THN Recap: Top Cybersecurity Threats, Tools, and Practices (Oct 28 - Nov 03)

🗓️ 04 Nov 2024 11:28:00Reported by The Hacker NewsType

Top cybersecurity threats and news including North Korean hackers deploying ransomware, Chinese threat actor using Quad7 botnet, Opera fixing sensitive data exposure bug, and Evasive Panda exfiltrating cloud data.

Reporter	Title	Published	Views	Family All 169
ATTACKERKB	CVE-2024-8957	17 Sep 202400:00	–	attackerkb
ATTACKERKB	CVE-2024-8956	17 Sep 202400:00	–	attackerkb
AlpineLinux	CVE-2024-51774	2 Nov 202400:00	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in qBittTorrent	24 Jun 202615:11	–	astralinux
BDU FSTEC	The vulnerability of the FTP server function of microprogrammed logic controllers MELSEC RJ71EIP91, SW1DNN-EIPCT-BD, FX5-ENET/IP, SW1DNN-EIPCTFX5-BD allows a hacker to gain full access to the device.	6 Jun 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Mitsubishi Electric’s software products, including EZSocket, FR Configurator2, GT Designer3 Version1(GOT1000), GT Designer3 Version1(GOT2000), GX Works2, GX Works3, MELSOFT Navigator, MT Works2, MX Component, and MX OPC Server DA/UA (software included with MC Works64), are related to the use of external control inputs for class selection. This allows a malicious individual to execute arbitrary code.	31 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ThinManager application management platform, developed by Rockwell Automation, arises from the possibility of sending queries to the database without going through authentication procedures. This allows attackers to make changes to the database.	2 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software’s user data loading function for running large language models (LLMs) like ChuanhuChatGPT allows a perpetrator to execute arbitrary code.	5 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software in PTZOptics PT30X-SDI/NDI webcams lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows a perpetrator to execute arbitrary code.	5 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software in PTZOptics PT30X-SDI/NDI webcams arises from incorrect authentication used in the operating system’s command sequence. This allows a hacker to execute arbitrary code.	6 Nov 202400:00	–	bdu_fstec