Aggregator

A vulnerability classified as critical was found in chattanoogastate eLearn 1.0.649.1194. This vulnerability affects unknown code of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability was named CVE-2014-6977. The attack can only be done within the local network. There is no exploit available.

Проблемы затронули как домашние, так и корпоративные решения.

A vulnerability was found in MongoDB. It has been classified as problematic. This affects an unknown part of the file .dbshell of the component Client. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2016-6494. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

·政策 《网络安全标准实践指南——敏感个人信息识别指南》 ·标准 《人工智能生成合成内容标识办法（征求意见稿）》 《网络安全技术 网络身份认证公共服务应用接入规范（征求意见稿）》 《网络安全技术 公钥基础设施 证书管理协议》 《网络安全技术 公钥基础设施 时间戳规范》 《网络空间技术 公钥基础设施 PKI组件最小互操作规范》 《关于推动网络交易平台企业落实合规管理主体责任的指导意见（征求意见稿）》 ·报告 《人工智能安全治理框架》1.0版 《网络空间安全工程技术人才培养体系指南（综合版）》

理性应对市场挑战，稳健推进业务扩张。

The latest version of the evolving threat is a multistage attack demonstrating a move away from ransomware to purely espionage activities, typically targeting Ukraine and its supporters.

Pavel Durov says he will share details of “bad actors” and clean up Telegram’s search function

A vulnerability classified as problematic has been found in IBM Algorithmics. This affects an unknown part. The manipulation of the argument STYLESHEET leads to cross site scripting. This vulnerability is uniquely identified as CVE-2014-0870. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Olgu Computer Systems e-Belediye. It has been classified as very critical. Affected is an unknown function. The manipulation leads to file inclusion. This vulnerability is traded as CVE-2024-9142. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Но там напомнили о возможности временного ограничения сервиса.

A vulnerability was found in VBZooM 1.11. It has been classified as critical. Affected is an unknown function of the file forum.php. The manipulation of the argument MainID leads to sql injection. This vulnerability is traded as CVE-2006-3142. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Guardsquare announced an innovative, guided approach to mobile application security that empowers teams to achieve the highest level of protection – now in the easiest possible way. Mobile development teams are now able to achieve a fully protected app in less than a day. Guardsquare’s new product capability provides a seamless implementation experience increasing developer productivity, visibility for enhanced security, and collaboration across development and security teams. Available for both iOS and Android apps, Guardsquare’s … More →

The post Guardsquare strenghtens mobile application security for developers appeared first on Help Net Security.

Here’s what parents should know about Snapchat and why you should take some time to ensure your children can stay safe when using the app

A new version of the Octo Android malware, named "Octo2," has been seen spreading across Europe under the guise of NordVPN, Google Chrome, and an app called Europe Enterprise. [...]

A vulnerability, which was classified as critical, was found in Doorkeeper Gem up to 4.1.0. Affected is an unknown function of the component OAuth Token Revocation Handler. The manipulation leads to 7pk security features. This vulnerability is traded as CVE-2016-6582. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

OpenAI CEO Sam Altman 在个人博客上发表文章，阐述了对 AI 未来的愿景，他认为我们距离超级 AI 可能只有几千日。作为一名利益相关者，他的预言可能类似马斯克，更多是为了推销自己的公司。一千天大约是 2.7 年，几千天也就是 3-27 年之间。Altman 称：经过数千年的科学发现和技术进步的积累，我们已经找到了如何溶化沙子，添加杂质，以令人惊讶的精度在极小的尺度上排列成计算机芯片，给它们通电，最终得到能够创造日益强大的人工智能的系统。这可能是迄今为止历史上最重要的事实。我们有可能在几千天内实现超级智能！可能会需要更长的时间，但我相信我们最终会实现这一目标。可以用六个字来概括：深度学习有效。用一句话来说：深度学习取得成功，随着规模的扩大，可以预见它会变得更好，我们为此投入了更多资源。

首周奖励情况公示！

用户怀疑被恶意软件感染

CISA 刚刚发布一项指南，为软件买家列出应该向软件厂商询问的问题，更好地理解它们是否将安全放在产品开发生命周期的优先级。

A new Europol report argues that AI tools could revolutionize policing across the region