CISA, Australia, and Partners Author Joint Guidance on Securely Integrating Artificial Intelligence in Operational Technology

CISA and the Australian Signals Directorate’s Australian Cyber Security Centre, in collaboration with federal and international partners, have released new cybersecurity guidance: Principles for the Secure Integration of Artificial Intelligence in Operational Technology. This guidance aims to hel...

USN-7774-1 linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-raspi, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Serial ATA and Parallel ATA...

USN-7769-1 linux, linux-aws, linux-gcp, linux-gcp-6.14, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

Vulnerability of the function dc_dmub_srv_optimized_init_done() in the driver/gpu/drm/amd/display/dc/dc_dmub_srv.c file – This is a driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards for Linux operating systems. It allows a hacker to cause a service failure.

Vulnerability of the dcdmubsrvoptimizedinitdone function in the drivers/gpu/drm/amd/display/dc/dcdmubsrv.c file – The drivers for AMD graphics cards that support Direct Rendering Infrastructure DRI in Linux operating systems are vulnerable due to improper control of resource identifiers “resource...

Vulnerability of the dcn21_set_backlight_level() function in the drivers/gpu/drm/amd/display/dc/dcn21/dcn21HWSeq.c module – This driver is part of the Linux kernel’s Direct Rendering Infrastructure (DRI) support for AMD graphics cards. It allows a malicious actor to cause a system failure.

Vulnerability of the dcn21setbacklightlevel function in the drivers/gpu/drm/amd/display/dc/dcn21/dcn21HWSeq.c module – The drivers for AMD graphics cards that support Direct Rendering Infrastructure DRI in Linux operating systems rely on pointer swapping. Exploiting this vulnerability could allow...

Vulnerability of the dcn35_set_drr() function in the drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c file – This function is part of the driver for AMD graphics cards that support Direct Rendering Infrastructure (DRI). It can be exploited by attackers to cause service failures.

Vulnerability of the dcn35setdrr function in the drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35hwseq.c module – Drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable due to the reliance on pointer manipulation. Exploiting this...

Vulnerability of the xe_oa_release() function in the drivers/gpu/drm/xe/xe_oa.c module – The DRI driver for Linux kernel’s direct rendering infrastructure allows a hacker to trigger a service failure.

Vulnerability of the xeoarelease function in the drivers/gpu/drm/xe/xeoa.c module – The driver for Linux’s Direct Rendering Infrastructure DRI has a vulnerability related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cau...

Vulnerability of the intel_hdcp_gsc_check_status() function in the driver/gpu/drm/xe/display/xe_hdcp_gsc.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in Linux kernels, which allows a hacker to cause service failure

Vulnerability of the intelhdcpgsccheckstatus function in the driver/gpu/drm/xe/display/xehdcpgsc.c module – The Linux kernel’s DRI support driver is vulnerable due to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause service failures...

Vulnerability of the drm_fbdev_dma_fbdestroy() function in the drivers/gpu/drm/drm_fbdev_dma.c module – This driver provides support for Linux kernel’s Direct Rendering Infrastructure (DRI), allowing a hacker to cause a service failure.

Vulnerability of the drmfbdevdmafbdestroy function in the drivers/gpu/drm/drmfbdevdma.c module – The DRI driver for Linux kernel’s direct rendering infrastructure has a unvalidated return value, which can lead to the assignment of a null pointer. Exploiting this vulnerability could allow an...

Vulnerability of the mtk_crtcDestroy() function in the drivers/gpu/drm/mediatek/mtk_crtc.c module – This driver supports the Direct Rendering Infrastructure (DRI) of Mediatek graphics cards in Linux kernel. It can be exploited by attackers to cause service failures.

Vulnerability of the mtkcrtcDestroy function in the drivers/gpu/drm/mediatek/mtkcrtc.c module – Drivers that support Direct Rendering Infrastructure DRI for Mediatek graphics cards in Linux operating systems are vulnerable due to a pointer manipulation issue. Exploiting this vulnerability could...

Vulnerability of the panthor_vm_pool_get_vm() function in the drivers/gpu/drm/panthor/panthor_mmu.c module – This driver is a part of the Linux operating system’s Direct Rendering Infrastructure (DRI) support mechanism. It allows an attacker to cause a service failure.

Vulnerability of the panthorvmpoolgetvm function in the drivers/gpu/drm/panthor/panthormmu.c module – The driver for Linux’s Direct Rendering Infrastructure DRI mechanism is vulnerable due to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause service failur...

Vulnerability of the vmw_framebuffer_surface_create_handle() function in the drivers/gpu/drm/vmwgfx/vmwgfx_kms.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in Linux kernels, which allows a hacker to cause a service failure.

Vulnerability of the vmwframebuffersurfacecreatehandle function in the drivers/gpu/drm/vmwgfx/vmwgfxkms.c module – The Linux kernel’s DRI driver support mechanism relies on pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Police Seize Cryptomixer Domains, Infrastructure and 28M Dollars in Bitcoin

Swiss and German police shut down Cryptomixer, seizing servers, domains and 28M dollars in Bitcoin during an Europol backed action targeting crypto laundering...

Exploit for Out-of-bounds Read in Openssl

--- Cybersecurity Labs Portfolio This repository contain...

AI-Driven Cybersecurity Testbed for Nuclear Infrastructure: Comprehensive Evaluation Using METL Operational Data

Advanced nuclear reactor systems face increasing cybersecurity threats as sophisticated attackers exploit cyber-physical interfaces to manipulate control systems while evading traditional IT security measures. This research presents a comprehensive evaluation of artificial intelligence approaches...

lw-cnapp-microservices-iac

Project 2: Microservices with Infrastructure as Code ⚠️ WAR...

fbi-exploit-kit-v2

fbi-exploit-kit-v2 Adv...

The vulnerability of the data acquisition component of the virtual infrastructure of the software complex, which is used to protect the vGate R2 virtualization platform, allows a intruder to compromise the integrity of the protected information.

The vulnerability of the data acquisition component of the virtual infrastructure of the software complex, which is used to protect the vGate R2 virtualization platform, relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to...

Years of JSONFormatter and CodeBeautify Leaks Expose Thousands of Passwords and API Keys

New research has found that organizations in various sensitive sectors, including governments, telecoms, and critical infrastructure, are pasting passwords and credentials into online tools like JSONformatter and CodeBeautify that are used to format and validate code. Cybersecurity company...

USN-7887-2: Linux kernel (Raspberry Pi) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...