Aggregator

安卓远程控制工具 Scrcpy v3.1 升级：当虚拟显示窗口关闭时，应用不会被关闭，转移到主窗口

A vulnerability classified as critical was found in Zabbix up to 7.0.0rc2. Affected by this vulnerability is an unknown functionality. The manipulation leads to allocation of resources. This vulnerability is known as CVE-2024-36462. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Zabbix up to 5.0.42/6.0.30/6.4.15/7.0.0rc2. This affects an unknown part of the component Setting SMS Media. The manipulation leads to code injection. This vulnerability is uniquely identified as CVE-2024-22123. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Zabbix up to 5.0.42/6.0.30/6.4.15/7.0.0rc2. It has been classified as problematic. Affected is an unknown function of the component Front-end Audit Log. The manipulation leads to unprotected storage of credentials. This vulnerability is traded as CVE-2024-36460. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Zabbix up to 6.0.30/6.4.15/7.0.0 and classified as critical. This issue affects some unknown processing of the component JavaScript Engine. The manipulation leads to untrusted pointer dereference. The identification of this vulnerability is CVE-2024-36461. The attack may be initiated remotely. There is no exploit available.

Ainsworth Game Technology Has Been Claimed a Victim to MEDUSA Ransomware

Что произойдет, если антропный принцип провалится?

Mr Hamza Targeted the Website of Presidency of the Italian Republic

The Ruby on Rails _json Juggling Attack

GitGuardian today extended the reach of its ability to manage applications secrets into the realm of non-human identities (NHI) associated with machines and software components.

The post GitGuardian Extends Reach to Manage Non-Human Identities appeared first on Security Boulevard.

Квантовые компьютеры становятся все идеальнее.

A vulnerability was found in PwnDoc. It has been rated as problematic. This issue affects some unknown processing of the component Template Handler. The manipulation leads to path traversal: '../filedir'. The identification of this vulnerability is CVE-2024-55602. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

Goolge 宣布了新量子芯片 Willow

CERT-UA Warns of Phishing Attacks Targeting Ukraine’s Defense and Security Force

Given Today’s Data Complexity, a Platform Mindset is Crucial for Cyber Recovery

社区速递 072 | 你没见过的社区文章、一周最热评、派友吃什么火锅

How I Dealt with Proton VPN's Enshittification Using an Open-source Solution

The Federal Trade Commission (FTC) is distributing over $72 million in Epic Game Fortnite refunds for the company's use of dark patterns to trick players into making unwanted purchases. [...]

Microsoft is calling out to researchers to participate in a competition that is aimed at testing the latest protections in LLMs against prompt injection attacks, which OWASP is calling the top security risk facing the AI models as the industry rolls into 2025.

The post Microsoft Challenge Will Test LLM Defenses Against Prompt Injections appeared first on Security Boulevard.