Aggregator

WarmCookie malware, aka BadSpace, spreads via malspam, malvertising and enables persistent access

本文介绍了EASM、CAASM、DRPS、CTEM四种攻击面管理的技术的核心点和适用场景，并提出了基于资产视图的精益安全体系建设想法

网络安全公司 Zscaler 披露，全球勒索软件事件增加了 18%，赎金支付和行业目标方面的发现令人震惊。

A vulnerability has been found in Linux Kernel 2.6.16.9 and classified as problematic. Affected by this vulnerability is the function do_tcp_setsockopt. The manipulation leads to numeric error. This vulnerability is known as CVE-2010-4165. The attack needs to be approached locally. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

使用测绘平台进行 C2 资产拓线 by ourren

谷堕大盗黑产组织最新攻击样本详细分析 by ourren

大模型安全 vs. 代码执行 by ourren

SecWiki周刊（第555期) by ourren

谈谈网络研究和工程方法 by ourren

探索Clang Static Analyzer：使用方法与源码解读 by ourren

什么是负责任的 Web 服务器扫描？ by Avenger

更多最新文章，请访问SecWiki

A vulnerability was found in Theme Horse Mags Plugin up to 1.1.6 on WordPress. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to improper control of filename for include/require statement in php program ('php remote file inclusion'). The identification of this vulnerability is CVE-2024-49701. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Revmakx Backup and Staging by WP Time Capsule Plugin up to 1.22.21 on WordPress. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to deserialization. This vulnerability was named CVE-2024-49684. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in ReneeCussack 3D Work In Progress Plugin up to 1.0.3 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2024-49657. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Michael Bourne Custom Icons for Elementor Plugin up to 0.3.3 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to unrestricted upload. This vulnerability is handled as CVE-2024-49676. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in HCL Sametime up to 12.0.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Legacy REST Service. The manipulation leads to cleartext transmission of sensitive information. This vulnerability is known as CVE-2024-30124. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Qode Interactive Qi Blocks Plugin up to 1.3.2 on WordPress. Affected is an unknown function of the file Include/Require. The manipulation leads to improper control of filename for include/require statement in php program ('php remote file inclusion'). This vulnerability is traded as CVE-2024-49690. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Dogu Pekgoz AI Image Generator for Your Content & Featured Images Plugin up to 1.1.8 on WordPress. This issue affects some unknown processing. The manipulation leads to unrestricted upload. The identification of this vulnerability is CVE-2024-49671. The attack may be initiated remotely. There is no exploit available.

Popular titles on both Google Play and Apple's App Store include hardcoded and unencrypted AWS and Azure credentials in their codebases or binaries, making them vulnerable to misuse by threat actors.

A vulnerability classified as critical was found in Vitalii Bryl iBryl Switch User Plugin up to 1.0.1 on WordPress. This vulnerability affects unknown code. The manipulation leads to authentication bypass using alternate channel. This vulnerability was named CVE-2024-49675. The attack can be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Pimcore up to 3.1.15/4.1.6. This affects an unknown part of the component Portal Engine. The manipulation leads to unprotected storage of credentials. This vulnerability is uniquely identified as CVE-2024-49370. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Fortinet FortiManager up to 7.6.0. It has been rated as very critical. Affected by this issue is some unknown functionality of the component Request Handler. The manipulation leads to missing authentication. This vulnerability is handled as CVE-2024-47575. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

本周，互联网网络安全态势整体评价为良。

Anthropic 发布了一个 AI 工具，可用于控制用户的鼠标光标去执行基本任务。该工具被直截了当的命名为 Computer Use，通过 API 与 3.5 Sonnet 大模型一起使用，能像人类一样——查看屏幕、移动光标、单击按钮和键入文本——去完成计算机上的任务。Computer Use 是通过快速连续截屏去执行操作，它要求用户授权其软件必要的访问权限，查看屏幕截图，计算移动光标到正确位置所需的垂直或水平像素数，它无法执行拖放之类常见鼠标操作。Anthropic 表示该工具有很多限制，容易出错，比如没有完成编程任务就去浏览黄石公园的照片。