报告在自由软件 IM 客户端 Pidgin 的官方插件库发现恶意程序。被称为 ScreenShareOTR 的插件伪装成支持 Off-The-Record (OTR)协议的屏幕共享工具，但实际上会悄悄安装恶意程序 DarkGate。该恶意程序只感染 Windows 操作系统。安全研究人员建议安装了该插件的用户立即卸载并用杀毒软件完整扫描系统。Pidgin 维护者 Gary Kramlich 表示他们没有跟踪一个插件的安装次数。为防止类似事件再次发生，Pidgin 宣布从现在起将只接受采用 OSI 批准开源许可证的第三方插件。

hackingtool: ALL IN ONE Hacking Tool For Hackers by ourren

IPA: GUI analyzer for deep-diving into PDF files by ourren

更多最新文章，请访问SecWiki

A recently patched security flaw in Google Chrome and other Chromium web browsers was exploited as a zero-day by North Korean actors in a campaign designed to deliver the FudModule rootkit. The development is indicative of the persistent efforts made by the nation-state adversary, which has made a habit of incorporating rafts of Windows zero-day exploits into its arsenal in recent months.

英特尔正寻求投行帮助它度过 56 年历史上最困难的时期。芯片巨人在讨论各种方案，包括拆分芯片设计和芯片制造业务，取消部分芯片工厂项目。摩根士丹利和高盛是英特尔长期的银行合作伙伴，它们一直为其提供各种建议，包括潜在并购。自英特尔本月早些时候公布了惨淡的财报之后，相关讨论正在加紧进行。英特尔目前的市值为 860 亿美元，跌出了全球十大芯片制造商之列。2021 年英特尔的营收三倍于英伟达，2024 年英伟达的营收有望达到英特尔的两倍。

GitHub is being abused to distribute the Lumma Stealer information-stealing malware as fake fixes posted in project comments. [...]

在数字化信息爆炸的今天，如何让你的文章脱颖而出，吸引读者的眼球？答案往往隐藏在一个极为关键的因素中——标题。一个引人入胜的标题不仅能够迅速抓住读者的注意，还能

由

Permalink

The post Happy United States Labor Day Weekend 2024 / Feliz Fin de Semana del Día del Trabajo de Estados Unidos 2024 / Joyeux Fin de Semaine de la Fête du Travail aux États-Unis 2024 appeared first on Security Boulevard.

HomeChromeUnsplash Wanderer – 全新的 Unsplash 图片新标签页扩展[Chrome]

A vulnerability was found in code-projects Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. This vulnerability is handled as CVE-2024-8368. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Linux Kernel up to 6.1.106/6.6.47/6.10.6. It has been declared as critical. Affected by this vulnerability is the function kcm_release in the library include/linux/skbuff.h. The manipulation leads to use after free. This vulnerability is known as CVE-2024-44946. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

Submit #400787 / VDB-276272

虾是中国家庭餐桌上的常见美味，其 Q 弹的虾肉和鲜美的虾头让人垂涎欲滴。为了在享用虾的美味前更加安心，了解虾的身体结构、如何处理虾线、如何安全食用各个部位以及