Slándáil Research: Security Feeds

Reddit /r/netsec/

The PrintNightmare is not Over Yet

The Hacker News

Apple Releases Critical iOS and iPadOS Updates to Fix VoiceOver Password Vulnerability

Reddit /r/netsec/

Exploiting Visual Studio via dump files - CVE-2024-30052

Bleeping Computer News

Highline Public Schools confirms ransomware behind shutdown

Bleeping Computer News

Russia arrests US-sanctioned Cryptex founder, 95 other linked suspects

Bleeping Computer News

Google removes Kaspersky's antivirus software from Play Store

Bleeping Computer News

Outlast game development delayed after Red Barrels cyberattack

The Hacker News

U.S. and Microsoft Seize 107 Russian Domains in Major Cyber Fraud Crackdown

Bleeping Computer News

UK nuclear site Sellafield fined $440,000 for cybersecurity shortfalls

The Hacker News

How to Get Going with CTEM When You Don't Know Where to Start

The Hacker News

Cloudflare Thwarts Largest-Ever 3.8 Tbps DDoS Attack Targeting Global Sectors

The Hacker News

WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks

Reddit /r/netsec/

Built your portable pentesting lab with Pi-Tail that is controlled only by your smartphone

Reddit /r/netsec/

Pwning LLaMA.cpp RPC Server with CVE-2024-42478 and CVE-2024-42479

Bleeping Computer News

Recently patched CUPS flaw can be used to amplify DDoS attacks

Bleeping Computer News

‘Pig butchering’ trading apps found on Google Play, App Store

Bleeping Computer News

Dutch Police: ‘State actor’ likely behind recent data breach

Bleeping Computer News

Microsoft and DOJ disrupt Russian FSB hackers' attack infrastructure

Bleeping Computer News

Over 4,000 Adobe Commerce, Magento shops hacked in CosmicSting attacks

The Hacker News

Android 14 Adds New Security Features to Block 2G Exploits and Baseband Attacks

The Hacker News

Google Adds New Pixel Security Features to Block 2G Exploits and Baseband Attacks

Bleeping Computer News

Fraudsters imprisoned for scamming Apple out of 6,000 iPhones

Bleeping Computer News

Cloudflare blocks largest recorded DDoS attack peaking at 3.8Tbps

Reddit /r/netsec/

/r/netsec's Q4 2024 Information Security Hiring Thread

The Hacker News

The Secret Weakness Execs Are Overlooking: Non-Human Identities

Bleeping Computer News

Linux malware “perfctl” behind years-long cryptomining campaign

The Hacker News

New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking

Bleeping Computer News

Why your password policy should include a custom dictionary

Bleeping Computer News

Why your password policy should include a custom dictionary wordlist

Reddit /r/netsec/

When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying

Canada Cyber Centre News

Joint guidance on the principles of operational technology cyber security

The Hacker News

North Korean Hackers Using New VeilShell Backdoor in Stealthy Cyber Attacks

The Hacker News

INTERPOL Arrests 8 in Major Phishing and Romance Fraud Crackdown in West Africa

The Hacker News

LockBit Ransomware and Evil Corp Members Arrested and Sanctioned in Joint Global Effort

