Aggregator

阿尔巴尼亚以煽动儿童暴力为由宣布封禁 TikTok 一年。11 月中旬 TikTok 上的争吵导致了一名青少年被刺死，之后政府与教师和家长举行了 1,300 次会议。总理 Edi Rama 表示封禁将在明年某个时间开始。TikTok 回应称它与这起青少年被刺案没有任何关联，肇事者或受害者都没有 TikTok 账号，诱发事件的视频是发布在另一个平台。总理办公室表示，该国是一个小国，无法迫使 TikTok 修改算法。Rama 表示该国将观察 TikTok 及其它国家对为期一年封禁的反应，再决定是否允许 TikTok 恢复运营。

A vulnerability was found in Red Hat Keycloak, JBoss Enterprise Application Platform and Single Sign-On. It has been classified as critical. This affects an unknown part of the component REST API. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2024-3656. It is possible to initiate the attack remotely. There is no exploit available.

With the increased frequency of board reporting, CISOs need to ensure their interactions are brief, productive, and valuable.

上周因创纪录的风力发电量英国电价一度跌至负值。上周二风力发电量达到创纪录的 22.4 GW，满足了英国 68% 以上的电力需求。周三凌晨5:30-6:30 a.m，半小时电价降至了每兆瓦时 6.57 英镑。英国的可再生能源已经连续四个季度满足了一半以上的电力需求。英国今年至今记录到了 131 个小时的负数电价，比去年增加了 45 个小时。风电在今年前九个月成为英国最主要的电力来源。

A vulnerability was found in Acronis Cyber Protect Cloud Agent up to 39184 on Linux. It has been rated as problematic. This issue affects some unknown processing of the component RPM Package Handler. The manipulation leads to risky cryptographic algorithm. The identification of this vulnerability is CVE-2024-55539. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Biamp Evoko Home Service up to 2.7.4. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to incorrect default permissions. This vulnerability was named CVE-2024-12903. An attack has to be approached locally. There is no exploit available.

A vulnerability was found in Global Wisdom Software ANCHOR up to 2.5.9.4/2.7.2.3. It has been classified as critical. This affects an unknown part. The manipulation leads to use of default credentials. This vulnerability is uniquely identified as CVE-2024-12902. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

The US Department of Justice has unsealed charges against Rostislav Panev, 51, a dual Russian and Israeli national, suspected of being a developer for the LockBit ransomware group. Panev was arrested in August 2024 and is currently in custody in Israel pending extradition. The charges “According to the superseding complaint, documents filed in this and related cases, and statements made in court, Panev acted as a developer of the LockBit ransomware group from its inception … More →

The post US charges suspected LockBit ransomware developer appeared first on Help Net Security.

A vulnerability was found in Adobe Flash Player and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2016-4273. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in MongoDB 2.4.0/2.4.1/2.4.2/2.4.3/2.4.4. Affected is an unknown function. The manipulation leads to improper resource management. This vulnerability is traded as CVE-2013-3969. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Что изменилось в арсенале группы вымогателей в 2024 году.

A U.S. court ruled in favor of WhatsApp against NSO Group, holding the spyware vendor liable for exploiting a flaw to deliver Pegasus spyware. WhatsApp won a legal case against NSO Group in a U.S. court over exploiting a vulnerability to deliver Pegasus spyware. Will Cathcart of WhatsApp called the ruling a major privacy victory, […]

A vulnerability was found in Avira Secure Backup 1.0.0.1. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to memory corruption. This vulnerability was named CVE-2013-6356. Attacking locally is a requirement. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cambridge Enterprise JBIG-KIT up to 2.0. It has been classified as critical. This affects the function jbg_dec_in. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2013-6369. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in OpenStack Keystone 2013.1/2013.1.1/2013.1.2/2013.1.3/2013.2. This vulnerability affects unknown code. The manipulation leads to improper access controls. This vulnerability was named CVE-2013-6391. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

Peter Shor revolutionized public-key infrastructure (PKI) using concepts that trace back to 4,000-year-old Babylonian mathematics and culminated in futuristic quantum computing. Here, we explore the math with a simple, illustrative tool to break PKI by hand. The Theme: Simple Math Meets Cybersecurity This blog delves into the math behind (breaking) cryptography, aligning with the theme […]

The post Peter Shor Broke PKI with Ancient Math, and Futuristic Quantum Computing appeared first on ColorTokens.

The post Peter Shor Broke PKI with Ancient Math, and Futuristic Quantum Computing appeared first on Security Boulevard.

A vulnerability classified as critical was found in Linux Kernel up to 6.8.1. This vulnerability affects the function clk_core_get. The manipulation leads to null pointer dereference. This vulnerability was named CVE-2024-27038. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.