Editors' Pick 

APT42 műveleteinek felgöngyölítése

Geronimo

Az APT42, egy iráni államilag által támogatott kiberkémkedő szereplő továbbfejlesztett pszichológiai megtévesztési (social engineering) sémákat használ az áldozathálózatokhoz való hozzáférés

Editors' Pick 

Pouring Acid Rain

Geronimo

A közelmúlt két jelentős geopolitikai konfliktusában – Ukrajnában és Izraelben – a digitális infrastruktúra megsemmisítésére használtak wiper programokat – a

Editors' Pick 

SilkSecured: Kínai kormányzati webrendszerek biztonsága és függősége

Geronimo

A SilkSecured című tanulmány a kínai kormányzati webes rendszerek gyakorlatát vizsgálja. Vizsgálja a kínai kormányzati webes infrastruktúrát ostromló biztonsági és

Goldoon botnet

Geronimo

CISA Secure by Design riasztás – directory traversal

TrainedR

TargetCompany támadások MS-SQL szerverek ellen

TrainedR

Kártékony dockerek

TrainedR

Észak-koreai szereplők kihasználják a gyenge DMARC-t

TrainedR

Cuttlefish Malware

Geronimo

Dropbox Sign biztonsági incidens

Geronimo

API-k titkos élete

Geronimo

Talos sérlüékenységi jelentések

Geronimo

Blokklánc-elemzés javítása mesterséges intelligenciával

Geronimo

2,3 millió alkalmazást blokkolt a Google 2023-ban

Geronimo

2024-es választásokat fenyegető kiberfenyegetések felmérése

Geronimo

News

News 

pcap-did-what: Analyze pcaps with Zeek and a Grafana Dashboard

submitted by /u/thewanderer1999 [link] [comments]Technical Information Security Content & DiscussionRead More

The Boys S4 trailer brings us more bloody mayhem and “Homelander on Ice”

It’s Star Wars Day and we have a new trailer for The Acolyte to celebrate

The Apple Pirate Flag – A Fun Story from Apple History, and a Free Wallpaper

The newest Star Wars Acolyte trailer seems to reveal the show’s big bad

Dating apps kiss’n’tell all sorts of sensitive personal info

A Mind at Play: Rediscovering Minesweeper in the Professional Arena

ChromeOS gets better multitasking and Wi-Fi traffic prioritization

Kiberbiztonsági hírek

Follow Us

Facebook-f

Vendors' news

Transatlantic Cable podcast episode 345 | Kaspersky official blog

Information security in the “Bad Batch” | Kaspersky official blog

You get a passkey, you get a passkey, everyone should get a passkey

Healthcare Needs To Be Laser-Focused on API Security and Its Blind Spots

THOR’s Power Unleashed: Multi-Threading for the Masses

Life with the Penguin

run0, A Safer Alternative to sudo, Introduced in Systemd v256

RHEL 9.4 Improves Security, Tackles Hybrid Cloud Complexity

Multiple Apache HTTP Server Flaws Fixed in Ubuntu

How Debian 12 is Redefining Stability and Innovation in Open-Source OSes

Canonical releases Landscape 24.04 LTS

Check this out

New network to target migrant smugglers in the digital domain

Operation PANDORA shuts down 12 phone fraud call centres

High-ranking Hells Angels member busted in drug trafficking operation in Marbella

Almost 1 400 firearms removed from circulation in 16 European countries

16 arrests as Vietnamese network smuggling migrants across the English Channel busted

CERT news

UPDATE ALERT GitLab Community Edition (CE) and GitLab Enterprise Edition (EE): CVSS (Max): 10.0

PHP: CVSS (Max): 6.5

Google Chrome: CVSS (Max): None

Featured categories

News

pcap-did-what: Analyze pcaps with Zeek and a Grafana Dashboard

SecurityVulns

Debian LTS: DLA-3808-1: intel-microcode Security Advisory Updates

SecurityVulns

Bigem Teknoloji – Blind Sql Injection

SecurityVulns

BitraTech – Sql Injection

IOT

ICS

5G trends

Best Smart Lights for 2024 – CNET

Save $10 on This TP-Link Smart Outlet Extender on Amazon – CNET

Add Instant Mood to Any Room With These Ambient Lighting Tips – CNET

Save on Ring Doorbell Cameras and Gear at Woot Until May 7 – CNET

Get a Better Google Assistant Experience by Updating 5 Settings – CNET

The Yale Assure Lock 2 Is Now $50 Off at Best Buy – CNET

Snag These De-Lightful Smart Govee Triangle Lights at Amazon for 50% Off – CNET

Brilliant Smart Home Control Plug-In Panel Review: A Sleek Smart Controller at a Steep Price – CNET

