Aggregator

Грядущие инициативы создадут новый вектор развития цифровой обороны.

9 月 22 日 13 时 40 分，深蓝航天的星云一号可重复使用运载火箭，在内蒙古额济纳旗戈壁腹地实施高空垂直回收飞行试验。火箭按照预定程序三台发动机点火起飞，到达预定高度后，两侧发动机关闭，依靠单台发动机推力稳定姿态并减速上升，到达最高点之后依靠单台发动机推力调节平稳下降，横移约 200 米后，在回收场上空的预定高度成功解锁展开并锁定着陆支腿，但是在最后着陆关机段出现异常，导致箭体出现部分损毁。深蓝在数小时内就公布了一份关于试飞、目标和问题初步评估声明，它同时还公布了图像和视频，其中包括无人机近距离拍摄的火箭尝试垂直着陆但失败的爆炸视频，相当震撼。深蓝表示它完成了 11 个主要任务中的 10 个，计划 11 月进行另一次高空试飞。

A vulnerability was found in Apache Tomcat up to 9.0.89/10.1.24/11.0.0-M20. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component TLS Handshake Handler. The manipulation leads to resource consumption. This vulnerability is known as CVE-2024-38286. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Lattice-based cryptography is a quantum-resistant encryption method that uses complex mathematical lattices, offering security against quantum computing attacks. Unlike traditional encryption methods such as RSA and ECC, which are vulnerable to quantum computers, lattice-based cryptography remains secure due to the computational difficulty of solving lattice problems. It is expected to play a central role in post-quantum cryptography, with applications across government, military, and commercial sectors, ensuring secure communications and data protection in the quantum era.

The post Exploring the foundations of lattice-based cryptography appeared first on Security Boulevard.

Is your B2B SaaS freemium model truly driving growth? Discover how to fine-tune your freemium strategy to attract the right users, nurture them towards conversion, and achieve long-term success.

The post Freemium Model Optimization for B2B SaaS: A Strategic Growth Approach appeared first on Security Boulevard.

地震学家起初认为仪器有故障。地震监测站于 2023 年 9 月监测到的信号与地震或火山爆发特有的频率不匹配。然而全世界的监测器都侦测到了持续九天、每 92 秒脉动一次的信号。这一神秘信号被称为 unidentified seismic object（或 USO）。一年后，科学家认为他们破译了 USO——格陵兰岛东部因气候变化发生的山体滑坡引发了海啸，海啸在狭窄的峡湾内来回翻腾了九天。这一事件展示了气候变化如何以隐蔽的方式重构我们的世界。气候变化的后果并不总是显而易见的、可预测的、可测量的或可解释的。我们正进入一个气候不确定的新时代。

As organizations grapple with increasingly sophisticated cyber threats, many are rethinking their approach to managing security. Recently, Nuspire’s leadership team—including CEO Lewie Dunsworth, Chief Security Officer J.R. Cunningham, Chief Technology Officer Michael Wilson, and Product Manager Marcy Elder—gathered for a webinar to share their insights on what’s next for cybersecurity management.  Reimagining Cybersecurity Management  Five years ago, when Lewie joined ... Read More

The post A Fresh Approach to Cybersecurity: Unifying Intelligence, Technology and Human Expertise appeared first on Nuspire.

The post A Fresh Approach to Cybersecurity: Unifying Intelligence, Technology and Human Expertise appeared first on Security Boulevard.

In today's fast-paced business environment, employees increasingly turn to unauthorized IT solutions, called Shadow IT, to streamline their work and boost productivity. This article explores the prevalence of shadow IT, the risks it poses and discusses strategies for managing it. [...]

Organizations that plan to upgrade to Windows Server 2025 once it becomes generally available will be able to implement some security updates by hotpatching running processes. What is hotpatching? “Hotpatching has been around for years in Windows Server 2022 Azure Edition, but always required running a VM in Azure or on Azure Stack HCI. When Windows Server 2025 becomes generally available, you will be able to run the edition you want, where you want – … More →

The post Windows Server 2025 gets hotpatching option, without reboots appeared first on Help Net Security.

Cloudflare announced AI Audit, a set of tools to help websites of any size analyze and control how their content is used by AI models. For the first time, website and content creators will be able to quickly and easily understand how AI model providers are using their content, and then take control of whether and how the models are able to access it. Additionally, Cloudflare is developing a new feature where content creators can … More →

The post Cloudflare AI Audit helps websites control how their content is used by AI models appeared first on Help Net Security.

Data discovery and classification are foundational for data security, data governance, and data protection.

深创投独家投资，万径安全完成新一轮增资。

大多数检测和响应工具和功能都集中在终端、网络、服务器等设备上，所有这些都需要覆盖，留下了一个很大的空白

An overall rise in cyber incidents coming from Russian-aligned adversaries in 2024 was accompanied by a decrease in high and critical-severity incidents

Как эволюция заставила нас отказаться от рискованных решений.

RightCrowd announced significant advancements in its product portfolio with the launch of enhanced RightCrowd SmartAccess platform, the broadest set of mobile credential capabilities with expanded partnerships with Wavelynx, HID, and Sentry, and reinforced visitor management features. These developments mark a pivotal moment in the company’s mission to drive the adoption of PIAM solutions across the security industry. “Our recent innovations and strategic alliances highlight RightCrowd’s dedication to propelling the security industry forward,” said Jason Bohrer, … More →

The post RightCrowd SmartAccess platform enhancements boost enterprise security appeared first on Help Net Security.