Casino Players Using Hidden Cameras for Cheating

The basic strategy is to place a device with a hidden camera in a position to capture normally hidden card values, which are interpreted by an accomplice off-site and fed back to the player via a hidden microphone. Miniaturization is making these devices harder to detect. Presumably AI will soon...

CVE-2024-45805 OpenCTI leaks support information due to inadequate access control

OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information SETTINGSSUPPORT. This is due to inadequate access control for support information...

CVE-2024-45805

Affected software: OpenCTI Open-Source Threat Intelligence Platform (prior to 6.3.0). Vulnerability / root cause: Inadequate access control allowed general users to access information intended for admin and support roles via the endpoint/storage/get/support/UUID/UUID.zip, exposing the UUID throug...

The Fintech Wild West: Why Preventive Cybersecurity Is Essential for Survival

Fintech thrives on innovation, but cybersecurity requires a proactive approach. AI, predictive intelligence, and tailored strategies safeguard against…...

Lazarus Group Targets Nuclear Industry with CookiePlus Malware

KEY SUMMARY POINTS Securelist by Kaspersky has published its latest threat intelligence report focused on the activities of…...

CVE-2024-45387

creationtimestamp| type| source ---|---|--- 2024-12-23 18:20:06+00:00| seen| https://t.me/cvedetector/13540 2024-12-25 10:30:58+00:00| seen| https://bsky.app/profile/bolhasec.com/post/3le4qwtmp262a 2024-12-25 12:30:00+00:00| seen|...

CVE-2024-53580

creationtimestamp| type| source ---|---|--- 2024-12-19 01:24:49+00:00| seen| https://t.me/cvedetector/13265 2025-04-04 23:37:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10584 2025-09-15 13:28:32+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f 2025-09-16...

CVE-2024-12686

creationtimestamp| type| source ---|---|--- 2024-12-18 20:30:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113675719318388901 2024-12-18 22:54:10+00:00| seen| https://t.me/cvedetector/13251 2024-12-19 17:22:24+00:00| seen|...

WordPress AI Magic – SEO Content Generator & Article Writer plugin <= 1.0.4 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Mika in WordPress Plugin AI Magic versions = 1.0.4...

CVE-2024-52875

creationtimestamp| type| source ---|---|--- 2024-12-17 14:10:59+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/9452 2024-12-21 18:13:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11586 2025-01-01 18:03:16+00:00| seen|...

CVE-2024-49775

A vulnerability has been identified in Opcenter Execution Foundation All versions V2501.0001, Opcenter Intelligence All versions V2501.0001, Opcenter Quality All versions V2512, Opcenter RDnL All versions V2410, SIMATIC PCS neo V4.0 All versions, SIMATIC PCS neo V4.1 All versions V4.1 Update 3,...

2024 Threat Landscape Statistics: Ransomware Activity, Vulnerability Exploits, and Attack Trends

Now that we’ve reached the end of another year, you may be looking around the cybersecurity infosphere and seeing a glut of posts offering “hot takes” on the 2024 threat landscape and predictions about what’s coming next. At Rapid7, we don’t truck in hot takes, but rather, cold hard facts. Stayin...

New Investment Scam Leverages AI, Social Media Ads to Target Victims Worldwide

Cybersecurity researchers are calling attention to a new kind of investment scam that leverages a combination of social media malvertising, company-branded posts, and artificial intelligence AI powered video testimonials featuring famous personalities, ultimately leading to financial and data los...

Siemens Opcenter Intelligence Buffer Overflow Vulnerability

Opcenter Intelligence is a manufacturing intelligence solution from Siemens designed to improve the efficiency and quality of manufacturing processes through big data analytics. The solution offers a wide range of products and services to meet the needs of different users. A buffer overflow...

PT-2024-9692 · Siemens · Sinec Nms +6

Name of the Vulnerable Software and Affected Versions: Opcenter Execution Foundation versions prior to V5.0 Update 1 Opcenter Intelligence versions prior to V5.0 Update 1 Opcenter Quality versions prior to V5.0 Update 1 Opcenter RDL versions prior to V5.0 Update 1 SIMATIC PCS neo V4.0 versions...

CVE-2024-12581

The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.2.53 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

IBM QRadar SIEM Cross-Site Scripting Vulnerability (CNVD-2024-49170)

IBM QRadar SIEM is a solution from International Business Machines IBM that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user...

SAP BusinessObjects Business Intelligence Platform Information Disclosure (3524933)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote host is prior to 2025 SP000 000000, 4.3 SP004 000800, or 4.3 SP005 000000. It is, therefore, affected by a vulnerability as referenced in the 3524933 advisory. - Under certain conditions SAP BusinessObjects...

INTERPOL & Trend's Fight Against Cybercrime

Trend threat intelligence and training were crucial to the success of two major policing operations in 2024...

WordPress plugin AI Engine 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...