|
You are here |
malgregator.com | ||
| | | | |
mouha.be
|
|
| | | | | [AI summary] A cryptography researcher coordinates the public disclosure of a SHA-3 buffer overflow vulnerability found in the official XKCP implementation and related projects, detailing how the flaw allows for memory exhaustion and potential code execution. | |
| | | | |
seclists.org
|
|
| | | | | ||
| | | | |
sparklekitten.net
|
|
| | | | | [AI summary] The post reviews May's threat intelligence landscape, highlighting the 3CX supply chain attack by North Korean actors, the targeting of ESXi servers by ransomware, the active exploitation of VEEAM backup vulnerabilities by FIN7, and a newly critical Cisco zero-day, alongside advice on mitigation strategies. | |
| | | | |
blog.fox-it.com
|
|
| | | Fox-IT (part of NCC Group) has uncovered a large-scale exploitation campaign of Citrix NetScalers in a joint effort with the Dutch Institute of Vulnerability Disclosure (DIVD). An adversary appears to have exploited CVE-2023-3519 in an automated fashion, placing webshells on vulnerable NetScalers to gain persistent access. The adversary can execute arbitrary commands with this webshell,... | ||