Aggregator

For the latest discoveries in cyber research for the week of 7th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Chinese state-sponsored hackers, dubbed “Salt Typhoon”, infiltrated US telecom companies such as Verizon, AT&T, and Lumen Technologies. The attackers gained access to systems used for court-authorized wiretaps, potentially remaining undetected for months […]

The post 7th October– Threat Intelligence Report appeared first on Check Point Research.

Russian state media VGTRK faced a major cyberattack, which a Ukrainian source claimed was conducted by Kyiv’s hackers. A Ukrainian government source told Reuters that Kyiv’s hackers are behind the cyber attack that disrupted operations at the Russian state media company VGTRK on Putin’s birthday. The All-Russia State Television and Radio Broadcasting Company (VGTRK, Russian: […]

Introduction Imagine you’re the CISO of a rapidly growing tech company. Your infrastructure is expanding daily, and with each new line of code, the potential attack surface grows. How do...

The post PTaaS vs. Bug Bounty Programs: Complementary or Competing Approaches? appeared first on Strobes Security.

The post PTaaS vs. Bug Bounty Programs: Complementary or Competing Approaches? appeared first on Security Boulevard.

AI SPERA announced that its domain and IP address threat intel platform, Criminal IP, is now integrated with Hybrid Analysis. Learn more from Criminal IP about how this brings additional insights to Hybrid Analysis. [...]

Torrance, United States / California, 7th October 2024, CyberNewsWire

The post Hybrid Analysis Utilizes Criminal IP’s Robust Domain Data for Better Malware Detection appeared first on Security Boulevard.

Creating a new office of cyber-regulation strategy is the government's best opportunity to improve security and to protect Americans in an increasingly dangerous world.

开源邮件客户端 K-9 Mail 在 2022 年 6 月宣布加入 Thunderbird 项目，它将转变为 Thunderbird on Android——Thunderbird 桌面用户期盼已久的移动客户端。K-9 Mail 维护者 Christian Ketterer (aka“cketti”)成为了 Thunderbird 的全职开发者。两年之后，Android 版 Thunderbird 终于发布了 Beta 版本。主要功能包括：浅色/深色主题，通过 OpenKeychain 应用使用 OpenPGP 加密和解密邮件，统一收件箱、启用/禁用联系人图片，选择立即、按设定的时间间隔或按需同步邮件，选择退出数据使用收集以保护隐私，等等。

Cybersecurity researchers have discovered a new botnet malware family called Gorilla (aka GorillaBot) that draws its inspiration from the leaked Mirai botnet source code. Cybersecurity firm NSFOCUS, which identified the activity last month, said the botnet "issued over 300,000 attack commands, with a shocking attack density" between September 4 and September 27, 2024. No less than 20,000

Risk managers association FERMA has warned that new EU cyber legislation means there is an inconsistent approach to incident reporting requirements

Understanding reachability is increasingly important for enterprises, as it can significantly influence their risk management strategies.

The post Reachability and Risk: Prioritizing Protection in a Complex Security Landscape appeared first on Security Boulevard.

A vulnerability classified as critical was found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Wearables. Affected by this vulnerability is an unknown functionality of the component HLOS. The manipulation leads to use after free. This vulnerability is known as CVE-2024-43047. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Wired Infrastructure and Networking. Affected is an unknown function of the component Response Frame Handler. The manipulation leads to buffer over-read. This vulnerability is traded as CVE-2024-38397. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Qualcomm Snapdragon Mobile. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper authorization. The identification of this vulnerability is CVE-2024-38425. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in TP-LINK WR740N V6. It has been declared as critical. This vulnerability affects unknown code of the file /userRpm/popupSiteSurveyRpm.htm. The manipulation of the argument ssid leads to stack-based buffer overflow. This vulnerability was named CVE-2024-46325. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in Qualcomm Snapdragon Auto MDM9628/QCA6564A/QCA6564AU/QCA6574A/QCA6574AU. It has been classified as critical. This affects an unknown part of the component MBSSID IE Handler. The manipulation leads to buffer over-read. This vulnerability is uniquely identified as CVE-2024-33071. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Qualcomm Snapdragon Auto, Snapdragon Compute and Snapdragon Mobile and classified as critical. Affected by this issue is some unknown functionality of the component User Packet Handler. The manipulation leads to use after free. This vulnerability is handled as CVE-2024-38399. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Qualcomm Snapdragon Auto MDM9628/QCA6564A/QCA6564AU/QCA6574A/QCA6574AU and classified as critical. Affected by this vulnerability is an unknown functionality of the component Response Frame Handler. The manipulation leads to buffer over-read. This vulnerability is known as CVE-2024-33070. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.