Aggregator

Global law enforcement operation targets AISURU, Kimwolf, JackSkid botnet operators

Security Affairs
3 weeks 2 days ago
DoJ disrupted IoT botnets’ C2 infrastructure with global partners, targeting operators behind AISURU, Kimwolf, JackSkid, and others. The U.S. DoJ disrupted command-and-control infrastructure used by several IoT botnets, including AISURU, Kimwolf, JackSkid, and Mossad. The operation involved authorities from Canada and Germany, along with major tech companies, to target botnet operators and weaken their global […]
Pierluigi Paganini

Fake AI songs streamed billions of times, netting fraudster $10 million

Help Net Security
3 weeks 2 days ago

Michael Smith, 54, of Cornelius, North Carolina, has pleaded guilty in federal court to running a scheme that exploited music streaming platforms and diverted royalty payments from artists. He admitted to one count of conspiracy to commit wire fraud, which carries a maximum sentence of five years in prison, and agreed to forfeit $8,091,843.64. According to U.S. Attorney for the Southern District of New York Jay Clayton, Smith used AI to generate hundreds of thousands … More →

The post Fake AI songs streamed billions of times, netting fraudster $10 million appeared first on Help Net Security.

Anamarija Pogorelec

CVE-2026-33129 | h3js h3 up to 2.0.0-rc.8/2.0.1-rc.9 requireBasicAuth timing discrepancy

VulDB Recent Entries
3 weeks 2 days ago
A vulnerability identified as problematic has been detected in h3js h3 up to 2.0.0-rc.8/2.0.1-rc.9. This impacts the function requireBasicAuth. Performing a manipulation results in observable timing discrepancy. This vulnerability was named CVE-2026-33129. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.
vuldb.com

CVE-2026-33130 | louislam uptime-kuma up to 2.2.0 notification-provider.js require.resolve filename control (EUVD-2026-13670)

VulDB Recent Entries
3 weeks 2 days ago
A vulnerability categorized as problematic has been discovered in louislam uptime-kuma up to 2.2.0. This affects the function require.resolve of the file notification-provider.js. Such manipulation leads to improper control of filename for include/require statement in php program ('php remote file inclusion'). This vulnerability is uniquely identified as CVE-2026-33130. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.
vuldb.com

评论 | 涉企网络谣言治理要更加精准高效

中国信息安全
3 weeks 2 days ago
营造清朗的网络空间，保护企业合法权益，是为数字经济与实体经济融合发展保驾护航的重要举措。目前，我国已初步构建起涉企网络侵权举报制度体系，有关部门出台的相关工作规范和指导意见，明确了平台处置涉企侵权信息的责任。但面对由AI技术赋能的网络水军……

Managed ad