186Articles
9Categories
2024-08-13Date
πŸ›
PostgreSQL Vulnerability Hackers Execute Arbitrary SQL Functions
πŸ›
FreeBSD Releases Urgent Patch for High-Severity OpenSSH Vulnerability
πŸ›
CVE-2022-2601 Redhat: CVE-2022-2601 grub2 - Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass
πŸ›
CVE-2024-38108 Azure Stack Hub Spoofing Vulnerability
πŸ›
CVE-2024-38123 Windows Bluetooth Driver Information Disclosure Vulnerability
πŸ›
CVE-2024-38159 Windows Network Virtualization Remote Code Execution Vulnerability
πŸ›
CVE-2024-38160 Windows Network Virtualization Remote Code Execution Vulnerability
πŸ›
CVE-2024-38161 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
πŸ›
CVE-2024-38167 .NET and Visual Studio Information Disclosure Vulnerability
πŸ›
CVE-2024-38168 .NET and Visual Studio Denial of Service Vulnerability
πŸ›
CVE-2024-38172 Microsoft Excel Remote Code Execution Vulnerability
πŸ›
CVE-2024-38178 Scripting Engine Memory Corruption Vulnerability
πŸ›
CVE-2024-38184 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38191 Kernel Streaming Service Driver Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38193 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38196 Windows Common Log File System Driver Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38197 Microsoft Teams for iOS Spoofing Vulnerability
πŸ›
CVE-2024-38198 Windows Print Spooler Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38199 Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
πŸ›
CVE-2024-38201 Azure Stack Hub Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38213 Windows Mark of the Web Security Feature Bypass Vulnerability
πŸ›
CVE-2023-40547 Redhat: CVE-2023-40547 Shim - RCE in HTTP boot support may lead to secure boot bypass
πŸ›
CVE-2024-38084 Microsoft OfficePlus Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38063 Windows TCP/IP Remote Code Execution Vulnerability
πŸ›
CVE-2024-38098 Azure Connected Machine Agent Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38106 Windows Kernel Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38107 Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
πŸ›
CVE-2024-29995 Windows Kerberos Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38114 Windows IP Routing Management Snapin Remote Code Execution Vulnerability
πŸ›
CVE-2024-38115 Windows IP Routing Management Snapin Remote Code Execution Vulnerability
πŸ›
CVE-2024-38116 Windows IP Routing Management Snapin Remote Code Execution Vulnerability
πŸ›
CVE-2024-38117 NTFS Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38118 Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
πŸ›
CVE-2024-38121 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
πŸ›
CVE-2024-38122 Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
πŸ›
CVE-2024-38125 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38126 Windows Network Address Translation (NAT) Denial of Service Vulnerability
πŸ›
CVE-2024-38127 Windows Hyper-V Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38128 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
πŸ›
CVE-2024-38130 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
πŸ›
CVE-2024-38131 Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
πŸ›
CVE-2024-38132 Windows Network Address Translation (NAT) Denial of Service Vulnerability
πŸ›
CVE-2024-38133 Windows Kernel Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38134 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38135 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38136 Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38137 Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38138 Windows Deployment Services Remote Code Execution Vulnerability
πŸ›
CVE-2024-38140 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
πŸ›
CVE-2024-38141 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38142 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38143 Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38144 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38145 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
πŸ›
CVE-2024-38146 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
πŸ›
CVE-2024-38147 Microsoft DWM Core Library Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38148 Windows Secure Channel Denial of Service Vulnerability
πŸ›
CVE-2024-38150 Windows DWM Core Library Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38151 Windows Kernel Information Disclosure Vulnerability
πŸ›
CVE-2024-38152 Windows OLE Remote Code Execution Vulnerability
πŸ›
CVE-2024-38153 Windows Kernel Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38154 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
