Microsoft Azure Blocks 15.72 Tbps Aisuru Botnet DDoS Attack
Microsoft Azure halted a record 15.72 Tbps DDoS attack from the Aisuru botnet exposing risks created by exposed home devices exploited in large-scale cyber attacks.
Aggregator
Please support the site operations by clicking ads.
Pear
11 months 3 weeks ago
You must login to view this content
cohenido
Pear
11 months 3 weeks ago
You must login to view this content
cohenido
Sundar Pichai 称如果 AI 泡沫破裂没有公司能免受影响
11 months 3 weeks ago
Alphabet CEO Sundar Pichai 在接受采访时称如果 AI 泡沫破裂没有公司能免受影响。他承认目前的 AI 热存在非理性因素。当被问及 Google 能否免受 AI 泡沫破裂的影响，Pichai 表示能承受但不可能免受影响。Alphabet 的股价在七个月内翻了一番达到 3.5 万亿美元。Pichai 表示 Google 独特的“全栈”技术模式——从芯片到YouTube 数据到模型和前沿科学——意味着它更有能力应对 AI 市场的任何动荡。他称 AI 是人类迄今创造的“最深刻的技术”，“我们将不得不应对社会变革，”也将“创造新的机遇”。
CVE-2024-53182 | Linux Kernel up to 6.12.1 bfq_release_process_ref use after free (Nessus ID 249888 / WID-SEC-2024-3762)
11 months 3 weeks ago
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.1. This vulnerability affects the function bfq_release_process_ref. Executing manipulation can lead to use after free.
This vulnerability is tracked as CVE-2024-53182. The attack is only possible within the local network. No exploit exists.
It is advisable to upgrade the affected component.
vuldb.com
CVE-2024-53180 | Linux Kernel up to 5.15.173/6.1.119/6.6.63/6.11.10/6.12.1 ALSA virt_to_page null pointer dereference (Nessus ID 216493 / WID-SEC-2024-3762)
11 months 3 weeks ago
A vulnerability was found in Linux Kernel up to 5.15.173/6.1.119/6.6.63/6.11.10/6.12.1 and classified as critical. This affects the function virt_to_page of the component ALSA. The manipulation results in null pointer dereference.
This vulnerability is known as CVE-2024-53180. Access to the local network is required for this attack. No exploit is available.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2024-53181 | Linux Kernel up to 6.12.1 vector container_of denial of service (Nessus ID 216224 / WID-SEC-2024-3762)
11 months 3 weeks ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.1. Affected is the function container_of of the component Vector. Performing manipulation results in denial of service.
This vulnerability was named CVE-2024-53181. The attack needs to be approached within the local network. There is no available exploit.
It is advisable to upgrade the affected component.
vuldb.com
CVE-2024-53179 | Linux Kernel up to 6.12.1 SMB Client cifs_mount use after free (Nessus ID 214250 / WID-SEC-2024-3762)
11 months 3 weeks ago
A vulnerability classified as critical was found in Linux Kernel up to 6.12.1. Affected by this issue is the function cifs_mount of the component SMB Client. The manipulation results in use after free.
This vulnerability is reported as CVE-2024-53179. The attacker must have access to the local network to execute the attack. No exploit exists.
Upgrading the affected component is advised.
vuldb.com
CVE-2024-53176 | Linux Kernel up to 6.6.63/6.11.10/6.12.1 smb cifs_kill_sb information disclosure (Nessus ID 216493 / WID-SEC-2024-3762)
11 months 3 weeks ago
A vulnerability classified as problematic has been found in Linux Kernel up to 6.6.63/6.11.10/6.12.1. Affected by this vulnerability is the function cifs_kill_sb of the component smb. The manipulation leads to information disclosure.
This vulnerability is documented as CVE-2024-53176. The attack requires being on the local network. There is not any exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-53178 | Linux Kernel up to 6.6.63/6.11.10/6.12.1 smb open_cached_dir reference count (Nessus ID 216493 / WID-SEC-2024-3762)
11 months 3 weeks ago
A vulnerability marked as problematic has been reported in Linux Kernel up to 6.6.63/6.11.10/6.12.1. The affected element is the function open_cached_dir of the component smb. This manipulation causes improper update of reference count.
This vulnerability is registered as CVE-2024-53178. The attack requires access to the local network. No exploit is available.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2024-53172 | Linux Kernel up to 6.12.1 fastmap mm/slab_common.c alloc_ai privilege escalation (Nessus ID 214781 / WID-SEC-2024-3762)
11 months 3 weeks ago
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.1. This affects the function alloc_ai of the file mm/slab_common.c of the component fastmap. Such manipulation leads to privilege escalation.
