Aggregator

​In May, Microsoft plans to roll out a new Windows scheduled task that launches automatically to help Microsoft Office apps load faster. [...]

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.1.10. Affected by this issue is the function xattr_ids. The manipulation leads to insufficient verification of data authenticity. This vulnerability is handled as CVE-2023-52933. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.1.7. Affected by this vulnerability is the function vmci_dispatch_dgs of the file drivers/misc/vmw_vmci/vmci_guest.c. The manipulation leads to deadlock. This vulnerability is known as CVE-2022-49759. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

via the comic humor & dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Square Units’ appeared first on Security Boulevard.

A vulnerability classified as critical has been found in Linux Kernel up to 6.1.8. Affected is the function local_cleanup of the component nfc. The manipulation leads to use after free. This vulnerability is traded as CVE-2023-53023. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.10.164/5.15.89/6.1.7. It has been rated as critical. This issue affects the function ieee80211_if_add. The manipulation leads to memory leak. The identification of this vulnerability is CVE-2023-53028. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.10. It has been declared as problematic. This vulnerability affects the function find_pmd_or_thp_or_none. The manipulation leads to state issue. This vulnerability was named CVE-2023-52934. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

Cybersecurity researchers have shed light on a new phishing-as-a-service (PhaaS) platform that leverages the Domain Name System (DNS) mail exchange (MX) records to serve fake login pages that impersonate about 114 brands. DNS intelligence firm Infoblox is tracking the actor behind the PhaaS, the phishing kit, and the related activity under the moniker Morphing Meerkat. "The threat actor behind

The union received a spoofed email that led to the loss of $6.4 million, much of it transferred to other accounts or to a cryptocurrency exchange.

Newly identified CoffeeLoader uses multiple evasion techniques and persistence mechanisms to deploy payloads and bypass endpoint security

Many successful phishing attacks result in a financial loss or malware infection. But falling for some phishing scams, like those currently targeting Russians searching online for organizations that are fighting the Kremlin war machine, can cost you your freedom or your life.

A recent security update for Windows Server 2025, released on February 11, 2025 (KB5051987), has caused a significant issue for users relying on Remote Desktop Protocol (RDP). The update, part of Microsoft’s February Patch Tuesday, has led to RDP sessions freezing shortly after connection, rendering mouse and keyboard inputs unresponsive. Microsoft has confirmed this problem, […]

The post Windows Server 2025 Security Update Freezes Remote Desktop Sessions Connection appeared first on Cyber Security News.

Alleged Sale of Cyber Mail Checker Tool

A new report sheds light on the most targeted WordPress plugin vulnerabilities hackers used in the first quarter of 2025 to compromise sites. [...]

A new botnet named “GorillaBot,” has orchestrated over 300,000 attack commands across more than 100 countries within a span of just three weeks. Built on the infamous Mirai botnet framework, GorillaBot represents a sophisticated malware evolution. It leverages advanced encryption and evasion techniques to target industries ranging from telecommunications to finance and education. Discovered by […]

The post GorillaBot Attacks Windows Devices With 300,000+ Attack Commands Across 100+ Countries appeared first on Cyber Security News.

Red wolf ceyber Targeted the Website of Cumhuriyet Halk Partisi (CHP)

Valve 首次通过官方数据证实 Steam 平台简体中文玩家略微超过了英语玩家。根据 Valve 开发者在 GDC 2025 上发布的 PPT：2024 年简体中文玩家占到了总玩家数的 33.7%，超过了英语玩家的 33.50%，之后是俄语玩家占 8.2%，西班牙语 4.6%，巴西语 2.8%，德语 2.5%，韩语 2.2%，法语 2.1%，日语 1.7%，土耳其语 1.7%，波兰语 1.5%，繁体中文 1%，意大利语 0.7%，泰语 0.6%，其他 3.2%。这一数据来自官方，而不是每月根据抽样调查公布的 Steam 硬件和软件调查报告。GDC 2025 完整演讲稿将在不久之后发布在 Steamworks YouTube 频道上。