Aggregator

11月14日(周四)15:00-16:00不见不散！

Cybersecurity researchers have flagged a new ransomware family called Ymir that was deployed in an attack two days after systems were compromised by a stealer malware called RustyStealer. "Ymir ransomware introduces a unique combination of technical features and tactics that enhance its effectiveness," Russian cybersecurity vendor Kaspersky said. "Threat actors leveraged an unconventional blend

在当今数字化转型的背景下，云计算、物联网和人工智能等新兴技术的广泛应用，使得企业的攻击面呈指数级扩展和复杂化。 […]

新闻速览 •商用密码应用安全性评估试点工作结束，112家密评机构名单正式发布 •利用ZIP文件拼接技术规避安全 […]

Информация о покупателях выставлена на онлайн-форуме.

A vulnerability was found in strongSwan up to 5.3.3 and classified as critical. This issue affects some unknown processing of the component eap-mschapv2 Plugin. The manipulation leads to improper input validation. The identification of this vulnerability is CVE-2015-8023. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Xscreensaver up to 5.33 and classified as problematic. This issue affects some unknown processing of the file driver/subprocs.c of the component Monitor Handler. The manipulation leads to improper access controls. The identification of this vulnerability is CVE-2015-8025. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Adobe Flash Player. Affected is an unknown function of the component MPEG4 Data Handler. The manipulation leads to use after free. This vulnerability is traded as CVE-2015-8821. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Adobe Flash Player. Affected by this vulnerability is an unknown functionality of the component MPEG4 Data Handler. The manipulation leads to use after free. This vulnerability is known as CVE-2015-8822. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe Flash Player. It has been classified as critical. Affected is an unknown function of the component TextField Handler. The manipulation leads to use after free. This vulnerability is traded as CVE-2015-8823. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe Flash Player. It has been rated as critical. This issue affects some unknown processing of the component MPEG4 Data Handler. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2015-8820. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

一名黑客在非法论坛上发布了包含数百万条记录的海量数据集，这些信息很可能是在去年的 MOVEit 漏洞黑客攻击狂潮中被窃取的。

基于奇安信威胁雷达的测绘分析，从 2022 年以来，金眼狗一直是对国内攻击频率最高的几个组织之一。本文将对最近几年捕获到的金眼狗样本以及攻击手法进行介绍，并讨论金眼狗的常用攻击手法和样本演变。

Не защищенная паролем база оказалась доступной для всех.

Flare recently hosted our first Threat Intel Workshop with Senior Threat Intelligence Researche