Aggregator

A vulnerability was found in za-internet C-MOR Video Surveillance 5.2401 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cleartext storage of sensitive information. This vulnerability is handled as CVE-2024-45175. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in IBM Aspera Faspex up to 5.0.9 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to exposure of information through directory listing. This vulnerability is known as CVE-2024-45096. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in IBM Aspera Faspex up to 5.0.9. Affected is an unknown function. The manipulation leads to trusting http permission methods on the server side. This vulnerability is traded as CVE-2024-45098. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in IBM Aspera Faspex up to 5.0.9. This issue affects some unknown processing. The manipulation leads to trusting http permission methods on the server side. The identification of this vulnerability is CVE-2024-45097. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in za-internet C-MOR Video Surveillance 5.2401. This vulnerability affects unknown code of the file download-bkf.pml. The manipulation leads to path traversal. This vulnerability was named CVE-2024-45178. The attack can be initiated remotely. There is no exploit available.

A vulnerability classified as critical has been found in za-internet C-MOR Video Surveillance 5.2401. This affects an unknown part of the component Web Interface. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2024-45173. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in za-internet C-MOR Video Surveillance 5.2401. It has been rated as critical. Affected by this issue is some unknown functionality of the file /srv/www/backups. The manipulation leads to unrestricted upload. This vulnerability is handled as CVE-2024-45171. The attack may be launched remotely. There is no exploit available.

via the comic & dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Lava Lakes’ appeared first on Security Boulevard.

Yet, another critical severity vulnerability has been discovered in LiteSpeed Cache, a caching plugin for speeding up user browsing in over 6 million WordPress sites. [...]

昨天，“数说安全”微信公众号发布了一篇文章《各网安上市公司的现金还能撑多久》，本文用今年中报的数据进行了更新，和扩展。

North Carolina musician Michael Smith was indicted for collecting over $10 million in royalty payments from Spotify, Amazon Music, Apple Music, and YouTube Music using AI-generated songs streamed by thousands of bots in a massive streaming fraud scheme. [...]

大模型能比人类更快的概述一篇长文，因此很多用户和企业尝试用它去概述冗长的文档以方便阅读。澳大利亚证券和投资委员会(ASIC)对此展开了研究，他们测试了开源大模型 Llama2-70B，发现它提供的概述相比人类提供的差很多。Llama2-70B 不是目前最先进的大模型，这一结果不太能够推广到最先进大模型的概述能力。尽管如此，研究表明，大型组织在将大模型的输出集成到现有工作流前需要三思。ASIC 发现，大模型生成的概述太笼统，还常常包含不正确的信息，语法正确，但幻觉无法避免。对比测试发现，AI 的平均得分为 7/15，而人类是 12.2/15。

Проект по оцифровке книг был запущен в разгар пандемии для поддержки читателей.

Post-Quantum Cryptography (PQC) is a new generation of encryption algorithms for protecting data against powerful quantum computers. Quantum computers use quantum mechanics to solve complex problems much faster than traditional computers. With rapid advancements in quantum computing, current encryption algorithms like RSA are at risk of being broken, which would take regular computers hundreds or […]

The post Understanding Quantum Threats and How to Secure Data with Post-Quantum Cryptography appeared first on Security Boulevard.

Unnamed government entities in the Middle East and Malaysia are the target of a persistent cyber campaign orchestrated by a threat actor known as Tropic Trooper since June 2023. "Sighting this group's [Tactics, Techniques, and Procedures] in critical governmental entities in the Middle East, particularly those related to human rights studies, marks a new strategic move for them," Kaspersky

Veeam has shipped security updates to address a total of 18 security flaws impacting its software products, including five critical vulnerabilities that could result in remote code execution. The list of shortcomings is below - CVE-2024-40711 (CVSS score: 9.8) - A vulnerability in Veeam Backup & Replication that allows unauthenticated remote code execution. CVE-2024-42024 (CVSS score: 9.1

Эксперимент показал: люди переоценивают возможности ИИ.