Aggregator

A vulnerability was found in Craft CMS up to 4.13.1/5.5.1. It has been classified as critical. Affected is an unknown function of the file php.ini of the component Configuration Handler. The manipulation of the argument register_argc_argv leads to code injection. This vulnerability is traded as CVE-2024-56145. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

代码审查（Code Review）是一个由项目核心成员，如资深开发架构师执行的精密流程，其核心在于对源代码实施全面而系统的审核。此过程的根本目的，在于识别代码中潜藏的缺陷、安全漏洞、违反编码标准之处，以及可进一步提升的性能瓶颈。 从安全性的专业视角出发，尽管在某些关键功能或敏感场景中，人工审查仍具有不可替代的价值，但在日常实践中，鉴于项目代码的高频变动性，更为高效且可持续的策略是采用自动化的安全扫描机制。这通常涉及在代码提交或构建阶段，无缝集成静态应用安全测试（SAST）工具，以确保安全扫描能够即时响应代码变更。 至于扫描范围的选择，即在仅针对变更部分还是整个项目进行全面扫描之间权衡，是一个值得深入探讨的问题。从确保漏洞检测准确性的专业角度出发，在扫描能力和系统性能允许的前提下，推荐采取全项目扫描策略。这一做法能够最大限度地减少因代码变更可能引发的安全盲区，从而确保项目整体的安全性处于可控且优化的状态。 更多软件安全内容，可以访问： 1、SDL100问：我与SDL的故事 SAST误报太高，如何解决？ SDL需要哪些人参与？ 设计阶段应开展哪些安全活动？ 有哪些不错的安全设计参考资料？ 安全设计要求怎么做才能落地？ 有哪些威胁建模方法论？ 有哪些威胁建模工具？ 如何开始或实施威胁建模？ 威胁建模和架构安全评审，有何异同？ 编码阶段，开展哪些安全活动？ 如何选择静态代码扫描(SAST)工具？ 如何选择开源组件安全扫描(SCA)工具？ SCA工具扫描出很多漏洞，如何处理？ SCA工具识别出高风险协议，如何处理？ 如何制定一份有用的开发安全规范？ 如何做到开发安全规范的有效实施？ 应该如何选型代码安全扫描工具？ 白盒检测工具存在局限性，如何进行补偿？ SCA用什么系统做，自研还是外购？ 有没有好用的SDL平台？ Sonar是否好用以及误报率咋样？ 如何推进有问题的jar包更新？ SCA工具的误报率怎样？ 在研发安全流程落地方面，有何经验？ SDL 37/100问：如何说服业务完成checklist自检？ 2、SDL创新实践系列 首发！“ 研发安全运营 ” 架构研究与实践 DevSecOps实施关键：研发安全团队 DevSecOps实施关键：研发安全流程 DevSecOps实施关键：研发安全规范 从安全视角，看研发安全 数字化转型下的研发安全痛点

代码审查（Code Review）是一个由项目核心成员，如资深开发架构师执行的精密流程，其核心在于对源代码实施全面而系统的审核。此过程的根本目的，在于识别代码中潜藏的缺陷、安全漏洞、违反编码标准之处，以及可进一步提升的性能瓶颈。 从安全性的专业视角出发，尽管在某些关键功能或敏感场景中，人工审查仍具有不可替代的价值，但在日常实践中，鉴于项目代码的高频变动性，更为高效且可持续的策略是采用自动化的安全扫描机制。这通常涉及在代码提交或构建阶段，无缝集成静态应用安全测试（SAST）工具，以确保安全扫描能够即时响应代码变更。 至于扫描范围的选择，即在仅针对变更部分还是整个项目进行全面扫描之间权衡，是一个值得深入探讨的问题。从确保漏洞检测准确性的专业角度出发，在扫描能力和系统性能允许的前提下，推荐采取全项目扫描策略。这一做法能够最大限度地减少因代码变更可能引发的安全盲区，从而确保项目整体的安全性处于可控且优化的状态。 更多软件安全内容，可以访问： 1、SDL100问：我与SDL的故事 SAST误报太高，如何解决？ SDL需要哪些人参与？ 设计阶段应开展哪些安全活动？ 有哪些不错的安全设计参考资料？ 安全设计要求怎么做才能落地？ 有哪些威胁建模方法论？ 有哪些威胁建模工具？ 如何开始或实施威胁建模？ 威胁建模和架构安全评审，有何异同？ 编码阶段，开展哪些安全活动？ 如何选择静态代码扫描(SAST)工具？ 如何选择开源组件安全扫描(SCA)工具？ SCA工具扫描出很多漏洞，如何处理？ SCA工具识别出高风险协议，如何处理？ 如何制定一份有用的开发安全规范？ 如何做到开发安全规范的有效实施？ 应该如何选型代码安全扫描工具？ 白盒检测工具存在局限性，如何进行补偿？ SCA用什么系统做，自研还是外购？ 有没有好用的SDL平台？ Sonar是否好用以及误报率咋样？ 如何推进有问题的jar包更新？ SCA工具的误报率怎样？ 在研发安全流程落地方面，有何经验？ SDL 37/100问：如何说服业务完成checklist自检？ 2、SDL创新实践系列 首发！“ 研发安全运营 ” 架构研究与实践 DevSecOps实施关键：研发安全团队 DevSecOps实施关键：研发安全流程 DevSecOps实施关键：研发安全规范 从安全视角，看研发安全 数字化转型下的研发安全痛点

