Aggregator

A head-spinning series of acquisitions and mergers is transforming the security information and event management (SIEM) market. Behind this market shakeup is the ongoing technological shift from traditional, manually intensive SIEM solutions to AI-driven security analytics.

US National Security Agency Says It Has More Than 1,000 New Cybersecurity Alliances
The United States National Security Agency is banking on recently developed partnerships with leading technology firms around the world and foreign partners to combat the growing cybersecurity risks from Chinese-based threat actors, a top official from the agency said Wednesday.

5th Nation to Investigate Software Firm Imposes Largest GDPR Penalty, Bans Use
The Dutch data regulator is the latest agency to fine artificial intelligence company Clearview AI over its facial data harvesting and other privacy violations of GDPR rules, joining regulatory agencies in France, Italy, Greece and the United Kingdom.

New TCP resets and timeouts dataset on Cloudflare Radar surfaces connection tampering, scanning, DoS attacks, and more.

Cloudflare brings visibility to the practice of connection tampering as observed from our global network.

国际合作执法及对区块链数据分析技术的利用将成为打击加密货币犯罪的大趋势。

A vulnerability was found in Mambo Calendar 1.5.5. It has been declared as critical. This vulnerability affects unknown code of the file com_calendar.php of the component mod_calendar.php. The manipulation of the argument absolute_path leads to file inclusion. This vulnerability was named CVE-2007-2049. The attack can be initiated remotely. Furthermore, there is an exploit available.

据英国《金融时报》报道，美国、欧盟和英国将在9 月 5日签署欧洲委员会的人工智能标准协议。

Snapchat 准备直接将广告放置在用户消息的上面。CEO Evan Spiegel 透露，来自品牌的 Sponsored Snaps 将会作为未读消息显示在主聊天页面上，其位置将是用户联络人消息的上方。这将是 Snap 首次在应用最常用的部分展示广告。Sponsored Snaps 无需推送通知就能显示。目前还不清楚在不打开 Sponsored Snap 的情况下删除它有多容易，或者是否可能。Spiegel 声称用户之间的聊天仍然是私密的，不会用于广告。

蒙大拿州计划生育协会证实其网络系统近期遭到入侵，近100GB敏感数据被泄露，RansomHub 勒索软件组织近期宣布对此次攻击负责。 勒索软件组织RansomHub 声称其从蒙大拿州计划生育协会窃取了近 100 GB 的敏感数据，包括多个被盗文件的样本，这些样本包含 2024 年以来的财务预算记录、工资信息、米苏拉县拘留所正在进行的法庭案件的文件以及责任保险证明。 RansomHub 暗泄密网站 蒙大拿州计划生育协会首席执行官兼总裁玛莎·富勒在声明中证实，该组织上个月曾遭到入侵。 “2024 年 8 月 28 日，蒙大拿州计划生育协会 (PPMT) 发现了一起影响 IT 系统的网络安全事件，”富勒说。“在事件发生期间，IT 人员立即实施了该组织的事件响应协议，其中包括将部分网络离线。” 富勒强调称“调查仍在进行中”，并且计划生育协会已知悉 RansomHub 的声明。 与往常一样，网络犯罪集团给了计划生育协会七天时间来协商赎金要求，否则将计划在暗网上泄露这 93 GB 的被盗文件，并将其出售给最高出价者。 RansomHub 暗泄密网站 “我们非常重视此事，已向联邦执法部门报告了此事，并将全力支持他们的调查，”富勒总结道。  RansomHub 是一个新兴的勒索软件组织，自二月份以来该勒索软件的受害者数量一直在增加。 作为一个非营利性妇女生殖健康组织，蒙大拿州计划生育协会在西北部的蒙大拿州已运营逾 50 年，设有五个健康中心，并提供虚拟远程医疗服务。根据其网站，组织每年为“数千名患者”提供服务，包括 LGBTQIA2S+ 社区，总部位于比林斯大都会区。   消息来源：cybernews，译者：YY；   本文由 HackerNews.cc 翻译整理，封面来源于网络；   转载请注明“转自 HackerNews.cc”并附上原文

A vulnerability was found in WSO2 Carbon 4.4.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file server-admin/proxy_ajaxprocessor.jsp. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2016-4315. The attack can be launched remotely. Furthermore, there is an exploit available.

做天命人，还是孙上香？

A vulnerability, which was classified as critical, was found in Apple macOS up to 10.13.1. This affects an unknown part of the component ImageIO. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2017-13831. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Google fixed actively exploited Android flaw CVE-2024-32896 Pierluigi Paganini September 04, 2

error code: 1106

error code: 1106

A vulnerability was found in Samsung Devices and classified as critical. This issue affects some unknown processing of the component DualDarManagerProxy. The manipulation leads to improper access controls. The identification of this vulnerability is CVE-2024-34646. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Samsung Devices. It has been classified as problematic. Affected is an unknown function of the component DualDarManagerProxy. The manipulation leads to incorrect use of privileged apis. This vulnerability is traded as CVE-2024-34647. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Samsung Devices. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Multitasking Framework. The manipulation leads to improper access controls. This vulnerability is known as CVE-2024-34649. It is possible to launch the attack on the physical device. There is no exploit available. It is recommended to upgrade the affected component.