567 matches found
Vulnerabilities fixed in Oracle Database products
Oracle has fixed vulnerabilities in several Database products and subsystems, including the Core database, Application Express, Autonomous Health Framework, Essbase, GoldenGate, SQL Developer and Secure Backup. A malicious party can exploit the vulnerabilities to launch attacks that can lead to t...
U.S. Proposes Ban on Connected Vehicles Using Chinese and Russian Tech
The U.S. Department of Commerce DoC said it's proposing a ban on the import or sale of connected vehicles that integrate software and hardware made by foreign adversaries, particularly that of the People's Republic of China PRC and Russia. "The proposed rule focuses on hardware and software...
Leave the World Behind, or don’t
I watched Leave the World Behind on Netflix recently. I was intrigued as the trailers showed an oil tanker crashing on to a beach. It was implied that it had been hacked and someone had taken control of it. Shipping security is something we know quite a bit about, having been asked to hack a larg...
Using LLMs to Exploit Vulnerabilities
Interesting research: "Teams of LLM Agents can Exploit Zero-Day Vulnerabilities." Abstract: LLM agents have become increasingly sophisticated, especially in the realm of cybersecurity. Researchers have shown that LLM agents can exploit real-world vulnerabilities when given a description of the...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in versions prior to Google Chrome 126.0.6478.54, which can be exploited by an attacker to bypass autonomous access control via a crafted HTML page...
Researchers Uncover Active Exploitation of WordPress Plugin Vulnerabilities
Cybersecurity researchers have warned that multiple high-severity security vulnerabilities in WordPress plugins are being actively exploited by threat actors to create rogue administrator accounts for follow-on exploitation. "These vulnerabilities are found in various WordPress plugins and are...
How to Build Your Autonomous SOC Strategy
Security leaders are in a tricky position trying to discern how much new AI-driven cybersecurity tools could actually benefit a security operations center SOC. The hype about generative AI is still everywhere, but security teams have to live in reality. They face constantly incoming alerts from...
The big play of autonomous vehicles
TL;DR The benefits of autonomous vehicles may not yet be for us consumers There are other areas where autonomy can benefit auto manufacturers and others Having your autonomous car drive you home from the bar may be some way off yet! Car manufacturers and technology startups make a big play of...
PT-2024-22269 · Unknown · Peering Manager
Name of the Vulnerable Software and Affected Versions: Peering Manager versions prior to 1.8.3 Description: Peering Manager is a BGP session management tool. Affected versions of Peering Manager are subject to a potential stored Cross-Site Scripting XSS attack in the name attribute of AS or...
AIs Hacking Websites
New research: LLM Agents can Autonomously Hack Websites Abstract: In recent years, large language models LLMs have become increasingly capable and can now interact with tools i.e., call functions, read documents, and recursively call themselves. As a result, these LLMs can now function autonomous...
The vulnerability of the Non-Stop Routing (NSR) mechanism in Juniper Networks’ Junos and JunOS Evolved operating systems allows a attacker to cause a service failure.
The vulnerability of the Non-Stop Routing NSR mechanism in Juniper Networks’ Junos and JunOS Evolved operating systems is related to improper handling of exceptional states during the processing of BGP messages with the AS Path attribute. Exploiting this vulnerability can allow a malicious actor ...
Food delivery robots give captured video footage to police
In what sounds like a new step towards Skynet, footage from a food delivery robot has been used as part of a criminal investigation. As 404 Media reports, the food delivery robots that are deployed for Uber Eats in Los Angeles are operated by Serve Robotics, which ultimately wants to deploy up to...
Threat Report: High Tech Industry targeted the most with 46% of attack traffic tagged by NLX
How To Use This Report Enhance situational awareness of techniques used by threat actors Identify potential attacks targeting your industry Gain insights to help improve and accelerate your organization's threat response Summary of Findings The Network Effect Threat Report offers insights based o...
The vulnerability of the private browsing mode of the Mozilla Firefox browser, which allows a violator to gain unauthorized access to protected information
The vulnerability of the private browsing mode in the Mozilla Firefox browser is related to insufficient protection of service data during the initialization of the autonomous cache. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...
The US Air Force Is Moving Fast on AI-Piloted Fighter Jets
After successful autonomous flight tests in December, the military is ramping up its plans to bring artificial intelligence to the skies...
K17264695: BIG-IP ARM BGP vulnerability CVE-2018-17539
Security Advisory Description The BGP daemon bgpd in all ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system AS path containing 8 or more autonomous system number ASN elements. CVE-2018-17539 Impact Dynam...
SUSE CVE-2009-1572
The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...
SUSE CVE-2010-2949
bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an unknown AS type in an AS path attribute in a BGP UPDATE message...
SUSE CVE-2011-4577
OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service assertion failure via an X.509 certificate containing certificate-extension data associated with 1 IP address blocks or 2 Autonomous System AS identifiers...