CVE-2024-11872

Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute low-privileged code on the target...

Epic Games Launcher 安全漏洞

Epic Games Launcher is a game software launcher from Epic Games USA. A security vulnerability exists in Epic Games Launcher that stems from an incorrect default privilege local elevation of privilege that allows a local attacker to elevate the privileges of an affected Epic Games Launcher...

CVE-2024-11872

CVE-2024-11872 : Epic Games Launcher contains an incorrect default permission issue in its product installer, enabling a local attacker with low privileges to escalate to SYSTEM by exploiting mis‑configured permissions on a sensitive folder. Existence and impact are supported by the ZDI advisory ...

CVE-2024-11872 Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability

Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2024-11872 Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability

Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute low-privileged code on the target...

Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product...

Malicious code in yapi-plugin-games-google-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50fd58da7aed5c7f4b93b71f00b778b524976db87da82ad0c037d021e2197649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11021 Malicious code in yapi-plugin-games-google-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50fd58da7aed5c7f4b93b71f00b778b524976db87da82ad0c037d021e2197649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

JCDC’s Collaborative Efforts Enhance Cybersecurity for the 2024 Olympic and Paralympic Games

The Cybersecurity and Infrastructure Security Agency CISA, through the Joint Cyber Defense Collaborative JCDC, enabled proactive coordination and information sharing to bolster cybersecurity ahead of the 2024 Olympic and Paralympic Games in Paris. Recognizing the potential for cyber threats...

November 12, 2024—KB5046613 (OS Builds 19044.5131 and 19045.5131) - EXPIRED

None None...

Malicious code in eslint-config-games (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49b9d455a36f9b76bfecad022b39011620e522faf47867994db686c542fdfe9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10489 Malicious code in eslint-config-games (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49b9d455a36f9b76bfecad022b39011620e522faf47867994db686c542fdfe9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Teraleak: Pokémon Developer Game Freak Hacked; Decades of Data Leaked

Game Freak's "Teraleak" appears to expose nearly 1 terabyte of sensitive Pokémon data, including source code, cancelled games,…...

The Hacker Who Hunts Video Game Speedrunning Cheaters

Allan “dwangoAC” has made it his mission to expose speedrunning phonies. At the Defcon hacker conference, he’ll challenge one record that's stood for 15 years...

Introducing Wizlympics: The First Cloud Security Olympic Games

The Wizlympic games have officially opened — do you have what it takes to become the master of cloud services?...

CVE-2024-41951

Pheonix App is a Python application designed to streamline various tasks, from managing files to playing mini-games. The issue is that the map of encoding/decoding languages are visible in code. The Problem was patched in 0.2.4...

Take Cover: Securing Games Truly Is a Battle Royale

...

CVE-2024-42096

CVE-2024-42096 is a Linux kernel vulnerability in the x86 profiling code (profile_pc) used for timer-based profiling. The issue stemmed from the function’s assumptions about stack layout when accounting time spent in spinlocks, which could misattribute time and trigger KASAN warnings. The advisor...

MAL-2024-5170 Malicious code in gamescodes (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Microsoft Uncovers 'Moonstone Sleet' — New North Korean Hacker Group

A never-before-seen North Korean threat actor codenamed Moonstone Sleet has been attributed as behind cyber attacks targeting individuals and organizations in the software and information technology, education, and defense industrial base sectors with ransomware and bespoke malware previously...