Aggregator

Главный враг издания предложил сотрудничество – но какой ценой?

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds PTZOptics PT30X-SDI/NDI camera bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Threat actors are attempting to exploit the two zero-day vulnerabilities CVE-2024-8956 and CVE-2024-8957 in PTZOptics pan-tilt-zoom (PTZ) live streaming cameras, GretNoise researchers warned last week. GreyNoise […]

Building cyber resilience so that you can persistently prevent, withstand, and recover from disruptions to your network infrastructure is becoming increasingly important.

The post Strengthen Cyber Resilience: A Checklist for ITOps and SecOps Collaboration appeared first on Security Boulevard.

El objetivo de este post es aprender a configurar un dispositivo móvil físico para poder realizar pruebas de pentesting de...

Over 1,500 Android devices have been infected by a new strain of Android banking malware called ToxicPanda that allows threat actors to conduct fraudulent banking transactions. "ToxicPanda's main goal is to initiate money transfers from compromised devices via account takeover (ATO) using a well-known technique called on-device fraud (ODF)," Cleafy researchers Michele Roviello, Alessandro Strino

Contributors to this post: Mickey Shkatov, Alex Bazhaniuk So What Happened? Last week, Sophos released a bombshell report on what they’re calling “Pacific Rim”—and no, we’re not talking about giant robots fighting sea monsters. Sophos chronicles a five-year ordeal involving nation-state threat actors targeting network appliances, particularly Sophos firewalls. The discovery has been documented in […]

The post Pacific Rim: Chronicling a 5-year Hacking Escapade appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.

The post Pacific Rim: Chronicling a 5-year Hacking Escapade appeared first on Security Boulevard.

A vulnerability was found in Oracle Communications Session Route Manager up to 8.x. It has been classified as very critical. This affects an unknown part of the component Third Party. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2021-44790. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

I’ve been writing about the possibility of AIs automatically discovering code vulnerabilities since at least 2018. This is an ongoing area of research: AIs doing source code scanning, AIs finding zero-days in the wild, and everything in between. The AIs aren’t very good at it yet, but they’re getting better.

Here’s some anecdotal data from this summer:

Since July 2024, ZeroPath is taking a novel approach combining deep program analysis with adversarial AI agents for validation. Our methodology has uncovered numerous critical vulnerabilities in production systems, including several that traditional Static Application Security Testing (SAST) tools were ill-equipped to find. This post provides a technical deep-dive into our research methodology and a living summary of the bugs found in popular open-source tools...

The post AIs Discovering Vulnerabilities appeared first on Security Boulevard.

一家之言

SANS 举办的开源情报峰会，探讨 OSINT 与其他形式的情报工作之间的关系。

ADConf，专注于实战攻防技术；ADConf2024聚焦“Al+安全”。

ADConf，专注于实战攻防技术；ADConf2024聚焦“Al+安全”。

ADConf，专注于实战攻防技术；ADConf2024聚焦“Al+安全”。

ADConf，专注于实战攻防技术；ADConf2024聚焦“Al+安全”。

ADConf，专注于实战攻防技术；ADConf2024聚焦“Al+安全”。

ADConf，专注于实战攻防技术；ADConf2024聚焦“Al+安全”。

本文对Snowflake协议进行分析，提出一种基于规则匹配和DTLS握手指纹特征的Tor-Snowflake流量识别框架。

暗网BF论坛拥有者IntelBroker正在出售大量诺基亚源代码，这些源代码是IntelBroker团伙从直接与诺基亚合作的第三方承包商那里获得的。