πŸ›
CVE-2024-38155 Security Center Broker Information Disclosure Vulnerability
πŸ›
CVE-2024-38157 Azure IoT SDK Remote Code Execution Vulnerability
πŸ›
CVE-2024-38158 Azure IoT SDK Remote Code Execution Vulnerability
πŸ›
CVE-2024-38162 Azure Connected Machine Agent Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38165 Windows Compressed Folder Tampering Vulnerability
πŸ›
CVE-2024-38169 Microsoft Office Visio Remote Code Execution Vulnerability
πŸ›
CVE-2024-38170 Microsoft Excel Remote Code Execution Vulnerability
πŸ›
CVE-2024-38171 Microsoft PowerPoint Remote Code Execution Vulnerability
πŸ›
CVE-2024-38173 Microsoft Outlook Remote Code Execution Vulnerability
πŸ›
CVE-2024-38177 Windows App Installer Spoofing Vulnerability
πŸ›
CVE-2024-38180 Windows SmartScreen Security Feature Bypass Vulnerability
πŸ›
CVE-2024-38185 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38186 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38187 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability
πŸ›
CVE-2024-38195 Azure CycleCloud Remote Code Execution Vulnerability
πŸ›
CVE-2024-38163 Windows Update Stack Elevation of Privilege Vulnerability
πŸ›
CVE-2022-3775 Redhat: CVE-2022-3775 grub2 - Heap based out-of-bounds write when rendering certain Unicode sequences
πŸ›
CVE-2024-38211 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
πŸ›
CVE-2024-38120 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
πŸ›
CVE-2024-38214 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
πŸ›
CVE-2024-38215 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38222 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
πŸ›
CVE-2024-38223 Windows Initial Machine Configuration Elevation of Privilege Vulnerability
πŸ›
CVE-2024-38109 Azure Health Bot Elevation of Privilege Vulnerability
πŸ›
CVE-2024-37968 Windows DNS Spoofing Vulnerability
πŸ›
Microsoft August 2024 Patch Tuesday, (Tue, Aug 13th)
πŸ›
Mitre, Microsoft differ on how severe MS Office flaw really is
KEV
πŸ›
Ivanti Releases Security Updates for Avalanche, Neurons for ITSM, and Virtual Traffic Manager
πŸ›
Microsoft patches six actively exploited vulnerabilities
KEV
⚠️
CISOs face uncharted territory in preparing for AI security risks
⚠️
Radar/Dispossessor Ransomware Operation Disrupted by Authorities
⚠️
Researchers Uncover 10 Flaws in Google's File Transfer Tool Quick Share
⚠️
AMD Says New Sinkclose CPU Vulnerability Only Affects β€˜Seriously Breached Systems’
⚠️
On the Voynich Manuscript
⚠️
Scout Suite: Open-Source Cloud Security Auditing Tool
⚠️
Industrial Remote Access Tool Ewon Cosy+ Vulnerable to Root Access Attacks
⚠️
[FREE RESOURCE KIT] 2024 Cybersecurity Awareness Month Kit Now Available
⚠️
Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources
⚠️
Attackers Abuse Google Drawings to Host Phishing Pages
⚠️
FBI strikes down rumored LockBit reboot
⚠️
CryptoScam Strikes Misusing Trump & Musk Interview
⚠️
How to Prevent Your First AI Data Breach
⚠️
GhostWrite: New T-Head CPU Bugs Expose Devices to Unrestricted Attacks
⚠️
Researchers Uncover Vulnerabilities in AI-Powered Azure Health Bot Service
⚠️
Focus, Breadth, or Depth: Reduce Vulnerabilities with Less $ - Julian Mihai - CSP #187
⚠️
Reducing Supply Chain Risk & What’s lurking in your phone? - Danny Jenkins, Nikos Kiou... - ASW #295
⚠️
Ivanti warns of critical vTM auth bypass with public exploit
⚠️
3AM ransomware stole data of 464,000 Kootenai Health patients
⚠️
US Unseals Charges Against Three Eastern Europeans Over Ransomware, Malvertising
⚠️
CISA Releases Ten Industrial Control Systems Advisories
⚠️
Chameleon Malware Poses as CRM App
⚠️
Microsoft August 2024 Patch Tuesday fixes 9 zero-days, 6 exploited
KEV
⚠️
Microsoft Releases August 2024 Security Updates
⚠️
Microsoft Warns of Six Windows Zero-Days Being Actively Exploited
KEV
⚠️
Critical Patches Issued for Microsoft Products, August 13, 2024
⚠️
LDLC - 1,266,026 breached accounts
⚠️
Six 0-Days Lead Microsoft’s August 2024 Patch Push
KEV
⚠️
New Windows SmartScreen bypass exploited as zero-day since March
⚠️
Why scammers want your phone number
⚠️
Private AI For All: Our End-To-End Approach to AI Privacy on Android
⚠️
Post-Quantum Cryptography: Standards and Progress
πŸ“‹
Windows 10 KB5041580 update released with 14 fixes, security updates
πŸ“‹
Adobe Calls Attention to Massive Batch of Code Execution Flaws
πŸ“‹
Microsoft fixes issue that sent PCs into BitLocker recovery
πŸ“‹
Windows Server August updates fix Microsoft 365 Defender issue
πŸ“’
Black Hat Fireside Chat: Here’s how β€˜Active ASPM’ is helping to triage and remediate coding flaws
πŸ“’
NIS2: A Catalyst for Cybersecurity Innovation or Just Another Box-Ticking Exercise?
