CVE - Cloud Security Alliance News Clipping Site

Cisco Talos Blog: NVIDIA shader out-of-bounds and eleven LevelOne router vulnerabilities

Oct 31, 2024

—

by

Source URL: https://blog.talosintelligence.com/nvidia-shader-out-of-bounds-and-level1-2/ Source: Cisco Talos Blog Title: NVIDIA shader out-of-bounds and eleven LevelOne router vulnerabilities Feedly Summary: Cisco Talos’ Vulnerability Research team recently discovered five Nvidia out-of-bounds access vulnerabilities in shader processing, as well as eleven LevelOne router vulnerabilities spanning a range of possible exploits.For Snort coverage that can detect the exploitation of these…

Hacker News: Fuzzing between the lines in popular barcode software

Oct 31, 2024

—

by

system automation

in Uncategorized

Source URL: https://blog.trailofbits.com/2024/10/31/fuzzing-between-the-lines-in-popular-barcode-software/ Source: Hacker News Title: Fuzzing between the lines in popular barcode software Feedly Summary: Comments AI Summary and Description: Yes Summary: This text provides an in-depth analysis of fuzz testing applied to the ZBar barcode scanning library, highlighting the discovery of critical security vulnerabilities. The article emphasizes the importance of fuzzing in…

The Register: Windows Themes zero-day bug exposes users to NTLM credential theft

Oct 30, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/30/zeroday_windows_themes/ Source: The Register Title: Windows Themes zero-day bug exposes users to NTLM credential theft Feedly Summary: Plus a free micropatch until Redmond fixes the flaw There’s a Windows Themes spoofing zero-day bug on the loose that allows attackers to steal people’s NTLM credentials.… AI Summary and Description: Yes Summary: The text discusses…

Alerts: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

Oct 30, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.cisa.gov/news-events/alerts/2024/10/30/fortinet-updates-guidance-and-indicators-compromise-following-fortimanager-vulnerability Source: Alerts Title: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation Feedly Summary: Fortinet has updated their security advisory addressing a critical FortiManager vulnerability (CVE-2024-47575) to include additional workarounds and indicators of compromise (IOCs). A remote, unauthenticated cyber threat actor could exploit this vulnerability to gain access to sensitive…

The Register: How to jailbreak ChatGPT and trick the AI into writing exploit code using hex encoding

Oct 29, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/29/chatgpt_hex_encoded_jailbreak/ Source: The Register Title: How to jailbreak ChatGPT and trick the AI into writing exploit code using hex encoding Feedly Summary: ‘It was like watching a robot going rogue’ says researcher OpenAI’s language model GPT-4o can be tricked into writing exploit code by encoding the malicious instructions in hexadecimal, which allows an…

Slashdot: Local Privilege Escalation Vulnerability Affecting X.Org Server For 18 Years

Oct 29, 2024

—

by

system automation

in Uncategorized

Source URL: https://it.slashdot.org/story/24/10/29/2029233/local-privilege-escalation-vulnerability-affecting-xorg-server-for-18-years?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Local Privilege Escalation Vulnerability Affecting X.Org Server For 18 Years Feedly Summary: AI Summary and Description: Yes Summary: The text discusses CVE-2024-9632, a security vulnerability in the X.Org Server that has persisted for 18 years. This flaw could allow for local privilege escalation and is critical for professionals involved…

The Register: Admins better Spring into action over latest critical open source vuln

Oct 29, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/29/admins_spring_into_action_over/ Source: The Register Title: Admins better Spring into action over latest critical open source vuln Feedly Summary: Patch up: The Spring framework dominates the Java ecosystem If you’re running an application built using the Spring development framework, now is a good time to check it’s fully updated – a new, critical-severity vulnerability…

The Register: Senator accuses sloppy domain registrars of aiding Russian disinfo campaigns

Oct 27, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/27/senator_domain_registrars_russia_disinfo/ Source: The Register Title: Senator accuses sloppy domain registrars of aiding Russian disinfo campaigns Feedly Summary: Also, Change Healthcare sets a record, cybercrime cop suspect indicted, a new Mallox decryptor, and more in brief Senate intelligence committee chair Mark Warner (D-VA) is demanding to know why, in the wake of the bust-up…

The Register: Emergency patch: Cisco fixes bug under exploit in brute-force attacks

Oct 24, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/24/cisco_bug_brute_force/ Source: The Register Title: Emergency patch: Cisco fixes bug under exploit in brute-force attacks Feedly Summary: Who doesn’t love abusing buggy appliances, really? Cisco has patched an already exploited security hole in its Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software that miscreants have been brute-forcing in attempted denial of…

Alerts: CISA Adds Two Known Exploited Vulnerabilities to Catalog

Oct 24, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.cisa.gov/news-events/alerts/2024/10/24/cisa-adds-two-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability CVE-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability These types of vulnerabilities are frequent attack vectors for malicious…

Tag: CVE