Aggregator

Специалист потребовал от Cloudflare объяснений.

立即查看详情 →

Scams targeting Android users in India and across the Asia-Pacific region have grown around a long-standing curiosity gap: the desire to look up call records tied to a phone number. A cluster of 28 fraudulent apps on Google Play exploited that gap and pulled in more than 7.3 million downloads before the store removed them. ESET researchers, who tracked the campaign and named it CallPhantom, reported the apps to Google on December 16, 2025, and … More →

The post CallPhantom Android scam reached 7.3 million downloads on Google Play appeared first on Help Net Security.

The Chinese cyber-espionage collective UAT-8302 has, for nearly a annum, conducted surreptitious incursions against governmental entities across South

The post UAT-8302’s Global Espionage Machine Is Hijacking Governments via the Cloud appeared first on Penetration Testing Tools.

Cybersecurity adversaries have asserted a monumental breach of one of the world’s preeminent pedagogical platforms, claiming the exfiltration

The post Class Dismissed? ShinyHunters Claims Massive Breach of 280 Million Records from Canvas LMS appeared first on Penetration Testing Tools.

东京大学的研究人员在《Cell》期刊上发表论文，报告在泰国的蝙蝠体内发现了一种遗传信息与新冠病毒相似的病毒。该病毒有可能具备感染人类的能力。新冠病毒 2019 年出现并引发全球大流行，它被广泛认为来自于蝙蝠。近年的研究已在东南亚野生蝙蝠身上检出多种与新冠病毒基因信息相似的病毒。但此前发现的病毒和新冠病毒不同，其无法与人类细胞表面的蛋白质结合，基本不具备感染人类的能力。研究团队针对泰国境内栖息的蝙蝠开展了病毒调查。结果成功锁定了一种可与人体细胞蛋白结合的新病毒。在实验室中测试现有新冠疫苗和治疗药物对新病毒是否有效，结果均显示有效。该病毒的增殖能力和致病性低于新冠病毒。

ESET researchers uncovered fraudulent apps on Google Play that claim to provide the call history “for any number” and had been downloaded more than seven million times before being taken down

MuddyWater 伊朗黑客将其攻击行动伪装成 Chaos 勒索软件攻击，通过微软 Teams 进行社会工程学攻击，获取访问权限并实现长期驻留。   尽管此次攻击涉及凭证窃取、长期驻留、远程访问、数据窃取、勒索邮件，以及在 Chaos 泄露门户网站上发布信息，但攻击者使用的基础设施和技术与 MuddyWater 攻击相关。   Rapid7 的研究人员认为，勒索软件部分可能是...

A vulnerability identified as problematic has been detected in Wireshark up to 3.6.10/4.0.2. This affects an unknown part of the component iSCSI Dissector. Performing a manipulation results in denial of service. This vulnerability is known as CVE-2023-0415. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability labeled as problematic has been found in Wireshark up to 3.6.11/4.0.3. This affects an unknown part of the component ISO 15765 Dissector. Executing a manipulation can lead to denial of service. This vulnerability is registered as CVE-2023-1161. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

A vulnerability classified as problematic was found in Wireshark up to 3.6.12/4.0.4. Affected by this vulnerability is an unknown functionality of the component GQUIC Dissector. Such manipulation leads to denial of service. This vulnerability is traded as CVE-2023-1994. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability described as problematic has been identified in Wireshark up to 3.6.12/4.0.4. This impacts an unknown function of the component LISP Dissector. The manipulation results in denial of service. This vulnerability is reported as CVE-2023-1993. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in Wireshark up to 3.6.12/4.0.4. This affects an unknown function of the component RPCoRDMA Dissector. The manipulation leads to denial of service. This vulnerability is documented as CVE-2023-1992. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability described as problematic has been identified in Wireshark up to 3.6.13/4.0.5. The affected element is an unknown function of the component BLF File Parser. Such manipulation leads to denial of service. This vulnerability is referenced as CVE-2023-2857. The attack can only be performed from a local environment. No exploit is available. Upgrading the affected component is recommended.

A vulnerability labeled as problematic has been found in Wireshark up to 3.6.13/4.0.5. This issue affects some unknown processing of the component Candump Log Parser. The manipulation results in denial of service. This vulnerability was named CVE-2023-2855. The attack needs to be approached locally. There is no available exploit. The affected component should be upgraded.

A vulnerability, which was classified as problematic, has been found in Wireshark up to 3.6.13/4.0.5. This impacts an unknown function of the component GDSDB. The manipulation leads to denial of service. This vulnerability is listed as CVE-2023-2879. The attack must be carried out locally. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability classified as problematic has been found in Wireshark up to 3.6.13/4.0.5. The impacted element is an unknown function of the component NetScaler File Parser. Performing a manipulation results in denial of service. This vulnerability is identified as CVE-2023-2858. The attack is only possible with local access. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability marked as problematic has been reported in Wireshark up to 3.6.13/4.0.5. Impacted is an unknown function of the component VMS TCPIPtrace File Parser. This manipulation causes denial of service. The identification of this vulnerability is CVE-2023-2856. The attack can only be executed locally. There is no exploit available. It is suggested to upgrade the affected component.

美国网络安全与基础设施安全局（CISA）将 Palo Alto Networks PAN - OS 中的一个漏洞（编号为 CVE - 2026 - 0300，CVSS 评分 9.3），纳入其已知被利用漏洞（KEV）目录。   该漏洞属于缓冲区溢出漏洞，可导致未经身份验证的远程代码执行，尤其是在用户身份认证门户（User - ID portal）暴露于互联网的情况下。   Pal...

A vulnerability, which was classified as problematic, was found in Wireshark up to 3.6.13/4.0.5. The affected element is an unknown function of the component XRA Dissector. Executing a manipulation can lead to denial of service. This vulnerability is tracked as CVE-2023-2952. The attack is restricted to local execution. No exploit exists. You should upgrade the affected component.