This vulnerability is listed as CVE-2024-53172. The attack must be carried out from within the local network. There is no available exploit.
The affected component should be upgraded.
vuldb.com
UNC1549 Hackers with Custom Tools Attacking Aerospace and Defense Systems to Steal Logins
11 months 3 weeks ago
Since mid-2024, a sophisticated Iranian-backed threat group known as UNC1549 has been conducting targeted campaigns against aerospace, aviation, and defense organizations across the globe. The hackers employ an advanced dual approach, combining carefully crafted phishing campaigns with the exploitation of trusted connections between primary targets and their third-party suppliers. This strategy proves particularly effective against […]
The post UNC1549 Hackers with Custom Tools Attacking Aerospace and Defense Systems to Steal Logins appeared first on Cyber Security News.
Tushar Subhra Dutta
Проброс портов больше не работает? Вините CGNAT вашего провайдера
11 months 3 weeks ago
Туннели, VPN и статический IP — разбираем плюсы, минусы и стоимость каждого варианта.
CVE-2025-11265 | VK All in One Expansion Unit Plugin up to 9.112.1 on WordPress vkExUnit_cta_url custom_field_name cross site scripting
11 months 3 weeks ago
A vulnerability classified as problematic has been found in VK All in One Expansion Unit Plugin up to 9.112.1 on WordPress. This vulnerability affects the function vkExUnit_cta_url. Performing manipulation of the argument custom_field_name results in cross site scripting.
This vulnerability is cataloged as CVE-2025-11265. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com
CVE-2025-11267 | VK All in One Expansion Unit Plugin up to 9.112.1 on WordPress _veu_custom_css cross site scripting
11 months 3 weeks ago
A vulnerability has been found in VK All in One Expansion Unit Plugin up to 9.112.1 on WordPress and classified as problematic. The impacted element is an unknown function. This manipulation of the argument _veu_custom_css causes cross site scripting.
This vulnerability appears as CVE-2025-11267. The attack may be initiated remotely. There is no available exploit.
vuldb.com
微软在 Windows 11 中加入 AI 智能体
11 months 3 weeks ago
微软正进一步在 Windows 11 中整合 AI 功能。Windows 11 Build 26220.7262 的设置 > 系统 > AI 组件下新增了“实验性智能体”功能选项。该功能会启用智能体工作空间（Agent Workspace），但目前还无法使用。微软正在将 Windows 打造成一个 AI 原生操作系统。新功能允许 AI 智能体访问用户目录最常用的文件夹如桌面、音乐、图片和视频。如果启用该功能，AI 智能体还将拥有自己的运行时环境、桌面、用户帐户，并始终在后台运行。
Microsoft Mitigates Record 15.72 Tbps DDoS Attack Driven by AISURU Botnet
11 months 3 weeks ago
Microsoft on Monday disclosed that it automatically detected and neutralized a distributed denial-of-service (DDoS) attack targeting a single endpoint in Australia that measured 15.72 terabits per second (Tbps) and nearly 3.64 billion packets per second (pps).
The tech giant said it was the largest DDoS attack ever observed in the cloud, and that it originated from a TurboMirai-class Internet of
The Hacker News
Богатые качают терабайты, бедные считают мегабайты. Для миллиардов людей интернет все еще стоит неподъемных денег
11 months 3 weeks ago
Новое неравенство – бедняк тратит в 8 раз меньше трафика, чем богач.
Google Reveals Public Preview of Alert Triage and Investigation Agent for Security Operations
11 months 3 weeks ago
Google has announced the public preview of its Alert Triage and Investigation agent, a significant advancement in artificial intelligence-driven security operations. The intelligent agent is now embedded directly within Google Security Operations, helping security teams process alerts faster and more effectively. The new agent represents a significant step toward Google’s vision of an “Agentic SOC,” a […]
The post Google Reveals Public Preview of Alert Triage and Investigation Agent for Security Operations appeared first on Cyber Security News.
Abinaya
CISA Warns of Critical Lynx+ Gateway Vulnerability Exposes Data in Cleartext
11 months 3 weeks ago
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning about a severe vulnerability in Lynx+ Gateway devices that could expose sensitive information in clear text during transmission. The flaw allows attackers to catch network traffic and obtain plaintext credentials and other confidential data. The vulnerability, tracked as CVE-2025-62765, stems from the product’s […]
The post CISA Warns of Critical Lynx+ Gateway Vulnerability Exposes Data in Cleartext appeared first on Cyber Security News.
Abinaya