Aggregator

微软OSS SSC框架提供了一条清晰的路径，它不仅帮助企业识别开源使用中的盲区，更提供了工具、流程、策略等系统化的落地方案。无论CISO、安全工程师、开发负责人、还是合规经理，这一框架都值得深入学习与借鉴。

Defensie zet tegen het einde van dit kwartaal een nieuw patrouilleschip in. Defensie en de combinatie Fugro/Damen Shipyards hebben daar afspraken over gemaakt. Het gehuurde schip vergroot tijdens patrouilles de zogeheten Situational Awareness op de Noordzee. Van de aanwezigheid moet ook een afschrikkende werking uitgaan. 

After threatening to slash support for the CVE program, CISA threw MITRE a lifeline at the last minute — extending its government contract for another 11 months. After that, it looks like it's up to the private sector to find the cash to keep it going.

海豚因海水温度升高和 1980 年代起禁用的有毒化学物多氯联苯(PCB)而死亡风险上升。多氯联苯 (PCB) 是一种持久性化学污染物，曾广泛用于工业制造，它会干扰动物生殖和免疫反应，导致人类患癌。英国从 1981 年起禁用 PCB，而全世界则在 2001 年起禁用 PCB，但它们仍然源源不断的流入海洋。英国研究人员分析 1990 -2020 年间在英国海岸搁浅的 836 只海豚尸检数据，发现每公斤鲸脂中 PCB 含量每增加 1 毫克，罹患致命传染病——如胃炎、肠炎、细菌感染、脑炎和肺炎——几率会增加 1.6%。海面温度每上升 1°C，死亡风险增加 14%。鲸脂中 PCB 浓度对海豚患病风险产生显著影响的阈值为 22 毫克/千克，但样本中的平均浓度高达 32.15 毫克/千克。

Вы даже не поймёте, в какой момент вас обвели вокруг пальца.

The Security Operations Center (SOC) is the nerve center of modern cybersecurity, responsible for detecting, analyzing, and responding to threats 24/7. However, the relentless pace, high stakes, and constant pressure to defend against sophisticated attacks can take a heavy toll on SOC analysts. Burnout is now a significant risk in many SOCs, leading to decreased […]

The post Managing Burnout in the SOC – What CISOs Can Do appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Currently trending CVE - Hype Score: 1 - In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans During loopback communication, a dangling pointer can be created in vsk->trans, potentially leading to a Use-After-Free condition. ...

The China-linked threat actor known as Mustang Panda has been attributed to a cyber attack targeting an unspecified organization in Myanmar with previously unreported tooling, highlighting continued effort by the threat actors to increase the sophistication and effectiveness of their malware. This includes updated versions of a known backdoor called TONESHELL, as well as a new lateral movement

The cybersecurity landscape is transforming rapidly, driven by evolving threats, technological advancements, and a persistent global talent shortage. By 2025, the sector faces a shortfall of over four million professionals, exacerbated by the growing complexity of attacks and the proliferation of artificial intelligence (AI) in both defense and offense. Leaders must reimagine talent strategies to […]

The post The Future of Cybersecurity Talent – Trends and Opportunities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Контроль усиливается, протоколы считаются.

De vandaag beëindigde maritieme security oefening Port Defender verliep niet alleen slagvaardiger, maar ook efficiënter. Met dank aan een nieuwe task force, die de samenwerking tussen de 3 grootste spelers verbetert. Goed nieuws voor wanneer zich echt levensbedreigende situaties of grootschalige terreur in havens of op zee voordoen.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 4.19.250/5.4.203/5.10.128/5.15.52/5.18.9. Affected by this issue is some unknown functionality. The manipulation of the argument tun_file leads to privilege escalation. This vulnerability is handled as CVE-2022-49672. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.18.12. It has been declared as problematic. Affected by this vulnerability is the function tipc_sk_create. The manipulation leads to improper update of reference count. This vulnerability is known as CVE-2022-49620. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Linux Kernel up to 5.18.12. This vulnerability affects the function sfp_probe. The manipulation leads to memory leak. This vulnerability was named CVE-2022-49619. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 5.18.9. This affects the function ad_clear_agg. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2022-49667. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.10.131/5.15.55/5.18.12 and classified as problematic. Affected by this issue is the function proc_douintvec. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2022-49641. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 5.4.207/5.10.133/5.15.57/5.18.14. Affected is an unknown function of the file igc_rd32/wr32. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2022-49605. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.18.14. This issue affects the function perf_event_set_output/perf_mmap_close. The manipulation leads to buffer overflow. The identification of this vulnerability is CVE-2022-49607. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.18.13. This issue affects some unknown processing of the component VMX. The manipulation of the argument SPEC_CTRL leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2022-49610. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.18.2 and classified as critical. This issue affects the function libipw_xmit. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2022-49544. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.