The Hacker News

Ivanti Endpoint Manager Flaw Actively Targeted, CISA Warns Agencies to Patch

Bleeping Computer News

FIN7 hackers launch deepfake nude “generator” sites to spread malware

Reddit /r/netsec/

Reverse Engineering and Dismantling Kekz Headphones

Bleeping Computer News

Critical Ivanti RCE flaw with public exploit now used in attacks

Bleeping Computer News

Fake browser updates spread updated WarmCookie malware

Reddit /r/netsec/

Class Pollution in Ruby: A Deep Dive into Exploiting Recursive Merges

SecurityWeek News

Zero-Day Breach at Rackspace Sparks Vendor Blame Game

The Hacker News

Fake Trading Apps Target Victims Globally via Apple App Store and Google Play

Bleeping Computer News

Microsoft Office 2024 now available for Windows and macOS users

The Hacker News

China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration

The Hacker News

Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals

Bleeping Computer News

CISA: Network switch RCE flaw impacts critical infrastructure

Bleeping Computer News

Critical Zimbra RCE flaw exploited to backdoor servers using emails

SecurityWeek News

MITRE Adds Mitigations to EMB3D Threat Model

The Hacker News

Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities

Bleeping Computer News

DrayTek fixed critical flaws in over 700,000 exposed routers

Debian Security

DSA-5785-1 mediawiki - security update

Debian Security

DSA-5786-1 libgsf - security update

Debian Security

DSA-5783-1 firefox-esr - security update

Debian Security

DSA-5784-1 oath-toolkit - security update

Ubuntu Security Notices

USN-7055-1: FreeRADIUS vulnerability

Ubuntu Security Notices

USN-7053-1: ImageMagick vulnerabilities

Ubuntu Security Notices

USN-7054-1: unzip vulnerability

Ubuntu Security Notices

USN-7021-4: Linux kernel vulnerabilities

Ubuntu Security Notices

USN-7052-1: GNOME Shell vulnerabilities

Debian Security

DSA-5781-1 chromium - security update

Debian Security

DSA-5782-1 linux - security update

Jenkins advisories

Jenkins Security Advisory 2024-10-02

Ubuntu Security Notices

USN-7051-1: AsyncSSH vulnerability

Debian Security

DSA-5780-1 php8.2 - security update

Ubuntu Security Notices

USN-7050-1: Devise-Two-Factor vulnerabilities

Ubuntu Security Notices

USN-7022-2: Linux kernel vulnerabilities

Ubuntu Security Notices

USN-7043-2: cups-filters vulnerability

Ubuntu Security Notices

USN-7049-1: PHP vulnerabilities

Ubuntu Security Notices

USN-7003-5: Linux kernel vulnerabilities

Ubuntu Security Notices

USN-7048-1: Vim vulnerability

Ubuntu Security Notices

USN-7041-2: CUPS vulnerability

Ubuntu Security Notices

USN-6964-2: ORC vulnerability

Ubuntu Security Notices

USN-7015-3: Python vulnerability

Ubuntu Security Notices

USN-7047-1: Knot Resolver vulnerabilities

Ubuntu Security Notices

USN-7046-1: Flatpak and Bubblewrap vulnerability

Debian Security

DSA-5778-1 cups-filters - security update

Debian Security

DSA-5779-1 cups - security update

Debian Security

DSA-5776-1 tryton-server - security update

Debian Security

DSA-5777-1 booth - security update

Ubuntu Security Notices

USN-7045-1: libppd vulnerability

Ubuntu Security Notices

USN-7044-1: libcupsfilters vulnerability

Ubuntu Security Notices

USN-7043-1: cups-filters vulnerabilities

Ubuntu Security Notices

USN-7042-1: cups-browsed vulnerability

Palo Alto Advisories

CVE-2024-47076 Informational: No Impact of CUPS Vulnerabilities on Palo Alto Networks Products (Severity: NONE)

Ubuntu Security Notices

USN-7041-1: CUPS vulnerability

Ubuntu Security Notices

USN-7040-1: ConfigObj vulnerability

Ubuntu Security Notices

USN-7039-1: Linux kernel vulnerabilities

Ubuntu Security Notices

USN-7021-3: Linux kernel vulnerabilities

Ubuntu Security Notices

USN-7020-3: Linux kernel vulnerabilities

Ubuntu Security Notices

USN-7034-2: ca-certificates update

Ubuntu Security Notices

USN-7003-4: Linux kernel vulnerabilities

Ubuntu Security Notices

USN-7038-1: APR vulnerability

Ubuntu Security Notices

USN-7037-1: OpenJPEG vulnerability

Ubuntu Security Notices

USN-7036-1: Rack vulnerabilities

Debian Security

DSA-5775-1 chromium - security update

Ubuntu Security Notices

USN-7035-1: AppArmor vulnerability

Ubuntu Security Notices

USN-7034-1: ca-certificates update

Ubuntu Security Notices

USN-7009-2: Linux kernel vulnerabilities

Ubuntu Security Notices

USN-7033-1: Intel Microcode vulnerabilities

Ubuntu Security Notices

USN-7032-1: Tomcat vulnerability

CVE-2024-9559 | D-Link DIR-605L 2.13B01 BETA /goform/formWlanSetup webpage buffer overflow

