Aggregator

A vulnerability classified as critical has been found in D-Link DCS-932L 2.18.01. This affects an unknown part of the component HTTP Handler. The manipulation leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2024-37606. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in D-Link DAP-2555 1.20. It has been rated as critical. Affected by this issue is some unknown functionality of the component HTTP Request Handler. The manipulation leads to buffer overflow. This vulnerability is handled as CVE-2024-37607. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in GFI Kerio Control up to 9.2.5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component GET Parameter Handler. The manipulation leads to http response splitting. This vulnerability is known as CVE-2024-52875. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

Organizations are often caught off-guard when a data breaches occurs, forcing them to quickly perform mass password resets Learn from Specops Software about some of the common mass password reset scenarios and the challenges you may face. [...]

Getting inside the mind of a threat actor can help security pros understand how they operate and what they're looking for — in essence, what makes a soft target.

Cybersecurity vendor Wallarm, using a honeypot, found that hackers can discover new APIs in 29 seconds and that APIs are now more targeted than web applications, highlighting the need to put a security focus on the increasingly popular business tools.

The post Attackers Can Find New APIs in 29 Seconds: Wallarm appeared first on Security Boulevard.

A vulnerability was found in Xen. It has been classified as problematic. Affected is an unknown function of the component Hypercall Page Handler. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2024-53241. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

As a passionate cybersecurity enthusiast & a professional with ColorTokens, participating in the recently concluded 19th Annual Information Security Summit (AISS) 2024, organized by NASSCOM-DSCI, was an invaluable opportunity to immerse myself in the latest trends, innovations, and discussions shaping our industry.  AISS 2024 lived up to its reputation as India’s premier platform for cybersecurity […]

The post Bits & Bytes: A Recap of AISS 2024 appeared first on ColorTokens.

The post Bits & Bytes: A Recap of AISS 2024 appeared first on Security Boulevard.

A vulnerability was found in Xen and classified as problematic. This issue affects some unknown processing of the component Linux Netfront. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2024-53240. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in Mobil365 Informatics Saha365 App and classified as critical. This vulnerability affects unknown code. The manipulation leads to sql injection. This vulnerability was named CVE-2024-8972. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

声明：文章中涉及的程序(方法)可能带有攻击性，仅供安全研究与教学之用，读者将其信息做其他用途，由用户承担全部法

Malware that’s made specifically to target industrial control systems (ICS), Internet of Things (IoT) and operational technology (OT) control devices is still rare, but in the last few weeks security researchers have identified two salient threats based on samples uploaded to VirusTotal: Claroty’s Team82 researchers have unearthed IOCONTROL, a piece of malware that appears to be generic enough to run on a variety of platforms and devices from different vendors. Forescout’s Vedere Labs researchers have … More →

The post Researchers reveal OT-specific malware in use and in development appeared first on Help Net Security.

抑郁症影响着全球数亿人，而高水平身体活动被认为有助于防止抑郁症。根据发表在《JAMA Network Open》上的一项研究，研究人员利用了近 10 万成年人的数据调查了步数与抑郁症之间的关联，发现一个人每天走的步数越多，患抑郁症的可能性就越小，每天步行 5000 步和 7500 步都与风险降低相关。当然这只是相关性研究，他们强调需要更多的研究才能确定走更多步数有助于预防抑郁症。

A new phishing campaign has been observed employing tax-themed lures to deliver a stealthy backdoor payload as part of attacks targeting Pakistan. Cybersecurity company Securonix, which is tracking the activity under the name FLUX#CONSOLE, said it likely starts with a phishing email link or attachment, although it said it couldn't obtain the original email used to launch the attack. "One of the