Aggregator

ReliaQuest has observed a new Black Basta social engineering campaign targeting users via Microsoft Teams and malicious QR codes.

Cucamonga Valley Water District Has Been Claimed a Victim to FOG Ransomware

涵盖z国背景APT团伙、Windows提权漏洞、Grafana安全漏洞等

A Threat Actor is Allegedly Selling the Database of Wetality

Not cute: $UNH’s Change Healthcare unit paid a big ransom—its IT was as weak as a kitten.

The post 100 MILLION Americans in UnitedHealth PII Breach appeared first on Security Boulevard.

303 is Allegedly Selling FTP Access to AT&T Corp

一颗超新星的爆炸足以清除太阳系中几乎所有的尘埃，而这种情况可能在 300 万年前就已经发生了。就像家具上的灰尘一样，这些细小的颗粒也会逐渐得到补充。太空尘埃是由小行星碰撞等事件产生的小颗粒组成的。这些颗粒的大小通常小于一毫米。太阳系大约 70% 的尘埃集中在柯伊伯带，这是海王星以外的冰质小行星和彗星区域，估计有 350 万亿吨的小颗粒。波士顿大学的研究人员模拟了太阳系附近的超新星爆发。根据地球上冰中放射性铁同位素铁-60 含量的增加，研究人员认为其中一个事件发生在大约 300 万年前。当爆炸同时带走太阳的日光层时，这些同位素就会被释放出来，日光层可以保护太阳系中的行星免受银河系的辐射。

RipperSec Targeted the Website of Rambhai Barni Rajabhat University

ReliaQuest has observed a new Black Basta social engineering campaign targeting users via Microsoft Teams and malicious QR codes.

HELLCAT is Allegedly Selling the Data of The Knesset

Zyloware Eyewear Has Been Claimed a Victim to BLACK SUIT Ransomware

Windows内核流服务本地权限提升漏洞(CVE-2024-30090)

Authors/Presenters:Michelle Eggers

Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their timely DEF CON 32 erudite content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.

Permalink

The post DEF CON 32 – AppSec Village – The Immortal Retrofuturism of Mainframes and How to Keep Them Safe appeared first on Security Boulevard.

A vulnerability, which was classified as critical, has been found in Open-Xchange Server 6.20.7/6.22.0/6.22.1. This issue affects some unknown processing. The manipulation of the argument location leads to code injection. The identification of this vulnerability is CVE-2013-1647. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

联合国最新估计预测全球人口将于 2084 年达到 103 亿的峰值。维也纳的 International Institute for Applied Systems Analysis 预测人口将于 2080 年达到 101 亿的峰值，西雅图的 Institute of Health Metrics and Evaluation 预测 2064 年达到 97 亿的峰值。然而现实中的人口出生率比悲观的估计还要差。举例来说，五年前联合国预测到 2023 年韩国新生儿数量 35 万，但实际只有 23 万。哥伦比亚 2023 年出生了 51 万名婴儿，五年内下降 22%，比联合国的预测低 30%。出生率快速下降的通常是富裕发达国家，然而如今很多发展中国家的出生率比发达国家还低。去年墨西哥出生率首次低于美国。研究人员因此估计，全球人口可能会在 2054 年达到 90 亿左右的峰值，比联合国的预测早 30 年。此外目前没有观察到出生率会反弹的迹象。

A vulnerability was found in SAP SAPCAR. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Permission Handler. The manipulation as part of File Archive leads to improper access controls. This vulnerability is known as CVE-2016-5847. Local access is required to approach this attack. Furthermore, there is an exploit available.