Aggregator

'Dogequest' Site Provided Tesla Owners Addresses, Names and Phone Numbers
The White House slammed a website that purported to reveal the names, addresses and phone numbers of Tesla owners - unless they showed proof of selling their vehicles made by Elon Musk's car company - amid growing criticism over his efforts to sharply reduce the size of the federal government.

Cyber Agency Urges Critical Infrastructure Operators to Migrate Within the Deadline
The British cybersecurity agency urged critical infrastructure operators to adapt to post-quantum cryptography by 2035 as it and other government agencies prepare for the inevitability of quantum computers capable of breaking current encryption algorithms.

发表在《自然》期刊上的一项研究发现，鹦鹉和人类产生复杂声音的大脑机制相似。人类言语是一种复杂的交流形式，需要精准控制发声器官来产词汇。人类不是唯一能够发声的生物，鸟类也能以这种形式交流，但方式不同。其中虎皮鹦鹉能够发出许多种声音，包括模仿人类说话，让研究者推测这些鸟类与人类发声背后的神经过程可能类似。研究人员分析了鹦鹉和鸣禽(斑胸草雀，与虎皮鹦鹉相比发声学习能力有限)的神经记录，以揭示大脑如何编码发声。他们发现，这两种鸟用不同的脑区控制发声。其中虎皮鹦鹉用前弓状皮质的中央核，它经脑干连接鸟的鸣管(鸟的发声器官)，从而产生多种不同发声。

Apple получила список 17000 жертв шпионажа.

Спиновую жидкость Китаева наконец удалось разглядеть во всей красе.

It is with great pleasure and gratitude that we announce our victory at the Cybersecurity Excellence Awards 2025, an annual competition for individuals and companies that stand out in the field of information security held by a major online community Cybersecurity Insiders.  Our service, ANY.RUN Threat Intelligence Lookup, was named best among leading threat intelligence […]

The post TI Lookup Named Best Threat Intelligence Service at Cybersecurity Excellence Awards appeared first on ANY.RUN's Cybersecurity Blog.

A vulnerability was found in Elementor Website Builder Plugin up to 3.22.1 on WordPress. It has been classified as critical. Affected is an unknown function. The manipulation leads to path traversal. This vulnerability is traded as CVE-2024-37437. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 16.11.4/17.0.2/17.1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to improper restriction of rendered ui layers. This vulnerability is traded as CVE-2024-2177. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Citrix NetScaler ADC and NetScaler Gateway. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to open redirect. This vulnerability is handled as CVE-2024-5492. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in OpenJPEG. This affects an unknown part of the component File Handler. The manipulation leads to resource consumption. This vulnerability is uniquely identified as CVE-2023-39328. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as critical was found in Mozilla Firefox up to 127.x. Affected by this vulnerability is an unknown functionality. The manipulation leads to memory corruption. This vulnerability is known as CVE-2024-6604. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

The Babuk ransomware group has recently claimed responsibility for a sophisticated cyberattack on Orange, a leading global telecommunications company. According to an exclusive interview with SuspectFile.com, Babuk exploited a zero-day vulnerability in Orange’s systems to gain initial access to the company’s network. This vulnerability allowed them to exfiltrate sensitive data, which was later sold to […]

The post Babuk Ransomware Group Claims Attack on Telecommunication Firm Orange appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

New NCSC guidance sets out a three-phase migration to post-quantum cryptography, designed to ensure all systems are protected from quantum attacks by 2035

A vulnerability was found in IBM AIX 7.2/7.3. It has been classified as very critical. Affected is an unknown function of the component Nimesis NIM Master Service. The manipulation leads to process control. This vulnerability is traded as CVE-2024-56346. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in IBM AIX 7.2/7.3. It has been declared as very critical. Affected by this vulnerability is an unknown functionality of the component SSL TLS Protection Mechanism. The manipulation leads to process control. This vulnerability is known as CVE-2024-56347. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding a critical vulnerability found in Edimax IC-7100 IP cameras. The alert centers on an OS command injection vulnerability due to improper input sanitization, which allows malicious actors to send specially crafted requests and achieve remote code execution on affected devices. This severe […]

The post CISA Alerts on Edimax IP Camera OS Command Injection Exploit appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

六国政府疑似使用以色列Paragon的Graphite间谍软件，窃取即时通讯数据。

Currently trending CVE - Hype Score: 1 - Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device

The Chinese Advanced Persistent Threat (APT) group known as Salt Typhoon, also referred to as FamousSparrow, GhostEmperor, Earth Estries, and UNC2286, has been actively targeting critical sectors worldwide. This group has been particularly focused on telecommunications and government entities across the United States, the Asia-Pacific region, the Middle East, and South Africa since at least […]

The post Chinese “Salt Typhoon” Hackers Exploit Exchange Vulnerabilities to Target Organizations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity Relies on Visualization Raw data often tells a story that’s hidden in plain sight. No matter how accurate or comprehensive, numbers on a spreadsheet can easily blur into an incomprehensible haze when patterns and anomalies are buried deep within thousands or millions of rows.  The human brain processes visuals 60,000 times faster than text, […]

The post How Data Visualization Helps Prevent Cyber Attacks appeared first on Centraleyes.

The post How Data Visualization Helps Prevent Cyber Attacks appeared first on Security Boulevard.