CVE-2024-9558 | D-Link DIR-605L 2.13B01 BETA /goform/formSetWanPPTP webpage buffer overflow

CVE-2024-9557 | D-Link DIR-605L 2.13B01 BETA /goform/formSetWanPPPoE webpage buffer overflow

CVE-2024-9556 | D-Link DIR-605L 2.13B01 BETA formSetEnableWizard curTime buffer overflow

CVE-2024-9555 | D-Link DIR-605L 2.13B01 BETA formSetEasy_Wizard curTime buffer overflow

CVE-2024-9554 | Sovell Smart Canteen System up to 3.0.7303.30513 Password Reset suanfa.py Check_ET_CheckPwdz201 authorization

CVE-2024-47377 | ThemeKraft BuddyForms Plugin up to 2.8.12 on WordPress cross site scripting

CVE-2024-47376 | Tribulant Slideshow Gallery Plugin up to 1.8.3 on WordPress cross site scripting

CVE-2024-47375 | Ashraf XLTab Plugin up to 1.3 on WordPress cross site scripting

CVE-2024-47374 | LiteSpeed Technologies LiteSpeed Cache Plugin up to 6.5.0.2 on WordPress cross site scripting

CVE-2024-47373 | LiteSpeed Technologies LiteSpeed Cache Plugin up to 6.5.0.2 on WordPress cross site scripting

CVE-2024-47372 | ThemeNcode TNC PDF viewer Plugin up to 3.1.0 on WordPress cross site scripting

CVE-2024-47371 | Walter Pinem WP MyLinks Plugin up to 1.0.6 on WordPress cross site scripting

CVE-2024-47369 | WPWeb Social Auto Poster Plugin up to 5.3.15 on WordPress cross site scripting

CVE-2024-47370 | Paul Bearne Author Avatars List Block Plugin up to 2.1.21 on WordPress List/Block cross site scripting

CVE-2024-9553 | D-Link DIR-605L 2.13B01 BETA formdumpeasysetup curTime buffer overflow

CVE-2024-9552 | D-Link DIR-605L 2.13B01 BETA formSetWanNonLogin webpage buffer overflow

CVE-2024-9551 | D-Link DIR-605L 2.13B01 BETA /goform/formSetWanL2TP webpage buffer overflow

CVE-2024-9550 | D-Link DIR-605L 2.13B01 BETA /goform/formLogDnsquery curTime buffer overflow

CVE-2024-9549 | D-Link DIR-605L 2.13B01 BETA formEasySetupWizard formEasySetupWizard/formEasySetupWizard2 curTime buffer overflow

CVE-2024-47378 | WPCOM Member Plugin up to 1.5.4 on WordPress cross site scripting

CVE-2024-47379 | Sale PHP Scripts Web Directory Free Plugin up to 1.7.3 on WordPress cross site scripting

CVE-2024-47635 | TinyPNG Plugin up to 3.4.3 on WordPress cross-site request forgery

CVE-2024-47644 | Copyscape & Indigo Stream Technologies Copyscape Premium Plugin up to 1.3.6 on WordPress cross-site request forgery

CVE-2024-47316 | Salon Booking System Plugin up to 10.9 on WordPress authorization

CVE-2024-47646 | Payflex Payment Gateway Plugin up to 2.6.1 on WordPress redirect

CVE-2024-47643 | Alexander Böhm Include Fussball.de Widgets Plugin up to 4.0.0 on WordPress cross site scripting

CVE-2024-47642 | Keap Official Opt-in Forms Plugin up to 2.0.1 on WordPress cross site scripting

CVE-2024-47639 | VdoCipher Plugin up to 1.29 on WordPress cross site scripting

CVE-2024-47633 | Zoho Forms Plugin up to 4.0 on WordPress cross site scripting

CVE-2024-47632 | deTheme DethemeKit for Elementor Plugin up to 2.1.7 on WordPress cross site scripting

