Aggregator

由

Новое исследование выявило потенциал для фотосинтеза в ледяных зонах Красной планеты.

Компания обвиняет Пентагон в несправедливых санкциях и нанесении серьёзного ущерба бизнесу

OpenAI 前 CTO 创业公司融资或超 1 亿美元据路透社报道，OpenAI 前 CTO 米拉·穆拉蒂的新 AI 创业公司，可能会筹集超过 1亿美元资金。据透露，穆拉蒂的新公司旨在基于专有模型开发

Several end-to-end encrypted (E2EE) cloud storage platforms are vulnerable to a set of security issues that could expose user data to malicious actors. [...]

15种高级RAG技术：从预检索到生成全面提升RAG效果 by ourren

浅谈LLM时代下的REST API自动化测试 by ourren

探究大型语言模型在安全漏洞检测中的局限性 by ourren

大模型驱动的软件选项组合脆弱性自动化预测与模糊测试框架 by ourren

LLM帮你理解安全补丁 by ourren

无文件攻击利用与防范 by ourren

WFlib-网站指纹攻击的开源工具库 by ourren

更多最新文章，请访问SecWiki

Vulnerability / Email SecurityUnknown threat actors have been observed attempting to exploit a now

英特尔和 AMD 在 1999 年先后宣布了不兼容 IA-32 的 IA-64 安腾架构处理器，兼容 IA-32 的 x86-64 架构处理器。以英特尔的财力和在芯片行业的支配地位，它完全有能力同时开发这两种架构，但为什么芯片巨人不这么做？Pentium Pro 架构师 Robert Colwell 回答，这是英特尔的营销决策，他们认为在 x86 中引入新的 64 位功能会被视为对抗自己的原生 64 位安腾，可能会严重损害安腾的成功机会。在英特尔内部谈论 x86 需要 64 位会受到警告，Colwell 回忆说他就被威胁会遭到解雇，但他决定采取折衷的策略，没有完全关闭大门。当安腾在竞争中处于劣势时英特尔可以重返 x86。虽然安腾失败了，英特尔确实赢得了持久战。在后期英特尔曾请求微软的帮助，但微软拒绝了。而在早期，AMD 也曾经请求微软的帮助而微软也拒绝了。

Authors/Presenters:Ruihan Li, Fangdan Ye, Yifei Yuan, Ruizhen Yang, Bingchuan Tian, Tianchen Guo, Hao Wu, Xiaobo Zhu, Zhongyu Guan, Qing Ma, Xianlong Zeng, Chenren Xu, Dennis Cai. Ennan Zhai

Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24) content, placing the organizations enduring commitment to Open Access front and center. Originating from the conference’s events situated at the Hyatt Regency Santa Clara; and via the organizations YouTube channel.

Permalink

The post USENIX NSDI ’24 – Reasoning About Network Traffic Load Property at Production Scale appeared first on Security Boulevard.

Authors/Presenters:Aleise McGowan, Tennisha Martin

Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their timely []DEF CON 32]2 erudite content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.

Permalink

The post DEF CON 32 – AppSec Considerations From The Casino Industry appeared first on Security Boulevard.

免费且实用，我用极影相机改善 iPhone SE 3 的摄影体验 Matrix 首页推荐 Matrix 是少数派的写作社区，我们主张分享真实的产品体验，有实用价值的经验与思考。我们会不定期挑选 Ma

The Internet Archive was breached again, this time on their Zendesk email support platform after repeated warnings that threat actors stole exposed GitLab authentication tokens. [...]

A vulnerability has been found in Fahad Mahmood Endless Posts Navigation Plugin up to 2.2.7 on WordPress and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. This vulnerability was named CVE-2024-49629. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Avchat.net AVChat Video Chat Plugin up to 2.2 on WordPress. This affects an unknown part. The manipulation leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2024-49605. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Edush Maxim GoogleDrive folder list Plugin up to 2.2.2 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2024-49335. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic was found in Gora Tech Cooked Pro Plugin up to 1.8.0 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2024-49290. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Martin Gibson IdeaPush Plugin up to 8.69 on WordPress. Affected is an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2024-49275. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Infomaniak Staff VOD Infomaniak Plugin up to 1.5.7 on WordPress. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The identification of this vulnerability is CVE-2024-49274. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in WPWeb Social Auto Poster Plugin up to 5.3.15 on WordPress. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. This vulnerability was named CVE-2024-49272. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Henrique Rodrigues SafetyForms Plugin up to 1.0.0 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2024-49615. It is possible to initiate the attack remotely. There is no exploit available.