Aggregator

The Chinese cyber-espionage collective UAT-8302 has, for nearly a annum, conducted surreptitious incursions against governmental entities across South

The post UAT-8302’s Global Espionage Machine Is Hijacking Governments via the Cloud appeared first on Penetration Testing Tools.

Cybersecurity adversaries have asserted a monumental breach of one of the world’s preeminent pedagogical platforms, claiming the exfiltration

The post Class Dismissed? ShinyHunters Claims Massive Breach of 280 Million Records from Canvas LMS appeared first on Penetration Testing Tools.

东京大学的研究人员在《Cell》期刊上发表论文，报告在泰国的蝙蝠体内发现了一种遗传信息与新冠病毒相似的病毒。该病毒有可能具备感染人类的能力。新冠病毒 2019 年出现并引发全球大流行，它被广泛认为来自于蝙蝠。近年的研究已在东南亚野生蝙蝠身上检出多种与新冠病毒基因信息相似的病毒。但此前发现的病毒和新冠病毒不同，其无法与人类细胞表面的蛋白质结合，基本不具备感染人类的能力。研究团队针对泰国境内栖息的蝙蝠开展了病毒调查。结果成功锁定了一种可与人体细胞蛋白结合的新病毒。在实验室中测试现有新冠疫苗和治疗药物对新病毒是否有效，结果均显示有效。该病毒的增殖能力和致病性低于新冠病毒。

ESET researchers uncovered fraudulent apps on Google Play that claim to provide the call history “for any number” and had been downloaded more than seven million times before being taken down

MuddyWater 伊朗黑客将其攻击行动伪装成 Chaos 勒索软件攻击，通过微软 Teams 进行社会工程学攻击，获取访问权限并实现长期驻留。   尽管此次攻击涉及凭证窃取、长期驻留、远程访问、数据窃取、勒索邮件，以及在 Chaos 泄露门户网站上发布信息，但攻击者使用的基础设施和技术与 MuddyWater 攻击相关。   Rapid7 的研究人员认为，勒索软件部分可能是...

A vulnerability identified as problematic has been detected in Wireshark up to 3.6.10/4.0.2. This affects an unknown part of the component iSCSI Dissector. Performing a manipulation results in denial of service. This vulnerability is known as CVE-2023-0415. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability labeled as problematic has been found in Wireshark up to 3.6.11/4.0.3. This affects an unknown part of the component ISO 15765 Dissector. Executing a manipulation can lead to denial of service. This vulnerability is registered as CVE-2023-1161. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

A vulnerability classified as problematic was found in Wireshark up to 3.6.12/4.0.4. Affected by this vulnerability is an unknown functionality of the component GQUIC Dissector. Such manipulation leads to denial of service. This vulnerability is traded as CVE-2023-1994. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability described as problematic has been identified in Wireshark up to 3.6.12/4.0.4. This impacts an unknown function of the component LISP Dissector. The manipulation results in denial of service. This vulnerability is reported as CVE-2023-1993. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in Wireshark up to 3.6.12/4.0.4. This affects an unknown function of the component RPCoRDMA Dissector. The manipulation leads to denial of service. This vulnerability is documented as CVE-2023-1992. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability described as problematic has been identified in Wireshark up to 3.6.13/4.0.5. The affected element is an unknown function of the component BLF File Parser. Such manipulation leads to denial of service. This vulnerability is referenced as CVE-2023-2857. The attack can only be performed from a local environment. No exploit is available. Upgrading the affected component is recommended.

A vulnerability labeled as problematic has been found in Wireshark up to 3.6.13/4.0.5. This issue affects some unknown processing of the component Candump Log Parser. The manipulation results in denial of service. This vulnerability was named CVE-2023-2855. The attack needs to be approached locally. There is no available exploit. The affected component should be upgraded.

A vulnerability, which was classified as problematic, has been found in Wireshark up to 3.6.13/4.0.5. This impacts an unknown function of the component GDSDB. The manipulation leads to denial of service. This vulnerability is listed as CVE-2023-2879. The attack must be carried out locally. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability classified as problematic has been found in Wireshark up to 3.6.13/4.0.5. The impacted element is an unknown function of the component NetScaler File Parser. Performing a manipulation results in denial of service. This vulnerability is identified as CVE-2023-2858. The attack is only possible with local access. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability marked as problematic has been reported in Wireshark up to 3.6.13/4.0.5. Impacted is an unknown function of the component VMS TCPIPtrace File Parser. This manipulation causes denial of service. The identification of this vulnerability is CVE-2023-2856. The attack can only be executed locally. There is no exploit available. It is suggested to upgrade the affected component.

美国网络安全与基础设施安全局（CISA）将 Palo Alto Networks PAN - OS 中的一个漏洞（编号为 CVE - 2026 - 0300，CVSS 评分 9.3），纳入其已知被利用漏洞（KEV）目录。   该漏洞属于缓冲区溢出漏洞，可导致未经身份验证的远程代码执行，尤其是在用户身份认证门户（User - ID portal）暴露于互联网的情况下。   Pal...

A vulnerability, which was classified as problematic, was found in Wireshark up to 3.6.13/4.0.5. The affected element is an unknown function of the component XRA Dissector. Executing a manipulation can lead to denial of service. This vulnerability is tracked as CVE-2023-2952. The attack is restricted to local execution. No exploit exists. You should upgrade the affected component.

A vulnerability was found in Wireshark up to 3.6.14/4.0.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Kafka Dissector. The manipulation results in mismatched memory management routines. This vulnerability was named CVE-2023-3648. The attack needs to be approached locally. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Wireshark up to 3.6.15/4.0.7. The impacted element is an unknown function of the component BT SDP Dissector. Executing a manipulation can lead to infinite loop. The identification of this vulnerability is CVE-2023-4511. The attack can only be executed locally. There is no exploit available. You should upgrade the affected component.

Falcon 9 是 SpaceX 的主力火箭，该公司还有重型火箭 Falcon Heavy 以及仍然处于研发阶段 Starship 火箭。2023 年 SpaceX 的 Falcon 火箭共执行了 96 次发射，2024 年完成了 134 次发射，2025 年 165 次。今年初 SpaceX 总裁 Gwynne Shotwell 表示今年计划执行 140 或 145 次 Falcon 发射，随着 Starship 投入服役发射量将减少。发射减少的趋势从其发射台的活动频率上已经显现出来。肯尼迪太空中心的 LC-39A 发射台已经不再用于发射 Falcon 9 火箭，改为发射少量 Falcon Heavy 以及 Starship。Falcon 9 在短期内不太会退役，其寿命预计会持续到 2030 年代之后，但其发射频率在降低。