Aggregator

中秋礼盒0元购限时3️⃣天

公司向受影响的个人通报了 2023 年 1 月 19 日至 25 日期间发生的安全事件，涉及未授权的网络访问和数据泄露。

主站 分类 漏洞 工具 极客

微软上周释出的例行安全更新修复了一个有两年历史的 GRUB 漏洞 CVE-2022-2601。该漏洞的危险等级是 8.6/10，GRUB 是一个开源引导加载程序，被很多 Linux 设备使用，该漏洞允许攻击者绕过安全启动（secure boot）。CVE-2022-2601 是在 2022 年披露的，而微软直到上周才修复。在修复之后，运行双系统的 Linux 用户报告设备无法启动了。微软尚未对此发表公开声明，用户的一种权宜之计是在 EFI 面板中关闭安全启动，但这显然是无法接受的。另一种解决方法是卸载微软上周释出的补丁，这意味着 GRUB 漏洞仍然存在。

AI解读间谍行动视频。

新闻速览 •英国国家网络安全中心启动网络弹性审计计划 •2024年上半年勒索攻击赎金支付再创新高，总额超32亿 […]

一.  引言 随着软件开发的日益复杂，敏感信息（如API密钥和访问令牌）的安全性变得尤为重要。如图1 […]

这些活动分别使用了三种不同的 URL 发送机制，包括自动语音呼叫、短信和社交媒体恶意广告。

主站 分类 漏洞 工具 极客

EY's Piotr Ciepiela Discusses Key Challenges in Implementing, Maintaining OT SOCs
Piotr Ciepiela, EMEIA cybersecurity leader at EY, discusses the challenges of securing OT systems and contrasts them with IT SOC environments. He emphasizes the need for specialized tools, dedicated personnel and strong collaboration with engineering teams to manage OT SOC operations.

Patients Still Asked to Bring Paper Records to Appointments Post-Ransomware Attack
McLaren Health Care expects IT disruptions caused by a ransomware attack earlier this month to last through the end of August. While most of McLaren's facilities are open, IT systems across its hospitals, cancer centers and clinics are still affected, including electronic medical record access.

New Version Aims to Ensure AI Safety While Keeping Its Builders Happy
California state lawmakers watered down a bill aimed at preventing artificial intelligence disasters after hearing criticism from industry and federal representatives. The bill still faces opposition from Silicon Valley and Democratic lawmakers.

Robert Boyce on Accenture's Strategy for Assessing the Behavior of Ransomware Gangs
Accenture Global Cyber Resilience Lead Robert Boyce outlines why organizations must assess the stability of ransomware groups before deciding how to respond to extortion threats. He outlines how trustworthiness of ransomware gangs can affect the likelihood of receiving decryption keys after payment.

EY's Piotr Ciepiela Discusses Key Challenges in Implementing, Maintaining OT SOCs
Piotr Ciepiela, EMEIA cybersecurity leader at EY, discusses the challenges of securing OT systems and contrasts them with IT SOC environments. He emphasizes the need for specialized tools, dedicated personnel and strong collaboration with engineering teams to manage OT SOC operations.

Patients Still Asked to Bring Paper Records to Appointments Post-Ransomware Attack
McLaren Health Care expects IT disruptions caused by a ransomware attack earlier this month to last through the end of August. While most of McLaren's facilities are open, IT systems across its hospitals, cancer centers and clinics are still affected, including electronic medical record access.