1886 matches found
GHSA-7MH3-GQ28-GFRQ
creationtimestamp| type| source ---|---|--- 2024-07-19 19:59:44+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1918...
AI device Rabbit r1 logged user interactions without an option to erase them before selling
Rabbit, the manufacturer of the Artificial Intelligence AI assistant r1 has issued a security advisory telling users its found a potential security risk. If a user loses or sells their device, a person in possession of the r1 could potentially jailbreak the device and gain access to files that...
CVE-2024-38023
creationtimestamp| type| source ---|---|--- 2024-07-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1324 2024-07-10 09:41:41+00:00| published-proof-of-concept| https://t.me/poxek/4205 2024-07-10 11:35:17+00:00| published-proof-of-concept|...
CVE-2024-4885
creationtimestamp| type| source ---|---|--- 2024-07-08 18:41:24+00:00| published-proof-of-concept| https://t.me/CNArsenal/2765 2024-07-08 18:42:49+00:00| published-proof-of-concept| https://t.me/realLulzSec/1198 2024-07-08 18:42:49+00:00| published-proof-of-concept| https://t.me/realLulzSec/12033...
Pen testing cruise ships
New build ships contracted for build from 1st July 2024 must comply with IACS UR E26 & 27. What does this mean for assessing the cyber security of a cruise ship? What’s the risk profile? Cruise ships have a unique risk profile. This is due to the huge number of guests on board, highly complex...
PT-2024-13016 · Kiloview · P1/P2
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The server supports at least one cipher suite which is on the NCSC-NL list of cipher suites to be phased out, increasing the risk of cryptographic weaknesses. Recommendations: At the...
FBI Distributes 7,000 LockBit Ransomware Decryption Keys to Help Victims
The U.S. Federal Bureau of Investigation FBI has disclosed that it's in possession of more than 7,000 decryption keys associated with the LockBit ransomware operation to help victims get their data back at no cost. "We are reaching out to known LockBit victims and encouraging anyone who suspects...
CVE-2024-3322
A path traversal vulnerability exists in the 'cybersecurity/codeguard' native personality of the parisneo/lollms-webui, affecting versions up to 9.5. The vulnerability arises from the improper limitation of a pathname to a restricted directory in the 'processfolder' function within...
CVE-2024-3322 Path Traversal in parisneo/lollms-webui
A path traversal vulnerability exists in the 'cybersecurity/codeguard' native personality of the parisneo/lollms-webui, affecting versions up to 9.5. The vulnerability arises from the improper limitation of a pathname to a restricted directory in the 'processfolder' function within...
CVE-2024-3322
The CVE-2024-3322 path-traversal vulnerability affects parisneo/lollms-webui “cyber_security/codeguard” native personality up to version 9.5. The root cause is improper sanitization of user-supplied code_folder_path in lollms-webui/zoos/personalities_zoo/cyber_security/codeguard/scripts/processor...
CGA-RP24-CWQX-M2F4
Bulletin has no description...
How Do Hackers Blend In So Well? Learn Their Tricks in This Expert Webinar
Don't be fooled into thinking that cyber threats are only a problem for large organizations. The truth is that cybercriminals are increasingly targeting smaller businesses, and they're getting smarter every day. Join our FREE webinar "Navigating the SMB Threat Landscape: Key Insights from Huntres...
AI Trust Risk and Security Management: Why Tackle Them Now?
Co-authored by Sabeen Malik and Laura Ellis In the evolving world of artificial intelligence AI, keeping our customers secure and maintaining their trust is our top priority. As AI technologies integrate more deeply into our daily operations and services, they bring a set of unique challenges tha...
New Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation
Google on Monday shipped emergency fixes to address a new zero-day flaw in the Chrome web browser that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2024-4761, is an out-of-bounds write bug impacting the V8 JavaScript and WebAssembly engine. It wa...
ASD’s ACSC, CISA, and Partners Release Secure by Design Guidance on Choosing Secure and Verifiable Technologies
Today, the Australian Signals Directorate’s Australian Cyber Security Centre ASD’s ACSC, together with CISA, the Canadian Centre for Cyber Security CCCS, the United Kingdom’s National Cyber Security Centre NCSC-UK, and the New Zealand National Cyber Security Centre NCSC-NZ are releasing the...
CVE-2020-19417
creationtimestamp| type| source ---|---|--- 2024-05-07 14:30:02+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2876...
CVE-2020-1381
creationtimestamp| type| source ---|---|--- 2024-05-07 14:22:54+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3299...
CVE-2019-6487
creationtimestamp| type| source ---|---|--- 2024-05-06 10:32:27+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/315...
When is One Vulnerability Scanner Not Enough?
Like antivirus software, vulnerability scans rely on a database of known weaknesses. That's why websites like VirusTotal exist, to give cyber practitioners a chance to see whether a malware sample is detected by multiple virus scanning engines, but this concept hasn't existed in the vulnerability...