Aggregator

120 тысяч уже поверили в пасхальное чудо.

Credential stuffing is a pervasive and increasingly sophisticated cyberattack that exploits the widespread habit of password reuse among users. By […]

The post Understanding Credential Stuffing: A Growing Cybersecurity Threat appeared first on Security Boulevard.

从0开始学逆向

A vulnerability classified as critical has been found in Delta Electronics CNCSoft-B up to 1.0.0.4. This affects an unknown part. The manipulation leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2024-1941. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Exclusive Addons for Elementor Plugin up to 2.6.9 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Countdown Timer Widget. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-1413. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Visual Composer Premium Plugin up to 45.6.0 on WordPress. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2023-6880. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Exclusive Addons for Elementor Plugin up to 2.6.9 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-1234. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Exclusive Addons for Elementor Plugin up to 2.6.9 on WordPress. This vulnerability affects unknown code of the component Covid-19 Stats Widget. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-2028. The attack can be initiated remotely. There is no exploit available.

A vulnerability has been found in Exclusive Addons for Elementor Plugin up to 2.6.9 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Call To Action Widget. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-1414. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in Booking for Appointments and Events Calendar Plugin up to 1.0.98 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-1484. The attack may be launched remotely. There is no exploit available.

Скоро ваш Word начнёт вести себя как капризный подросток — и никто его не исправит.

Нелепая фраза из-за сбоя в оцифровке проникла в десятки научных работ и не исчезает даже в новейших моделях ИИ.

各位 Buffer 晚上好，FreeBuf 甲方群话题讨论第253期来了！

Под угрозой — сама основа мировой кибербезопасности.

Medusa: Its operations, the main factor driving its recent resurgence, which has led to warnings issued by global authorities, its targets and why it’s so dangerous.

The post Medusa Ransomware: Inside the 2025 Resurgence of One of the Internet’s Most Aggressive Threats  appeared first on Security Boulevard.

Tor Browser 项目释出了 14.5。主要变化包括：Android 版本支持 Connection Assist，加入了白俄罗斯语、保加利亚语和葡萄牙语支持。Connection Assist 被用于在无法直连 Tor 网络之后寻找和尝试连接网桥。开发者表示，为 Android 版本加入 Connection Assist 需要重构跨平台的 Tor 集成，现在这一工作基本完成。

Тайский "закон и порядок": теперь с процессором и без выходных.

Phone theft is now commonplace in London. The Met Police recently revealed that it seizes 1,000 stolen phones weekly as it cracks down on organized criminal networks driving the £50 million trade. Nationally, cases have doubled to 83,900 annually. The real issue, though, isn’t the losing of a phone – it’s what happens next. Thieves are after the valuable digital assets inside the phone. With the proper access, a stolen phone becomes an all-access pass … More →

The post The UK’s phone theft crisis is a wake-up call for digital security appeared first on Help Net Security.

据调查人员称，Smokeloader是由一个化名为“Superstar”的威胁者运行的。