Aggregator

主站 分类 漏洞 工具 极客

Наши предки покорили Тихий океан на тысячи лет раньше, чем мы думали.

Одна уязвимость поделила криптосообщество на две стороны спора.

Cato Security found a new info stealer, called Cthulhu Stealer, that targets Apple macOS and steals a wide range of information. Cado Security researchers have discovered a malware-as-a-service (MaaS) targeting macOS users dubbed Cthulhu Stealer. Cthulhu Stealer targets macOS users via an Apple disk image (DMG) that disguises itself as legitimate software. The researchers spotted […]

New malware Cthulhu Stealer targets Apple macOS usersCato Security found a new info stealer, c

A vulnerability was found in thinkgem JeeSite 5.3. It has been rated as problematic. This issue affects some unknown processing of the file /js/a/login of the component Cookie Handler. The manipulation of the argument skinName leads to cross site scripting. The identification of this vulnerability is CVE-2024-8112. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in Mattermost Plugin Channel Export up to 1.0.0. It has been declared as problematic. This vulnerability affects unknown code of the file /export. The manipulation leads to resource consumption. This vulnerability was named CVE-2024-43105. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

最近，众多Linux用户报告称他们的设备在尝试启动时，收到了一条神秘的错误消息：“系统出了严重问题。

近期，包括谷歌、微软、AWS 和 Red Hat 在内的多个知名开源项目被发现在 CI/CD 工作流中通过 GitHub Actions 工件泄露 GitHub 身份验证令牌。

近日，有研究人员在插件的用户模拟功能中发现了未经身份验证的权限升级漏洞，该漏洞是由 LiteSpeed Cache 6.3.0.1 及以下版本中的弱散列检查引起的。

美国重要国防承包商被黑，最坏的情况可能是什么呢？

当地时间8月21日，以澳大利亚、美国为首的多家全球网络安全机构发布了新的日志记录标准指南，以应对日益严重的网络威胁。

随着人工智能技术的迅猛发展，大模型在人工智能领域取得了显著的技术进步。

EOL operating systems no longer receive critical security updates, leaving them highly vulnerable to evolving cybersecurity threats. End-of-life OSs often struggle to run modern software and hardware, resulting in compatibility issues, reduced performance, and lower productivity. Organizations using EOL systems face increased legal and financial risks due to non-compliance with regulations and the high costs […]

The post The Risks of Running an End Of Life OS – And How To Manage It appeared first on TuxCare.

The post The Risks of Running an End Of Life OS – And How To Manage It appeared first on Security Boulevard.

Drawbridge released its next generation cyber risk assessment service. Provided as a suite of modules, the solution combines a set of analytics with Drawbridge’s client service. Clients can now benchmark and score their cyber programs to prioritize risk remediation by comparing themselves to over 1,000 other managers in real-time. “With our extensive risk data, portfolio analytics, and deep bench of cybersecurity advisors, Drawbridge offers unparalleled insights into the risk posture of alternative asset managers,” said … More →

The post Drawbridge expands cyber risk assessment service appeared first on Help Net Security.

无密码认证、行为生物识别和自适应认证等新兴趋势突显了对安全、用户友好和上下文感知认证的日益重视。

著名导演科波拉(Francis Ford Coppola)执导的科幻片《大都市》即将于 9 月 27 日在北美上映。这部电影是科波拉自己出资 1.2 亿美元拍摄的，今年 5 月在戛纳电影节首映后观众评价两极分化。狮门影业作为北美发行商试图在预告片中营造一种反差，试图证明这部电影和科波拉以前执导的争议影片一样是经得起时间考验的。然而它在预告片里引用的一系列影评人差评语录被发现是捏造的，很多还是张冠李戴，被很多人怀疑是使用类似 ChatGPT 之类的大模型查询，之后没有任何验证就直接放到了预告片里。狮门迅速撤下了预告片，向相关影评人以及科波拉道歉，坦诚自己搞砸了。

著名导演科波拉(Francis Ford Coppola)执导的科幻片《大都市》即将于 9 月 27 日在北美上映。这部电影是科波拉自己出资 1.2 亿美元拍摄的，今年 5 月在戛纳电影节

Хакеры используют «слепые зоны» системы безопасности для незаметных атак.