1893 matches found
2024 in AI: It’s changed the world, but it’s not all good
A popular saying is: “To err is human, but to really foul things up you need a computer.” Even though the saying is older than you might think, it did not come about earlier than the concept of artificial intelligence AI. And as long as we have been waiting for AI technology to become commonplace...
CVE-2024-52535
creationtimestamp| type| source ---|---|--- 2024-12-25 15:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le5atoyh4j25 2024-12-25 17:09:26+00:00| seen| https://t.me/cvedetector/13626 2024-12-26 13:58:43+00:00| seen|...
5 Practical Techniques for Effective Cyber Threat Hunting
Addressing cyber threats before they have a chance to strike or inflict serious damage is by far the best security approach any company can embrace. Achieving this takes a lot of research and proactive threat hunting. The problem here is that it is easy to get stuck in endless arrays of data and...
Iran-Linked IOCONTROL Malware Targets SCADA and Linux-Based IoT Platforms
Iran-affiliated threat actors have been linked to a new custom malware that's geared toward IoT and operational technology OT environments in Israel and the United States. The malware has been codenamed IOCONTROL by OT cybersecurity company Claroty, highlighting its ability to attack IoT and...
Something to Read When You Are On Call and Everyone Else is at the Office Party
Welcome to this week's edition of the Threat Source newsletter. The new head of the UK's National Cyber Security Centre, Richard Horne, recently remarked that there is a "clearly widening gap between, on the one hand, the threat and our exposure to it and, on the other, the defences that are in...
CVE-2024-53274 GHSL-2024-111: Reflected XSS in /home in habitica
Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The register function in home.vue containsa reflected XSS vulnerability due to an incorrect sanitization function. An attacker can specify a malicious redirectTo parameter...
CVE-2024-490646
creationtimestamp| type| source ---|---|--- 2024-12-10 18:33:29+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2024-0471...
ASD’s ACSC, CISA, and US and International Partners Release Guidance on Choosing Secure and Verifiable Technologies
Today, CISA—in partnership with the Australian Signals Directorate Australian Cyber Security Centre ASD ACSC, and other international partners—released updates to a Secure by Design Alert, Choosing Secure and Verifiable Technologieslink is external. Partners that provided recommendations in this...
Bidirectional communication via polyrhythms and shuffles: Without Jon the beat must go on
Welcome to this week's edition of the Threat Source newsletter. Bidirectional communication is foundational to a well-built team regardless of environment. It's critical in information security to be able to drive a conversation up the ladder and down and not lose the critical elements. One of th...
CVE-2024-490508
creationtimestamp| type| source ---|---|--- 2024-11-12 18:54:00+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2024-0435...
TikTok ordered to close Canada offices following “national security review”
The Government of Canada ordered the TikTok Technology Canada Inc. to close its offices in the country following a national security review. This decision was made in accordance with the Investment Canada Act, which allows for the review of foreign investments that may be injurious to Canada’s...
CVE-2024-52013
creationtimestamp| type| source ---|---|--- 2024-11-05 17:13:16+00:00| seen| https://t.me/cvedetector/9884...
Embarking on a Compliance Journey? Here's How Intruder Can Help
Navigating the complexities of compliance frameworks like ISO 27001, SOC 2, or GDPR can be daunting. Luckily, Intruder simplifies the process by helping you address the key vulnerability management criteria these frameworks demand, making your compliance journey much smoother. Read on to understa...
JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage
CISA, through the Joint Cyber Defense Collaborative JCDC, enabled swift, coordinated response and information sharing in the wake of a significant IT outage caused by a CrowdStrike software update. This outage, which impacted government, critical infrastructure, and industry across the globe, led...
CVE-2015-2863
creationtimestamp| type| source ---|---|--- 2024-10-27 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-27 2024-11-09 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-09 2025-01-20 00:00:00+00:00| seen| The Shadowserver...
CVE-2020-15498
creationtimestamp| type| source ---|---|--- 2024-10-26 01:48:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1471 2026-07-12 22:00:17+00:00| seen| https://t.me/pleyadesit/7081 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/7081 2026-07-14 00:00:49+00:00| see...
CVE-2019-19697
creationtimestamp| type| source ---|---|--- 2024-10-14 22:12:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/538...
CVE-2019-16692
creationtimestamp| type| source ---|---|--- 2024-10-11 21:55:25+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/451...
