discovered a new privilege elevation vulnerability "Nimbuspwn" in Linux. These vulnerabilities are tracked as CVE-2022-29799 and CVE-2022-29800
Do Son
At present, the details of the vulnerability and proof of concept (POC) have been disclosed, and the CVE-2022-21449 risk is high.
VMware issued a security bulletin to disclose a denial-of-service (dos) vulnerability (CVE-2022-22969) in Spring Security OAuth
Kaspersky Lab found a flaw in the encryption algorithm used by malware, and Kaspersky launched a free Yanluowang ransomware decryptor tool
Atlassian issued a risk notice for Jira and Jira Service Management. The vulnerability number is CVE-2022-0540, vulnerability level is high risk
CVE-2022-21431 allows attackers send malicious requests over TCP protocol and take over Oracle Communications Billing and Revenue Management
CVE-2021-3970 is a potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models
network security company, CloudSEK has found in their daily monitoring that there are fake Windows 11 upgrade websites
Hackers steal $655K after picking MetaMask seed from iCloud backup. If the user turns on iCloud automatic backup, the password-encrypted MetaMask vault
users need to delete the 7-zip.chm file in the 7-Zip installation directory. After deletion, hackers can no longer exploit CVE-2022-29072
it is only slightly troublesome to deploy the Google Play Store in Windows 11 Subsystem for Android, so some hackers use this theme to spread malware