Aggregator

A vulnerability described as critical has been identified in Valor Apps Easy Folder Listing Pro up to 3.7/4.4. This affects an unknown part. The manipulation results in deserialization. This vulnerability is known as CVE-2024-11145. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in lobehub lobe-chat up to 1.19.12. It has been declared as critical. Affected is an unknown function. Such manipulation leads to server-side request forgery. This vulnerability is listed as CVE-2024-32965. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability labeled as problematic has been found in ethyca fides up to 2.49.x. This vulnerability affects unknown code of the file /api/v1/user/accept-invite of the component API Endpoint. The manipulation results in client-side enforcement of server-side security. This vulnerability is reported as CVE-2024-52008. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in nofusscomputing centurion_erp up to 1.3.0. Affected is the function view_ticket_change of the component API Endpoint. Such manipulation leads to improper isolation or compartmentalization. This vulnerability is traded as CVE-2024-53855. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability was found in QNAP QTS and QuTS hero. It has been classified as problematic. This vulnerability affects unknown code. This manipulation causes null pointer dereference. This vulnerability is handled as CVE-2024-37048. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

Secret Service seizes a covert communications network near U.N. composed of sophisticated equipment, including 100K SIMs and 300 servers The U.S. Secret Service uncovered a covert communications network near the U.N. in New York, seizing 100,000 SIM cards and 300 servers. The operation, capable of sending 30 million texts per minute, could disable cellular towers […]

This post first appeared on blog.netwrix.com and was written by Istvan Molnar.
Endpoint compliance ensures devices meet security standards to avoid data breaches, legal fines, and audit failures. This article outlines key frameworks like HIPAA, PCI DSS, and NIST 800-53, highlights emerging risks, and offers practical, real-world strategies to protect your organization. Learn how to improve your security posture and stay compliant. Endpoint compliance is the ongoing … Continued

Law enforcement authorities in Europe have arrested five suspects linked to a cryptocurrency investment fraud ring that stole over €100 million ($118 million) from more than 100 victims. [...]

一位伊朗程序员在 GitHub 上记录了他使用西方 IT 服务的经历。美国对伊朗实施了制裁，禁止本国的个人和企业与伊朗打交道，违反者将面临惩罚，GitHub 一度禁止伊朗开发者访问其服务，2021 年它从美国政府获得许可，允许为伊朗开发者提供服务。这位伊朗程序员称，他曾在微软应用商店 Microsoft Store 发布了一款开源程序 EyesGuard，但有一天微软删除了他的账号移除了 EyesGuard；笔记服务 Notion 删除了所有居住在伊朗的用户的数据，即使用户以后离开伊朗，数据也不会恢复；VPN 服务 Grepular 屏蔽了伊朗 IP，理由是伊朗向俄罗斯出售无人机；除了 GitHub，另一个代码托管服务 GitLab 也屏蔽了伊朗用户账号，至今没有解禁。作者表示他记录这些经历并不是请求解除对伊朗的制裁，而是强调伊朗人民也是受害者。

Progress Software has released Flowmon ADS 12.5, an anomaly detection system set up to help organizations accelerate threat detection and provide visibility into network activity using AI-driven capabilities. Security teams are dealing with growing challenges, including rising network traffic, alert fatigue, and more sophisticated attacks. These problems are particularly difficult for midsize enterprises, where smaller IT teams and limited resources can lead to missed threats and slower responses. Flowmon ADS 12.5 addresses these challenges head-on, … More →

The post Progress Software Flowmon ADS 12.5 simplifies threat detection appeared first on Help Net Security.

对于文本生成类的大模型，类似如 GPT 等目前已经取得了革命性进展，可以生成各种各样的内容，不得不插一句，很难想象之前没有 GPT 的安全是怎么学的，目前是没有 GPT，可能很多问题自己不去询问一番都很难理解清楚 但是 GPT 这种序列到序列的模型，本质学习语言的结构和语义规律，通过解析输入序列，然后生成输出序列，而其中的过程基于一个可控性的角度，因为你永远无法预测我们会输入什么，可控性其实是较差

Identity Governance doesn't have to be complex or costly. tenfold's free Community Edition helps orgs (up to 150 users) streamline onboarding, access reviews & M365 permissions — all with a no-code IGA platform. [...]

Стоимость украденных токенов составила около 48 миллионов долларов.

The Secret Service has dismantled a sprawling hidden telecom network within a 35-miles radius in New York that could have shut down communications in New York City just as more than 150 world leaders were coming into the city for the U.N. General Assembly. The network also could have been used to send and receive encrypted messages.

The post Secret Service Shuts Down Sprawling Hidden Telecom Network in NY appeared first on Security Boulevard.

Na zo’n 500 uur succesvol proefvaren heeft de marine de nieuwe Alunaut nu officieel in de vaart genomen. Dit kleine vaartuig vervangt de verouderde Rigid Hull Inflatable Boat (RHIB) 700. Defensie kocht in samenwerking met de Koninklijke Marine 20 nieuwe exemplaren. Hiervan zijn er 12 voor de zeemacht, 6 voor de Koninklijke Marechaussee voor maritiem grenstoezicht. De laatste 2 zijn voor de Belgische marine.

Cloudflare Confidence Scorecards are now live in the Application Library. Get transparent risk ratings for SaaS and Gen-AI apps.

Introducing VibeSDK, an open-source AI "vibe coding" platform that anyone can deploy to build their own custom platform. Comes ready with code generation, sandbox environment, and project deployment.

Today, we are announcing a new approach to catching bots: using models to provide behavioral anomaly detection unique to each bot management customer and stop sophisticated bot attacks.

The following CIS Benchmarks and CIS Build Kits have been updated or recently released. We've highlighted the major updates below.

The following CIS Benchmarks and CIS Build Kits have been updated or recently released. We've highlighted the major updates below.