CVE-2024-47631 | bPlugins Logo Carousel Plugin up to 1.2 on WordPress cross site scripting

CVE-2024-47630 | ElementInvader Addons for Elementor Plugin up to 1.2.7 on WordPress cross site scripting

CVE-2024-47629 | BdThemes Ultimate Store Kit Elementor Addons Plugin up to 2.0.5 on WordPress cross site scripting

CVE-2024-47382 | Webvitaly Page-list Plugin up to 5.6 on WordPress cross site scripting

CVE-2024-47384 | WP Compress Plugin up to 6.20.13 on WordPress cross site scripting

CVE-2024-47383 | Webangon The Pack Elementor addons Plugin up to 2.0.8.8 on WordPress cross site scripting

CVE-2024-47381 | Averta Depicter Slider Plugin up to 3.2.2 on WordPress cross site scripting

CVE-2024-47380 | WP Lab WP-Lister Lite for eBay Plugin up to 3.6.3 on WordPress cross site scripting

CVE-2024-47395 | Robokassa Payment Gateway for WooCommerce Plugin up to 1.6.1 on WordPress cross site scripting

CVE-2024-47638 | vCita Online Booking & Scheduling Calendar for WordPress by vcita Plugin cross site scripting

CVE-2024-47324 | Ex-Themes WP Timeline Plugin up to 3.6.7 on WordPress path traversal

CVE-2024-47319 | Bit Apps Bit Form Plugin up to 2.13.10 on WordPress unrestricted upload

CVE-2024-47647 | HelpieWP Accordion & FAQ Plugin up to 1.27 on WordPress cross site scripting

CVE-2024-9146 | James Low CSS JS Files Plugin up to 1.5.0 on WordPress path traversal

CVE-2024-44011 | WP Ticket Ultra WP Help Desk & Support Plugin up to 1.0.5 on WordPress path traversal

CVE-2024-47323 | Ex-Themes WP Timeline Plugin up to 3.6.7 on WordPress path traversal

CVE-2024-44013 | Innate Images VR Calendar Plugin up to 2.4.0 on WordPress path traversal

CVE-2024-44012 | wpdev33 WP Newsletter Subscription Plugin up to 1.1 on WordPress path traversal

CVE-2024-44014 | Vmaxstudio Vmax Project Manager Plugin up to 1.0 on WordPress path traversal

Cisco Talos - Threat Research

Open-Source Security Through the Lens of Tidelift

McAfee Securing Tomorrow

What Are the 6 Types of Identity Theft

Cisco Talos - Threat Research

Make Cybersecurity Awareness Month a Game-Changer for You and Your Career

Effective Fuzzing: A Dav1d Case Study

Cisco Talos - Threat Research

Celebrating Latin and Hispanic Heritage Month

Cisco Talos - Threat Research

Celebrating Cisco’s Solutions Engineers in Honor of National Techies Day

Cisco Talos - Threat Research

UWA Innovates: Network Upgrade Transforms Student Experience, Boosts Security, and Drives Sustainability

McAfee Securing Tomorrow

My Instagram Has Been Hacked – What Do I Do Now?

Krebs on Security

A Single Cloud Compromise Can Feed an Army of AI Sex Bots

Cisco Talos - Threat Research

Empathy in Action: How Cisco Changes Lives with The Opportunity Platform

Qualys Security Blog

Threat Brief: Understanding Akira Ransomware

SpecterOps Team Blog

Closing the Gaps: How Attack Path Management Improves Vulnerability Management Programs

Cisco Talos - Threat Research

Stopping Attacks Early: The Power of Endpoint Telemetry in Cybersecurity

Amazon Security Bulletins

Issue with NVIDIA Container Toolkit (CVE-2024-0132, CVE-2024-0133)

