Aggregator

Параллелизация ломает алгоритм Гровера — и все забыли об этом.

The UK’s cybersecurity agency said the devices will be available for purchase by organizations around the world

Key Takeaways We identified an exposed server that provided unusual visibility into a large-scale, multi-victim exploitation and collection operation. Artifacts on the host showed that Claude Code and OpenClaw were embedded in the operator’s day-to-day workflow, supporting troubleshooting, orchestration, and refinement of the collection pipeline. This AI-assisted workflow resulted in the modular platform Bissa scanner […]

The post Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting appeared first on The DFIR Report.

A vulnerability classified as very critical has been found in Microsoft Internet Explorer up to 11. The impacted element is the function CMarkup::IsConnectedToPrimaryMarkup of the component SWF File Handler. This manipulation causes code injection. This vulnerability is registered as CVE-2014-1776. Remote exploitation of the attack is possible. Furthermore, an exploit is available. This vulnerability is considered historic because of its background and reception. It is best practice to apply the suggested workaround.

A vulnerability described as critical has been identified in Linux Kernel up to 3.14.3. Affected is the function n_tty_write of the file drivers/tty/n_tty.c of the component PTY Write Handler. Executing a manipulation can lead to race condition. The identification of this vulnerability is CVE-2014-0196. The attack can only be executed locally. Furthermore, there is an exploit available. This vulnerability has a historic impact due to its background and reception. Applying a patch is advised to resolve this issue.

A vulnerability categorized as critical has been discovered in Ruby on Rails up to 3.2.17/4.0.4/4.1.0. Affected by this issue is some unknown functionality of the file render_implicit_action_test.rb of the component Implicit Render Handler. Executing a manipulation can lead to path traversal. This vulnerability appears as CVE-2014-0130. The attack may be performed from remote. In addition, an exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in Microsoft Windows Vista SP2 up to Server 2012 R2. This affects an unknown function of the component Active Directory Group Policy. The manipulation results in credentials management. This vulnerability is known as CVE-2014-1812. Attacking locally is a requirement. Furthermore, an exploit is available. It is best practice to apply a patch to resolve this issue.

A vulnerability categorized as problematic has been discovered in Linux Kernel 3.14.1/3.14.2/3.14.3/3.14.4/3.14.5. This impacts the function futex_requeue of the file kernel/futex.c of the component Futex Subsystem. Executing a manipulation can lead to improper access controls. This vulnerability is tracked as CVE-2014-3153. The attack is restricted to local execution. Moreover, an exploit is present. It is advisable to upgrade the affected component.

A vulnerability was found in IBM InfoSphere BigInsights up to 2.1.0.1. It has been classified as problematic. This vulnerability affects unknown code. The manipulation leads to improper access controls. This vulnerability is documented as CVE-2013-3993. The attack can be initiated remotely. Additionally, an exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in Elasticsearch 1.1.1. It has been classified as critical. This issue affects some unknown processing of the component Default Configuration. The manipulation of the argument Source leads to configuration. This vulnerability is documented as CVE-2014-3120. The attack can be initiated remotely. Additionally, an exploit exists. Upgrading the affected component is recommended.

A vulnerability identified as critical has been detected in Adobe Acrobat Reader. Affected by this issue is some unknown functionality of the component File Handler. This manipulation causes memory corruption. This vulnerability is handled as CVE-2014-0546. The attack can be initiated remotely. Additionally, an exploit exists. You should upgrade the affected component.

A vulnerability was found in Microsoft Internet Explorer up to 11. It has been declared as critical. Affected by this issue is some unknown functionality. The manipulation results in improper access controls. This vulnerability is reported as CVE-2014-2817. The attack can be launched remotely. Moreover, an exploit is present. It is advisable to implement a patch to correct this issue.

A vulnerability labeled as problematic has been found in Codeaurora Android-msm 3.16.1. The affected element is the function acdb_ioctl of the file audio_acdb.c. Executing a manipulation of the argument ioctl can lead to memory corruption. This vulnerability is registered as CVE-2013-2597. The attack needs to be launched locally. Furthermore, an exploit is available.

A vulnerability, which was classified as critical, has been found in Apple iOS up to 7.1.2. The affected element is an unknown function of the component IOHIDFamily. This manipulation causes memory corruption. The identification of this vulnerability is CVE-2014-4404. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is advisable to upgrade the affected component.

A vulnerability labeled as critical has been found in Apple Mac OS X up to 10.9.3. The affected element is an unknown function of the component IOHIDFamily. Executing a manipulation can lead to memory corruption. This vulnerability appears as CVE-2014-4404. The attack may be performed from remote. In addition, an exploit is available. The affected component should be upgraded.

A compromised developer's repository serves as a worm-like infection vector to spread remote access Trojans (RATs) and other malware.

人工智能（AI）不再仅仅是未来战争的问题。

Показываем, насколько просто стать жертвой взлома при выполнении рутинных задач.

IT has long been concerned with ensuring systems receive the right amount of electricity. Cyberattackers are realizing they can manipulate voltage fluctuations for their purposes, too.

中国载人航天工程首批外籍航天员选拔工作于 2026 年 4 月上旬结束，2 名巴基斯坦籍候选对象 Muhammad Zeeshan Ali（穆罕默德·齐尚·阿里）和 Khurram Daud（胡拉姆·达乌德）最终入选。他们将作为预备航天员来华参加训练，在完成各项训练并通过考核后，其中 1 人将以载荷专家身份参加飞行任务，成为首位进入中国空间站的外籍航天员。2025 年 2 月，中巴在伊斯兰堡签署《关于选拔、训练巴基斯坦航天员并参与中国空间站飞行任务的合作协议》，随即正式启动巴基斯坦航天员选拔工作。经过初选、复选、定选三个阶段的严格筛选和评定，最终选拔出 2 名巴基斯坦预备航天员。