Aggregator

Introduction Microsoft’s November 2024 Patch Tuesday addresses 87 vulnerabilities across its software suite, including critical zero-day vulnerabilities actively exploited in […]

The post Microsoft November 2024 Patch Tuesday- Critical Updates and Key Vulnerabilities appeared first on HawkEye.

A cyberattack on the parent company of several prominent U.S. supermarkets is causing issues at sto

朝鲜黑客正使用Flutter创建的木马应用来攻击苹果 macOS 系统，这些应用程序具有合法的苹果开发人员ID签名和公证。

Microsoft today released updates to plug at least 89 security holes in its Windows oper

In a critical security disclosure, it has been revealed that thousands of end-of-life (EOL) D-Link DSL-6740C routers are vulnerable to password change attacks. The vulnerability tracked as CVE-2024-11068 has been rated as critical by the TWCERT/CC, with an alarming CVSS score of 9.8. The affected routers, no longer supported by D-Link as of January 15, 2024, are […]

The post Thousands of EOL D-Link Routers Vulnerable to Password Change Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

许多CSO对其所在组织近期遭遇的安全事件原因可能一无所知，就算同样的网络攻击再来一遍，他们可能还是跟第一次一样 […]

新闻速览 •工信部：发展低空产业 安全是重要前提 •首届“数证杯”电子数据取证分析大赛报名启动 •新型勒索软件 […]

微软计划年底前停止支持 Windows 11 的 Mail、Calendar 和 People 应用，现有用户将转移到新的 Outlook for Windows 应用。Windows Mail、Calendar 和 People 应用的终止支持日期为 12 月 31 日。微软警告，停止支持后未转移到新 Outlook 的用户将无法再发送和接收电子邮件。新的 Outlook for Windows 应用于今年 8 月进入 GA 阶段，它也将最终取代桌面版 Outlook。对微软 Outlook 不感冒的用户也可以尝试开源替代 Thunderbird。

A vulnerability was found in Linux Kernel up to 6.7.1. It has been classified as problematic. Affected is the function thunderx_ocx_com_threaded_isr of the file drivers/edac/thunderx_edac.c of the component thunderx. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2023-52464. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 4.19/5.15.147/6.1.74/6.6.13/6.7.1 and classified as problematic. This vulnerability affects the function check_flow_keys_access of the component BPF. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2024-26589. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.6.13/6.7.1 and classified as critical. Affected by this vulnerability is the function pfn_hi of the component iommu. The manipulation leads to buffer overflow. This vulnerability is known as CVE-2023-52455. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.10.208/5.15.147/6.1.74/6.6.13/6.7.1. It has been declared as critical. This vulnerability affects the function is_spilled_reg of the component BPF. The manipulation leads to stack-based buffer overflow. This vulnerability was named CVE-2023-52462. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Fortinet FortiManager, FortiSwitchManager, FortiPAM, FortiProxy, FortiPortal and FortiOS. Affected is an unknown function of the component Packets Handler. The manipulation leads to missing authentication. This vulnerability is traded as CVE-2024-26011. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Fortinet FortiWeb up to 6.3.23/7.0.10/7.2.10/7.4.3/7.6.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Log Access Event Page. The manipulation leads to exposure of sensitive system information to an unauthorized control sphere. This vulnerability is known as CVE-2024-36509. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.