Password Managers: The Hidden Hero of Your Home Security – CNET

Ring Settlement FAQ: Here’s Why Home Security Users Like You Are Getting Paid – CNET

FBI warns of email spoofing by North Korean threat actor Kimsuky

Old vulnerable D-Link routers subjected to novel Goldoon botnet attacks

Android apps targeted by new Dirty Stream attack

CISA and FBI issue secure by design alert to urge manufacturers to remove directory traversal vulnerabilities

Media, think tank, service spoofing conducted in APT42 cyberespionage operations

Note to investors and security pros: drive innovation by going on the offensive  

SPAN Ports and OT Continuous Monitoring: Securing Otherwise Insecure Network Traffic

GAO report indicates that NASA should update spacecraft acquisition policies and standards for cybersecurity

‘Junk gun’ ransomware: Peashooters can still pack a punch

Critical GitLab account takeover flaw added to CISA’s KEV Catalog

Apple earnings: About that iPhone ‘slump’ in China

Microsoft begins to phase out ‘classic’ Teams

Udacity offers laid-off US workers free access to its courses for 30 days

Apple confirms it will open up the iPad in Europe this fall

Workers with these AI skills are getting cash premiums

Why you’ll soon have a digital clone of your own

Atlassian Rovo brings AI smarts to enterprise search

Mosyle and Fleet bring new device management options to Apple enterprise

Vodafone Italy completes three-month OpenRAN trial

GSMA launches 5G Connectivity index

Vulnerabilities

Debian LTS: DLA-3808-1: intel-microcode Security Advisory Updates

BitraTech – Sql Injection

Bigem Teknoloji – Blind Sql Injection

SOPlanning 1.52.00 Cross Site Request Forgery

SOPlanning 1.52.00 Cross Site Scripting

SOPlanning 1.52.00 SQL Injection

Webenlive – Sql Injection

Microsoft PlayReady Cryptography Weakness

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Device Config Disclosure

Sandhya Branding Agency – Blind Sql Injection

CVE-2023-27283 | IBM Aspera Orchestrator 4.0.1 observable response discrepancy (XFDB-248545)

Gentoo: GLSA-202405-09: MediaInfo, MediaInfoLib: Security Advisory Updates

Gentoo: GLSA-202405-07: HTMLDOC: Security Advisory Updates

Gentoo: GLSA-202405-08: strongSwan: Security Advisory Updates

Gentoo: GLSA-202405-03: Dalli: Code InjectionSecurity Advisory Updates

Gentoo: GLSA-202405-05: MPlayer: Security Advisory Updates

Gentoo: GLSA-202405-04: systemd: Security Advisory Updates

Gentoo: GLSA-202405-06: mujs: Security Advisory Updates

Gentoo: GLSA-202405-01: Python, PyPy3: Security Advisory Updates

Gentoo: GLSA-202405-02: ImageMagick: Security Advisory Updates

CVE-2024-34461 | Zenario Twig Snippet Plugin prior 9.5.60437 HEAD/BODY Privilege Escalation

CVE-2024-34460 | Zenario prior 9.5.60602 Tree Explorer Tool cross site scripting

CVE-2024-4335 | Rank Math SEO with AI Best SEO Tools Plugin up to 1.0.217 on WordPress cross site scripting

CVE-2024-3974 | BuddyPress Plugin up to 12.4.0 on WordPress cross site scripting

CVE-2024-4150 | Simple Basic Contact Form Plugin up to 20221201 on WordPress cross site scripting

CVE-2024-4158 | Blocksy Plugin up to 2.0.42 on WordPress cross site scripting

CVE-2024-4491 | Tenda i21 1.0.0.14(4656) formGetDiagnoseInfo cmdinput stack-based overflow

CVE-2024-4492 | Tenda i21 1.0.0.14(4656) /goform/setStaOffline formOfflineSet GO/ssidIndex stack-based overflow

CVE-2024-4493 | Tenda i21 1.0.0.14(4656) formSetAutoPing ping1/ping2 stack-based overflow

CVE-2024-4494 | Tenda i21 1.0.0.14(4656) /goform/setUplinkInfo formSetUplinkInfo pingHostIp2 stack-based overflow