SpecterOps Team Blog

Dotnet Source Generators in 2024 Part 1: Getting Started

Microsoft Security Blog

Cybersecurity Awareness Month: Securing our world—together

Cisco Talos - Threat Research

From security to AI: factors that are driving industrial networking investment

Cisco Talos - Threat Research

Evolving and Reimagining Cisco Marketing Velocity – introducing Jennifer Machgan

Cisco Talos - Threat Research

How Payment Solutions Can Help CFOs Overcome Economic Challenges

McAfee Securing Tomorrow

Top Tips for Cybersecurity Awareness Month

Securing the software supply chain with the SLSA framework

Cisco Talos - Threat Research

The Art and Science of CX Success

Cisco Talos - Threat Research

Password Advice for the Rest of Us

Krebs on Security

Crooked Cops, Stolen Laptops & the Ghost of UGNazi

Cisco Talos - Threat Research

5 Reasons Why Developers Should Attend Security Conferences

Qualys Security Blog

Qualys Ranked as a “Strong Performer” Among Top Vendors in Forrester Wave™ for Attack Surface Management

Cisco Talos - Threat Research

Join Cisco at Enlit Europe 2024

Cisco Talos - Threat Research

Black Hat 2024: SOC in the NOC

Qualys Security Blog

Critical Unauthenticated RCE Flaws in CUPS Printing Systems

Microsoft Security Blog

Storm-0501: Ransomware attacks expanding to hybrid cloud environments

Cisco Talos - Threat Research

Innovating Education: Cisco Philippines and Mapúa University Unveil AI-Led Digital Classrooms

Cisco Talos - Threat Research

Navigating Change: The Power of Digital Resilience to Transform Networks

Krebs on Security

U.S. Indicts 2 Top Russian Hackers, Sanctions Cryptex

McAfee Securing Tomorrow

Top Strategies For Keeping Your Kids Safe Online

Microsoft Security Blog

Microsoft is named a Leader in the 2024 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

McAfee Securing Tomorrow

Introducing AI PCs with McAfee Deepfake Detector

Krebs on Security

Timeshare Owner? The Mexican Drug Cartels Want You

Cisco Talos - Threat Research

Safe and trustworthy AI is a shared responsibility

Cisco Talos - Threat Research

Rev up to Recert: Power up Your Programming Skills

Microsoft Security Blog

Activate your data responsibly in the era of AI with Microsoft Purview

Qualys Security Blog

Addressing Cloud Identity Risks With TotalCloud CIEM

Cisco Talos - Threat Research

Empowered Together: A Story of Hope and Partnership

Cisco Talos - Threat Research

Harnessing Technology for Conservation: An Interview with the Executive Director of Connected Conservation Foundation

Cisco Talos - Threat Research

Forrester Named Cisco a Leader in the 2024 Microsegmentation Wave

OpenSSL Corporation's Silver Sponsorship at ICMC 2024 - A Retrospective

Qualys Security Blog

Enhancing Cloud-Native Security: Qualys Introduces Scanning for Container-Optimized OS in Google Kubernetes Engine

Microsoft Security Blog

Microsoft Trustworthy AI: Unlocking human potential starts with trust

A few notes on AWS Nitro Enclaves: Attack surface

Cisco Talos - Threat Research

Layered Protection for RADIUS With Cisco

SpecterOps Team Blog

Ghostwriter v4.3: SSO, JSON Fields, and Reporting with BloodHound

Canada Cyber Centre

Microsoft Edge security advisory (AV24-561)

Canada Cyber Centre

Apple security advisory (AV24-560)

HongKong HKCERT

DrayTek Routers Multiple Vulnerabilities

Belgium CERT.BE

WARNING: CRITICAL VULNERABILITY IN CISCO NEXUS DASHBOARD FABRIC CONTROLLER ENABLES ARBITRARY COMMAND EXECUTION, PATCH IMMEDIATELY!

Canada Cyber Centre

Drupal security advisory (AV24-559)

Celebrating eight years of being the NCSC – a part of GCHQ

Canada Cyber Centre

Zimbra security advisory (AV24-558)

Canada Cyber Centre

Cisco security advisory (AV24-557)

Canada Cyber Centre

Jenkins security advisory (AV24-556)

Canada Cyber Centre

HPE security advisory (AV24-555)

Canada Cyber Centre

Juniper Networks security advisory (AV24-554)

Canada Cyber Centre

Google Chrome security advisory (AV24-553)

Canada Cyber Centre

Mozilla security advisory (AV24-552)

Belgium CERT.BE

Warning: Critical Vulnerability In Zimbra Collaboration Enables Remote Command Execution, Patch Immediately!

