Cap Dev. Better red teaming with continuous Capability Development

TL;DR What Capability Development Cap Dev is in this context The big Cap Dev benefits for red teaming Operations and Development, sharing and improving Improvements to TTPs, hardware, and developing strategies Benefits of using a DevSecOps model for offensive security The essence of Cap Dev Cap D...

Using Generative AI for Surveillance

Generative AI is going to be a powerful tool for data analysis and summarization. Heres an example of it being used for sentiment analysis. My guess is that it isnt very good yet, but that it will get better...

November 14, 2023-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 (KB5032341)

November 14, 2023-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 KB5032341 Revised 11/15/23: to remove CVE details which were not affected by the .NET Framework November Security and Quality rollup...

November 14, 2023-KB5032478 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Azure Stack HCI, version 22H2

None None...

rhein-main-gyn.de Improper Access Control vulnerability OBB-3780131

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE-SU-2023:4386-1 Security update for salt

This update for salt fixes the following issues: Security issues fixed: - CVE-2023-34049: arbitrary code execution via symlink attack bsc1215157 Bugs fixed: - Fix optimizationorder opt to prevent testsuite fails - Improve salt.utils.json.findjson to avoid fails bsc1213293 - Use salt-call from sal...

OPENSUSE-SU-2023:0354-1 Security update for opera

This update for opera fixes the following issues: - Update to 104.0.4944.36 CHR-9492 Update Chromium on desktop-stable-118-4944 to 118.0.5993.118 DNA-112757 Tab close button Close button is cutted when a lot tabs are opened - The update to chromium 118.0.5993.118 fixes following issues:...

OPENSUSE-SU-2023:0352-1 Security update for virtualbox

This update for virtualbox fixes the following issues: - Version bump to VirtualBox 7.0.12 released October 17 2023 by Oracle Fixes the following: - CVE-2023-22098 boo1216363 - CVE-2023-22099 boo1216364 - CVE-2023-22100 boo1216365 This is a maintenance release. The following items were fixed and/...

Redirect from searchrequest.html page to login screen

h3. Issue Summary Hello team, We would like to open an improvement request to allow the searchrequest.html page to be redirected to the login page if the user is not logged on. This desired behavior is similar to the issue view page, since it automatically redirects you to the login screen if...

CVE-2023-42850

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14.1. An app may be able to access sensitive user data...

DEBIAN-CVE-2023-32359

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2. A user's password may be read aloud by VoiceOver...

Design/Logic Flaw

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14.1. An app may be able to access sensitive user data...

PT-2023-28650 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 17.1 Apple iPadOS versions prior to 17.1 Apple macOS Sonoma versions prior to 14.1 Apple tvOS versions prior to 17.1 Apple watchOS versions prior to 10.1 Description: This issue was addressed with improved redactio...

Security update for rxvt-unicode (moderate)

openSUSE Security Update: Security update for rxvt-unicode Announcement ID: openSUSE-SU-2023:0306-1 Rating: moderate References: 1206069 Cross-References: CVE-2022-4170 CVSS scores: CVE-2022-4170 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-S...

Google Play Protect Introduces Real-Time Code-Level Scanning for Android Malware

Google has announced an update to its Play Protect with support for real-time scanning at the code level to tackle novel malicious apps prior to downloading and installing them on Android devices. "Google Play Protect will now recommend a real-time app scan when installing apps that have never be...

The US wants governments to commit to not paying ransoms

As the White House prepares to host its annual International Counter Ransomware Initiative CRI summit, Bloomberg reports that the US is pushing other countries to stop paying ransoms to cybercriminals. The CRI wants to enhance international cooperation to combat the growth of ransomware, and its ...

Support for Audio over EDT Lossy protocol

IMPORTANT --- Audio over EDT Lossy loss tolerant mode for audio is currently in tech preview, and currently supported on Windows and Linux directly and with Gateway Service. Audio over EDT Lossy increases the user experience for real-time audio streaming and improves audio quality compared to aud...

CVE-2023-40452

The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to overwrite arbitrary files...

CVE-2023-40432

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-40429

A permissions issue was addressed with improved validation. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access sensitive user data...