Aggregator

CISA предупреждает, что хакеры испытывают на прочность водную инфраструктуру.

TeamTNT is targeting CentOS VPS clouds with SSH brute force attacks. It has uploaded a malicious script that disables security, deletes logs, and modifies system files to kill existing miners, remove Docker containers, and redirect DNS to Google servers. The script stealthily installs the Diamorphine rootkit to gain root privileges and maintain persistent control by […]

The post TeamTNT Hackers Attacking VPS Servers Running CentOS appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

今天的 OpenAI 其主体名义上是一家非营利性组织，由董事会控制。在未遂“政变”近一年之后，OpenAI 正在制定计划，将核心业务重组为营利性公益公司，不再受非营利董事会控制，它还将移除投资者回报上限，CEO Sam Altman 将获得这家营利性公司的股权，股权的总价值可能高达 1500 亿美元。知情人士称，OpenAI 非营利组织将继续存在并拥有新公司少数股权。知情人士称，新计划完成的时间表未确定，OpenAI 仍然在与律师和股东商讨中。此外 OpenAI CTO Mira Murati 在继联合创始人 Ilya Sutskever 和 John Schulman 之后宣布了辞职。

Researchers are tracking a Russian threat actor deploying domains involved in crypto scams targeting the US Presidential Election and tech brands. The scams offer double crypto returns for deposits and are designed to deceive users into sending coins to attacker-controlled wallets. The research identified numerous websites promoting fraudulent giveaways featuring high-profile US individuals and brands, […]

The post Russian Hackers Registering Domains Targeting US Tech Brands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

一名 88 岁的男子是世界服刑时间最长的死刑犯，他在重审中被日本法院宣判无罪。袴田岩被控于 1966 年谋杀了其上司一家四口人。日本静冈地方法院 26 日作出判决，宣判其无罪。这是日本战后第 5 个对死刑案件重审后宣判无罪的案例。此前 4 例均因检方不再上诉而确定。关于对袴田的重审，检方重新主张有罪并要求判处死刑，是否上诉将成为今后的焦点。袴田 1966 年被逮捕，在长时间的审讯中“招供”，但在审判中转而否认。1980 年被确定为死刑。2014 年静冈地方法院决定开始重审此案，袴田因此获释。他的身份此前依然为死囚。

未来的网安人该如何找工作？

LG 宣布开始在电视屏保上展示广告。LG 最早是在 9 月 5 日向广告商披露这一计划的，没有向消费者或其电视客户广而告之，显然是因为广告不是什么让消费者兴奋的功能。用户报告在 LG 最新旗舰电视 G4 上看到全屏的屏保广告。广告是默认打开的，用户可以在设置里关闭。根据 LG 广告部门 LG AD Solutions 的说明，屏保广告在 LG 智能电视的主屏幕、LG Channels 和 Content Store 上激活，旨在利用空闲屏幕时间，将被视为停机时间的时间段变成宝贵的参与机会。LG AD Solutions 委托进行的测试表明，屏保广告将品牌知名度平均提升了 2.5 倍。

本周，互联网网络安全态势整体评价为良。

A vulnerability classified as problematic was found in PLANEX CS-QR10, CS-QR20, CS-QR22, CS-QR220 and CS-QR300. This vulnerability affects unknown code of the component Web Management Page. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-45836. The attack can be initiated remotely. There is no exploit available.

A vulnerability classified as critical has been found in Synology Drive Client. This affects an unknown part of the component Backup Task Management. The manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2022-49041. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.