Belgium CERT.BE

WARNING: HIGH NESSUS NETWORK MONITOR VULNERABILITY

Belgium CERT.BE

WARNING: CRITICAL WESTERN DIGITAL MY CLOUD VULNERABILITY, PATCH IMMEDIATELY!

Canada Cyber Centre

OpenPrinting CUPS security advisory (AV24-551)

Canada Cyber Centre

Red Hat security advisory (AV24-550)

Canada Cyber Centre

CYBER [Control systems] CISA ICS security advisories (AV24-549)

Canada Cyber Centre

[Control systems] CISA ICS security advisories (AV24-549)

Canada Cyber Centre

Ubuntu security advisory (AV24-548)

Canada Cyber Centre

IBM security advisory (AV24-547)

HongKong HKCERT

Juniper Products Multiple Vulnerabilities

Canada Cyber Centre

Dell security advisory (AV24-546)

The Dark Knight Returns: Joker malware analysis

Belgium CERT.BE

WARNING: FOUR CRITICAL VULNERABILITIES ARE AFFECTING PHP

Vulnerability in Redlink SDK

Belgium CERT.BE

WARNING: CRITICAL VULNERABILITIES IN HPE ARUBA ACCESS POINTS CAN BE EXPLOITED REMOTELY , PATCH IMMEDIATELY!

Canada Cyber Centre

Microsoft Edge security advisory (AV24-545)

Canada Cyber Centre

HPE security advisory (AV24-544)

Belgium CERT.BE

WARNING: NEW DENIAL-OF-SERVICE VULNERABILITY AFFECTS XEN SERVER & CITRIX HYPERVISOR, PATCHING ADVISED!

Finland NCSC-Fi

National Cyber Security Centre's weekly review – 38/2024

Canada Cyber Centre

GitLab security advisory (AV24-543)

Canada Cyber Centre

Foxit security advisory (AV24-542)

HongKong HKCERT

[Security Blog] IoT Security Guideline for Digital Signage

Canada Cyber Centre

HPE security advisory (AV24-541)

Canada Cyber Centre

Cisco security advisory (AV24-540)

Belgium CERT.BE

WARNING: PRIVILEGE ESCALATION VULNERABILITY AFFECTING ESET MAC-OS, PATCH IMMEDIATELY!

Belgium CERT.BE

WARNING: HIGH VULNERABILITY IN KEYCLOAK COULD LEAD TO PRIVILEGE ESCALATION AND IMPERSONATION. PATCH IMMEDIATELY!

Canada Cyber Centre

Google Chrome security advisory (AV24-539)

Belgium CERT.BE

WARNING: DENIAL-OF-SERVICE (DOS) VULNERABILITY AFFECTING APACHE TOMCAT

Belgium CERT.BE

WARNING: MISSING AUTHENTICATION VULNERABILITY IN VERSA DIRECTOR CAN BE EXPLOITED TO EXFILTRATE AUTHENTICATION TOKENS. PATCH IMMEDIATELY!

Canada Cyber Centre

IBM security advisory (AV24-538)

Canada Cyber Centre

[Control systems] CISA ICS security advisories (AV24-537)

Canada Cyber Centre

Ubuntu security advisory (AV24-536)

Canada Cyber Centre

Red Hat security advisory (AV24-535)

Canada Cyber Centre

Dell security advisory (AV24-534)

Belgium CERT.BE

Warning: Actively Exploited Ivanti CSA Vulnerability CVE-2024-8963, Patch Immediately!

Canada Cyber Centre

Microsoft Edge security advisory (AV24-533)

CISA Adds One Known Exploited Vulnerability to Catalog

Bug Bounty & Red Teaming

COMING SOON! - Researcher blogs