πŸ“’
Post-Quantum Cryptography Standards Officially Announced by NIST – a History and Explanation
πŸ“’
NIST Officially Announces Post Quantum Cryptography Standards
πŸ“’
[Control systems] Schneider Electric security advisory (AV24-455)
πŸ“’
SAP security advisory – August 2024 monthly rollup (AV24-454)
πŸ“’
Microsoft security advisory – August 2024 monthly rollup (AV24-458)
πŸ“’
Adobe security advisory (AV24-457)
πŸ“’
Ivanti security advisory (AV24-456)
πŸ“’
Intel security advisory (AV24-459)
πŸ“’
NIST finally settles on quantum-safe crypto standards
πŸ”₯
FBI Says It Is Investigating After Trump Campaign Said Sensitive Documents Were Hacked by Iran
πŸ”₯
DeathGrip Ransomware Expanding Services Using RaaS Service
πŸ”₯
UN Approves Cybercrime Treaty Despite Major Tech, Privacy Concerns
πŸ”₯
FBI Shuts Down Dispossessor Ransomware Group's Servers Across U.S., U.K., and Germany
πŸ”₯
Authorities Seized Dispossessor Ransomware Servers
πŸ”₯
Don’t get Mad, get wise
πŸ”₯
Ransomware Hits Australian Gold Mining Firm Evolution Mining
πŸ”₯
Elon Musk Says Cyberattack Crashed Site Ahead of Trump Livestream Interview
πŸ”₯
Why Hardsec Matters: From Protecting Critical Services to Enhancing Resilience
πŸ”₯
Report: 74% of Ransomware Victims Were Attacked Multiple Times in a Year
πŸ”₯
Donald Trump interview with Elon Musk disrupted by DDoS Cyber Attack
πŸ”₯
Cost of a data breach 2024: Financial industry
πŸ”₯
Ransom Cartel, Reveton ransomware owner arrested, charged in US
πŸ”₯
Dispossessor Ransomware Group Shut Down By US, EU Authorities
πŸ”₯
Nigerian who hacked Texas retirement fund gets 12 years in prison
πŸ”₯
Inside the "3 Billion People" National Public Data Breach
πŸ”₯
National Public Data (unverified) - 133,957,569 breached accounts
πŸ”₯
Chris Leong - 27,096 breached accounts
πŸ•΅οΈ
ISC Stormcast For Tuesday, August 13th, 2024 https://isc.sans.edu/podcastdetail/9094, (Tue, Aug 13th)
πŸ•΅οΈ
Unmasking the Overlap Between Golddigger and Gigabud Android Malware
πŸ•΅οΈ
Threat Actors Hijacking Websites to Deliver .NET-Based Malware
πŸ•΅οΈ
35% of exposed API keys still active, posing major security risks
πŸ•΅οΈ
CyberheistNews Vol 14 #33 Your Users Still Fall For Phishing Attacks Because of URL Shorteners
πŸ•΅οΈ
Reframing the ZTNA vs. SASE Debate
πŸ•΅οΈ
DARPA Aims to Ditch C Code, Move to Rust
πŸ•΅οΈ
When Appsec Needs to Start Small - Kalyani Pawar - ASW #295
πŸ•΅οΈ
SAP Patches Critical Vulnerabilities in BusinessObjects, Build Apps
πŸ•΅οΈ
AI in Cybersecurity: Attackers vs. Defenders - The Future of LLMs
πŸ•΅οΈ
Reflecting on KnowBe4's 5th Consecutive TrustRadius Tech Cares Award
πŸ•΅οΈ
Summer Lovin' or Summer Scammin'?
πŸ•΅οΈ
DEFCON Hijinx, AMD, Ukraine, FreeBSD, OpenVPN, the Pwnie Awards, Josh Marpet... - SWN #406
🌐
Ukraine Warns of New Phishing Campaign Targeting Government Computers
🌐
Britain and France to Discuss Misuse of Commercial Cyber Intrusion Tools
πŸŽ™οΈ
The AI Fix #11: AI gods, a robot dentist, and an angry human
πŸ“‘
Rogue PyPI Library Solana Users, Steals Blockchain Wallet Keys
πŸ“‘
Fake X Content Warnings on Ukraine War, Earthquakes Used as Clickbait
πŸ“‘
New Dark Skippy Attack Let Hackers Steal Secret Keys From Signing Devices
πŸ“‘
Kaspersky’s Safe Travel Guide | Kaspersky official blog
πŸ“‘
Misconfigurations and IAM Weaknesses Top Cloud Security Concerns
πŸ“‘
SAP Patches Critical Vulnerabilities In BusinessObjects, Build Apps
πŸ“‘
Musk Blames DDoS Attack On X For Crashing Trump Interview
πŸ“‘
US appeals court rules geofence warrants are unconstitutional
πŸ“‘
Windows 11 KB5041585 cumulative update released with fixes, new features
πŸ“‘
Download the network observability tools enterprise buyer’s guide
πŸ“‘
Google: Gemini AI for Android processes sensitive data locally
πŸ“‘
Critical SAP flaw allows remote attackers to bypass authentication
πŸ“‘
Google says it's focusing on privacy with Gemini AI on Android