At Least 1,000 Hosts Still Vulnerable as Ransomware Group Claims Mass Exploits
More than 1,000 Cleo managed file-transfer hosts remain internet-exposed and unpatched, despite warnings of a mass attack targeting critical vulnerabilities in the widely used software. The Clop ransomware operation, which has repeatedly targeted MFT software, claimed credit for the attacks.

Azure Data Factory's Apache Airflow Integration Flaw Can Expose Cloud Environments
Security researchers say now-resolved vulnerabilities in a Microsoft Azure integration with the Apache Airflow workflow management platform showcase growing sophistication of attackers. Palo Alto Unit 42 researchers said the flaws could allow hackers to deploy malware and steal data.

Ukrainian Mark Sokolovsky Pleaded Guilty in October
A Ukrainian national who was a key figure in the Raccoon malware-as-a-service criminal operation received a prison sentence of 60 months. The sentence of Mark Sokolovsky includes credit for time already spent in jails following his March 2022 arrest.

Why is Access Control Crucial in Cybersecurity? In the expansive and complex world of cybersecurity, have you ever wondered how vital a role access control plays? It’s the cornerstone of securing Non-Human Identities (NHIs) and managing their secrets effectively. With increasing digital transformation and cloud migration, securing NHIs is of utmost importance for businesses across […]

The post How Does Enhanced Access Control Bolster Your Security? appeared first on Entro.

The post How Does Enhanced Access Control Bolster Your Security? appeared first on Security Boulevard.

Why is Secure Automation Essential for Cloud Operations? Modern businesses operate within a complex ecosystem. How can they ensure their cloud operations remain secure, streamlined, and efficient? The answer lies in secure automation. This blog post will delve into why secure automation is a must-have for any business, especially those relying heavily on cloud-based operations […]

The post How Secure Automation Saves Your Cloud Operations appeared first on Entro.

The post How Secure Automation Saves Your Cloud Operations appeared first on Security Boulevard.

Is Secrets Security Management Crucial for High-Growth Environments? The digital age is expanding at an unprecedented rate, constantly evolving with revolutionary technologies that are redefining business models. In such high-growth environments, the criticality of effective secrets security is amplified. In particular, Non-Human Identities (NHIs) and their respective secrets play a significant role in keeping the […]

The post Scaling Secrets Security in High-Growth Environments appeared first on Entro.

The post Scaling Secrets Security in High-Growth Environments appeared first on Security Boulevard.

​​Ukrainian national Mark Sokolovsky was sentenced today to five years in prison for his involvement in the Raccoon Stealer malware cybercrime operation. [...]

A vulnerability classified as problematic has been found in Linux Kernel. This affects the function invalidate_inode_pages2_range of the file mm/truncate.c. The manipulation leads to integer coercion error. This vulnerability is uniquely identified as CVE-2005-3808. An attack has to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

The Russian hacking group tracked as APT29 (aka "Midnight Blizzard") is using a network of 193 remote desktop protocol proxy servers to perform man-in-the-middle (MiTM) attacks to steal data and credentials and to install malicious payloads. [...]

A vulnerability was found in Sun Java 1.3.1/1.4.1/1.4.2 and classified as problematic. This issue affects the function ClassDepth. The manipulation of the argument null leads to denial of service. The identification of this vulnerability is CVE-2003-1134. It is possible to launch the attack on the local host. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in Mattermost up to 9.5.11/9.11.3/10.0.1/10.1.1. This affects an unknown part of the component Email Address Handler. The manipulation leads to improper check for unusual conditions. This vulnerability is uniquely identified as CVE-2024-11599. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A Threat Actor is Allegedly Selling Sensitive Data from an Immigration Agency in Vietnam

GHNA is Allegedly Selling Access to an Unidentified Indian Technology Company