The introduction of the newly released guidelines for secure AI system development by the National Cyber Security Centre (NCSC) emphasizes the growing importance and integration of AI systems in various sectors. It acknowledges the potenti…
A vulnerability classified as problematic was found in SpliceCom Maximiser Soft PBX up to 1.5. This vulnerability affects unknown code of the component Login. The manipulation of the argument CLIENT_NAME/DEVICE_GUID leads to cross site scripting.
This…
A previously undocumented China-aligned threat actor has been linked to a set of adversary-in-the-middle (AitM) attacks that hijack update requests from legitimate software to deliver a sophisticated implant named NSPX30.
Slovak cybersecurity firm ESET…
We use LUKS/dm-crypt encrypted workstations with long passwords.
But if an laptop is unlocked and booted into Debian, using Xscreensaver then the disk is in an unencrypted state but the keyboard is locked.
My question is, would it be possi…
I’m looking into potentially acquiring one or two Yubikeys for additional security around the web. Looking at a Yubikey like below, I can’t help but think that these things are fragile and might end up physically damaged quite quickly, esp…
A vulnerability classified as problematic has been found in SpliceCom iPCS and iPCS2. This affects an unknown part. The manipulation leads to improper certificate validation.
This vulnerability is uniquely identified as CVE-2023-33757. It is possible …
A vulnerability was found in SpliceCom Maximiser Soft PBX up to 1.5. It has been rated as problematic. Affected by this issue is some unknown functionality of the component SSL Certificate. The manipulation leads to channel accessible by non-endpoint.
…
A vulnerability was found in Linux Kernel up to 6.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to integer overflow.
This vulnerability is known as CVE-2024-23307. The attack ca…
A vulnerability was found in Linux Kernel up to 6.7. It has been classified as problematic. Affected is an unknown function of the file /net/bluetooth/rfcomm/core.C. The manipulation leads to null pointer dereference.
This vulnerability is traded as C…
A new Go-based malware loader called CherryLoader has been discovered by threat hunters in the wild to deliver additional payloads onto compromised hosts for follow-on exploitation.
Arctic Wolf Labs, which discovered the new attack tool in tw…
