🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
📢 Russia-linked group could be behind Australian state court cyber attack 📢

A ransomware group was able to gain access to a database containing courtroom recordings of trials between November and December

📖 Read

via "ITPro".
🕴 Startups Scramble to Build Immediate AI Security 🕴

AI may be inherently insecure, but only a handful of startups have put forward real visions to mitigate AI's threats and keep data private.

📖 Read

via "Dark Reading".
🕴 Localization Mandates, AI Regs to Pose Major Data Challenges in 2024 🕴

With more than three-quarters of countries adopting some form of data localization and, soon, three-quarters of people worldwide protected by privacy rules, companies need to take care.

📖 Read

via "Dark Reading".
🕴 CISO Planning for 2024 May Struggle When It Comes to AI 🕴

Artificial intelligence (AI) is constantly evolving. How can security executives plan for something so unpredictable?

📖 Read

via "Dark Reading".
🕴 Israel Battles Spike in Wartime Hacktivist, OT Cyberattacks 🕴

Israel's cybersecurity industry made strides in the past year despite the backdrop of the war in Gaza.

📖 Read

via "Dark Reading".
🛠 RansomLord Anti-Ransomware Exploit Tool 2 🛠

RansomLord is a proof-of-concept tool that automates the creation of PE files, used to compromise ransomware pre-encryption. This tool uses dll hijacking to defeat ransomware by placing PE files in the x32 or x64 directories where the program is run from.

📖 Read

via "Packet Storm Security".
🕴 Google Settles Lawsuit Over Tracking 'Incognito Mode' Chrome Users 🕴

Google tracked privacy-conscious Internet users, and now it's paying for it.

📖 Read

via "Dark Reading".
🕴 Cybercriminals Share Millions of Stolen Records During Holiday Break 🕴

The "Leaksmus" event on the Dark Web exposed some 50 million records containing sensitive information from people all around the world.

📖 Read

via "Dark Reading".
‼️CVE-2024-0185‼️

A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file dasboardteacher.php of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB249443.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2024-0186‼️

A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file userindexfindpass?do4 of the component HTTP POST Request Handler. The manipulation leads to weak password recovery. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB249444.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32831‼️

In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Patch ID WCNCR00325055 Issue ID MSV868.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32872‼️

In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308607 Issue ID ALPS08308607.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32874‼️

In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID MOLY01161803 Issue ID MOLY01161803 MSV893.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32875‼️

In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308607 Issue ID ALPS08304217.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32876‼️

In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308612 Issue ID ALPS08308612.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32877‼️

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308070 Issue ID ALPS08308070.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32878‼️

In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308070 Issue ID ALPS08307992.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32879‼️

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308070 Issue ID ALPS08308064.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32880‼️

In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308070 Issue ID ALPS08308076.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32881‼️

In battery, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308070 Issue ID ALPS08308080.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32882‼️

In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308070 Issue ID ALPS08308616.

📖 Read more

Via "National Vulnerability Database"