Aggregator

针对传统异常流量检测方法在面对复杂多样的新型网络攻击时存在的数据特征提取困难、准确率低、误报率高和运行成本高等问题。

透明行动组织 Distributed of Denial of Secrets (DDoSecrets) 的一位联合创始人曾是暗网毒枭。Thomas White 是丝绸之路 2.0 的管理员，因持有儿童色情材料而被起诉，根据警方公布的聊天记录，他曾设想建立儿童色情网站以及为恋童癖开设网站，他被判入狱五年零四个月。在服刑五年之后，他公开接受采访，表达了对丝绸之路创始人 Ross Ulbricht 的同情，认为对其的刑期过于严重。 DDoSecrets 填补了 Wikileaks 的空白，是目前最大发布泄密数据的平台。它的另一位联合创始人是 Emma Best。

The U.S. DoJ arrested a Tennessee man for running a “laptop farm” that enabled North Korea-linked IT workers to obtain remote jobs with American companies. The U.S. Justice Department arrested Matthew Isaac Knoot (38) from Nashville (Tennessee) for operating a “laptop farm” that facilitated North Korea-linked IT workers in obtaining remote jobs with American companies. […]

Конфискованы серверы хакеров в США, Великобритании и Германии.

A critical vulnerability identified as CVE-2024-7348 has been discovered in PostgreSQL, enabling attackers to execute arbitrary SQL functions. This vulnerability in the pg_dump utility poses a significant security risk, especially when executed by superusers. CVE-2024-7348 – Vulnerability Details The flaw is a Time-of-check Time-of-use (TOCTOU) race condition in the pg_dump process. An attacker can exploit this by […]

The post PostgreSQL Vulnerability Allows Hackers To Execute Arbitrary SQL Functions appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

世界最富有的公司不想放过一个收取佣金的机会。Patreon 是一个依靠小额打赏为内容创作者提供收入的众筹平台。苹果威胁，如果 Patreon 的内容创作者继续使用不受支持的第三方计费选项或禁用 iOS 交易，不使用苹果的应用内购系统，那么它将从应用商店移除该应用。Patreon 官方通过博文和电子邮件通知内容创作者，将在 2025 年 11 月之前转移使用苹果的订阅计费方法，它将从 2024 年 11 月开始进行转换，创作者可以考虑提高订阅价格以支付苹果的佣金，或者决定自己承担佣金费用。内容创作者可以选择推迟迁移，但这将导致他们无法在 iOS app 中提供会员资格，因为苹果的规则将从今年 11 月开始启用。

A vulnerability was found in Generate Images Plugin up to 5.2.7 on WordPress. It has been rated as problematic. This issue affects some unknown processing of the component Setting Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-6724. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in bdthemes Element Pack Elementor Addons Plugin up to 5.7.2 on WordPress. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-7247. The attack can be initiated remotely. There is no exploit available.

A newly discovered vulnerability in the Common Log File System (CLFS.sys) driver of Windows has been identified, potentially affecting millions of devices running Windows 10, Windows 11, and various Windows Server versions. Tracked as CVE-2024-6768, this vulnerability allows a malicious authenticated low-privilege user to trigger a Blue Screen of Death (BSOD) through a forced call […]

The post CLFS Vulnerability Let Hackers Trigger BSOD Error On All Versions Of Windows 10 & 11 appeared first on Cyber Security News.

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240812. It has been classified as critical. This affects the function sprintf of the file /cgi-bin/photocenter_mgr.cgi. The manipulation of the argument filter leads to command injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is uniquely identified as CVE-2024-7715. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced. It is recommended to replace the affected component with an alternative.

Hackers masquerading as the Security Service of Ukraine have compromised over 100 government systems. The Computer Emergency Response Team of Ukraine (CERT-UA) at the State Service of Special Communications and Information Protection (SSSCIP) reported the incident on August 12, highlighting the sophisticated tactics employed by the attackers. Malicious Emails Target Government Bodies The attack began […]

The post Hackers Posing as Security Service Compromised 100 Govt Systems appeared first on Cyber Security News.

满堂唯有烛花红，杯且从容，歌且从容。

挖娃带着企业SRC联合活动来啦，活动丰富，奖励丰厚 ，各种奖金礼品拿到手软 ，挖娃和大家一起激情8月！

August 13, 2024Over on YouTube The Comms Channel has uploaded a video showing how they used a

A vulnerability was found in WPDeveloper BetterDocs Plugin up to 3.5.8 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-43227. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in iberezansky 3D FlipBook Plugin up to 1.15.6 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-43152. The attack can be launched remotely. There is no exploit available.