Aggregator

Поддельные вакансии и кибершпионаж снова угрожают аэрокосмической отрасли.

It’s not just North Korean hackers who reach out to targets via LinkedIn: since at least September 2023, Iranian threat actor TA455 has been trying to compromise workers in the aerospace industry by impersonating job recruiters on the popular employment-focused social media platform. “By leveraging LinkedIn, a platform inherently built on trust and professional connections, TA455 seeks to gain credibility and avoid raising suspicion. Their use of fake recruiter profiles associated with fabricated companies further … More →

The post Aerospace employees targeted with malicious “dream job” offers appeared first on Help Net Security.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.75/6.6.14/6.7.2 on x86. This issue affects the function p2sb_bar. The manipulation leads to deadlock. The identification of this vulnerability is CVE-2024-26650. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.8.2. Affected is the function wg_peer_remove_all of the component wireguard. The manipulation leads to use after free. This vulnerability is traded as CVE-2024-26951. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.11.2 and classified as critical. This vulnerability affects the function vhost_scsi_get_req of the component scsi. The manipulation leads to null pointer dereference. This vulnerability was named CVE-2024-49863. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.8.1. This affects the function listxattr of the file mm/usercopy.c of the component NFSv4.2. The manipulation leads to unchecked return value. This vulnerability is uniquely identified as CVE-2024-26870. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in PyPDF2 up to 1.27.4. This affects the function ContentStream._readInlineImage of the component Content Stream Handler. The manipulation leads to infinite loop. This vulnerability is uniquely identified as CVE-2022-24859. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 5.10.213/5.15.152/6.1.82/6.6.22/6.7.10. Affected is the function copy_from_kernel_nofault. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2024-26906. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

Cisco introduces new intelligent, secure and assured wireless innovations, with smart Wi-Fi 7 access points and unified subscription licensing that can enable smart spaces out-of-the-box. These innovations empower customers to solve for their connectivity, security and assurance challenges, while also providing a flexible foundation to future-proof their workplaces. Wireless technologies have reshaped the world, from how and where work gets done, to how people shop and learn. Today, wireless innovations continue to blur the lines … More →

The post Cisco introduces Wi-Fi 7 access points to enhance employee and customer experiences appeared first on Help Net Security.

An individual who posted data allegedly stolen via MOVEit from Amazon and other big-name firms claims not to be malicious

Никто и не подозревал, что взломать популярную платформу окажется настолько просто.

Начался очередной раунд противостояния США и группы Volt Typhoon.

东芝于 1960 年创造出日本最早的彩色电视机，2018 年它将 REGZA 品牌的电视业务出售给了海信。如今在日本电视市场，今年前九个月海信占到了 40.4% 份额，位居首位，TCL 的 9.5% 与索尼的 9.7% 和松下的 9.0% 相差不大。日本消费者购买电视机也不再首选日本品牌，而质量难以区分高下的情况下，性价比成为决定性因素。平板电视在日本国内的平均销售价格呈下降趋势，2024 年 1～6 月比 2020 年同期下降 4 成，降至 64800 日元（约合人民币 3033 元）。在这种环境下，中国企业正在以优势地位推进竞争。

2024年11月13日10时，DataCon2024大数据安全分析竞赛正式开赛。

云科安信近三年立下的Flag正在一步步地实现。

11月26日新书发布会！早鸟福利活动：0元得新书

网络强国建设是强国建设的重要组成部分。党的二十届三中全会《决定》提出“加强网络安全体制建设，建立人工智能安全监管制度”，为新时代网络安全工作指明了前进方向。