Aggregator

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.3. This vulnerability affects unknown code of the component AMD Display. The manipulation results in double free. This vulnerability is reported as CVE-2024-56775. The attacker must have access to the local network to execute the attack. No exploit exists. The affected component should be upgraded.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.3. This issue affects the function kunit_device_driver_test. The manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2024-56773. The attack must originate from the local network. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.12.3. This impacts the function get_status of the component winbond. The manipulation results in privilege escalation. This vulnerability was named CVE-2024-56771. The attack needs to be approached within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.12.3. The affected element is the function kunit_init_suite. Such manipulation leads to use after free. This vulnerability is documented as CVE-2024-56772. The attack requires being on the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.12.5 and classified as critical. Impacted is an unknown function of the component netem. Executing manipulation of the argument qlen can lead to improper update of reference count. This vulnerability is tracked as CVE-2024-56770. The attack is only possible within the local network. No exploit exists. It is suggested to upgrade the affected component.

Лицензия Steam превратила инвесторов в нищих.

A sophisticated recruitment scam linked to North Korea has emerged, targeting American artificial intelligence developers, software engineers, and cryptocurrency professionals through an elaborate fake job platform. Validin security researchers have uncovered a new variant of what they call the “Contagious Interview” operation, designed to compromise job seekers through a seemingly legitimate hiring process. The campaign […]

The post Beware of North Korean Fake Job Platform Targeting U.S. Based AI-Developers appeared first on Cyber Security News.

A vulnerability marked as critical has been reported in lKinderBueno Streamity Xtream IPTV Player up to 2.8. The impacted element is an unknown function of the file public/proxy.php. Performing manipulation results in server-side request forgery. This vulnerability is identified as CVE-2025-13588. The attack can be initiated remotely. Additionally, an exploit exists. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/file_manager/files. The manipulation of the argument files results in path traversal. This vulnerability is known as CVE-2024-8163. It is possible to launch the attack remotely. Furthermore, an exploit is available. You should upgrade the affected component.

A vulnerability has been found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5 and classified as critical. This affects the function rename of the file /Admin/Http/Controllers/FileManagerController.php. This manipulation of the argument new_name causes unrestricted upload. This vulnerability is handled as CVE-2024-8164. The attack can be initiated remotely. Additionally, an exploit exists. The affected component should be upgraded.

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5 and classified as critical. This vulnerability affects the function exportZip of the file /admin/file_manager/export. Such manipulation of the argument path leads to path traversal. This vulnerability is uniquely identified as CVE-2024-8165. The attack can be launched remotely. Moreover, an exploit is present. It is suggested to upgrade the affected component.

从 Git 3.0 起，默认分支名将是 main 而不是 master。关于 main 和 master 名字的争论可以追溯到 2020 年，而 GitHub 早在 2020 年 10 月 1 日将新建代码库的默认分支名改为 main。Git 3.0 预计会在 2026 年底左右发布，主要变化包括：默认哈希函数从 SHA-1 改为 SHA-256 以提高安全性；改变默认存储格式以更好支持 macOS 和 Windows 并提升性能；更正式的将 Rust 集成到 Git 自身构建流程中。

GCC 16 принимает язык 1968 года.

A recently patched security flaw in Microsoft Windows Server Update Services (WSUS) has been exploited by threat actors to distribute a malware known as ShadowPad. "The attacker targeted Windows Servers with WSUS enabled, exploiting CVE-2025-59287 for initial access," AhnLab Security Intelligence Center (ASEC) said in a report published last week. "They then used PowerCat, an open-source

In this Help Net Security interview, Colonel Ludovic Monnerat, Commander Space Command, Swiss Armed Forces, discusses how securing space assets is advancing in response to emerging quantum threats. He explains why satellite systems must move beyond traditional cryptography to remain protected. Monnerat also describes how future communication architectures will need to integrate quantum-safe methods without disrupting operations. 1LT Simon Reding also contributed to these responses. The responses are personal opinions of the respondents and do … More →

The post Quantum encryption is pushing satellite hardware to its limits appeared first on Help Net Security.

看不见的微塑料通过空气扩散到全球。早稻田大学环境化学教授 Hiroshi Okochi 称，最近的研究表明空气传播的塑料污染正以惊人速度扩散。空气传播的微塑料直径小于 2.5 微米。Okochi 团队在 2023 年发表的一项研究发现，富士山顶云层中的水每升含有 6.7 个微塑料颗粒。德国和瑞士的团队报告，他们在北极每升雪中发现了逾万个微塑料颗粒。这些微塑料可能是通过空气传播随雪沉积。尽管在人体各部位都发现微塑料，但目前尚不清楚空气中的塑料颗粒对健康的影响。1 微米或更小的通过空气传播的塑料颗粒被认为能到达肺泡。英国一项研究表明，在 13 名接受肺部手术的患者的肺组织样本中，有 11 份检测到了微塑料。其中肺下部的微塑料含量最高。人每天呼吸超过 2 万次，一生累计呼吸 6-7 亿次。Okochi 表示人类不可避免的会吸入空气中的微塑料，但因为看不见所以也丝毫不知。

A vulnerability labeled as problematic has been found in Apple tvOS. This issue affects some unknown processing of the component Kernel. Such manipulation leads to information disclosure. This vulnerability is traded as CVE-2025-24144. An attack has to be approached locally. There is no exploit available. The affected component should be upgraded.

A vulnerability marked as problematic has been reported in Apple macOS. Impacted is an unknown function of the component Kernel. Performing manipulation results in information disclosure. This vulnerability is known as CVE-2025-24144. Attacking locally is a requirement. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability identified as problematic has been detected in Apple visionOS. This vulnerability affects unknown code of the component Kernel. This manipulation causes information disclosure. This vulnerability appears as CVE-2025-24144. The attack requires local access. There is no available exploit. You should upgrade the affected component.

A vulnerability has been found in Apple tvOS and classified as critical. Affected by this vulnerability is an unknown functionality. Performing manipulation results in memory corruption. This vulnerability is identified as CVE-2025-24111. The attack is only possible with local access. There is not any exploit available. The affected component should be upgraded.