Aggregator

A vulnerability, which was classified as problematic, has been found in Itechscripts Proman Xpress 5.0.1. This issue affects some unknown processing of the file client_details.php. The manipulation of the argument cl_comments leads to cross site scripting. The identification of this vulnerability is CVE-2012-4266. The attack may be initiated remotely. Furthermore, there is an exploit available.

North Korean IT workers are expanding their efforts beyond the US, and are seeking to fraudulently gain employment with organizations around the world, but most especially in Europe. According to Google’s threat researchers, they are also increasingly attempting to extort money from these companies once they get discovered and/or fired. “Previously, workers terminated from their places of employment might attempt to provide references for their other personas so that they could be rehired by the … More →

The post North Korean IT workers set their sights on European organizations appeared first on Help Net Security.

A vulnerability, which was classified as problematic, was found in NVIDIA Graphics Driver up to 341/369.58/375.62 on Quadro/NVS/GeForce. Affected is the function DxgDdiEscape in the library nvlddmkm.sys of the component Kernel Mode Layer. The manipulation leads to information disclosure (Kernel Memory). This vulnerability is traded as CVE-2016-7386. Local access is required to approach this attack. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

关键词腾讯会议根据最新消息，4月2日下午，“腾讯会议崩了”话题登上了热搜，不少网友反映无法通过腾讯会议进入会议

A vulnerability was found in SourceCodester Blog Site 1.0 and classified as problematic. This issue affects the function user_add of the file main.php. The manipulation of the argument name/email leads to cross site scripting. The identification of this vulnerability is CVE-2023-23019. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Supreme Modules Lite Plugin up to 2.5.3 on WordPress. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-4334. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in SourceCodester Product Show Room 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Add Users. The manipulation of the argument Last Name leads to cross site scripting. This vulnerability is known as CVE-2024-33304. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in SourceCodester Employees Payroll Management System 1.0. This affects an unknown part of the file Main.php. The manipulation of the argument code/title/from_date/to_date leads to cross site scripting. This vulnerability is uniquely identified as CVE-2023-23022. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability has been found in SourceCodester POS Point Sale System 1.0 and classified as problematic. This vulnerability affects unknown code of the file Main.php. The manipulation of the argument code/name/description leads to cross site scripting. This vulnerability was named CVE-2023-23021. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in CMSimple 5.15. This issue affects some unknown processing of the component Settings Menu. The manipulation of the argument Downloads leads to cross site scripting. The identification of this vulnerability is CVE-2024-33424. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in ViewerJS 0.5.8. It has been rated as problematic. This issue affects some unknown processing of the component URL TAG Handler. The manipulation leads to open redirect. The identification of this vulnerability is CVE-2024-25676. The attack may be initiated remotely. There is no exploit available.

我们在日常狩猎中捕获到APT-C-47组织疑似针对知识产权行业的攻击样本，攻击者还是一如既往地使用ClickOnce技术投递下一阶段载荷，使用C#模块，以及C++模块经过层层递进，并最终内存加载Golang编译的远控木马

Google has unveiled end-to-end encryption (E2EE) capabilities for Gmail enterprise users, simplifying encrypted email communication for businesses of all sizes. This feature, launched in beta today to coincide with Gmail’s birthday, aims to bridge the gap between robust security and user-friendly functionality, allowing organizations to enhance data privacy without the traditional complexity of encryption setups. […]

The post Google Introduces End-to-End Encryption for Gmail Business Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

日前，市场监管总局发布《网络交易合规数据报送管理暂行办法》。市场监管总局网监司相关负责人就涉及《办法》的相关问题回答记者提问。

近期，百度副总裁谢广军13岁的女儿因“饭圈”矛盾被卷入“开盒”事件。此次事件的特殊性在于施害者为未成年人，且隐私泄露的源头指向海外“社工库”，一个非法收集和交易个人信息的黑产数据库，引发公众对企业数据安全机制的广泛担忧和质疑。

整体部署既满足了企业对数据跨境流动的迫切需求，又确保了数据安全可控，为数字经济高质量发展提供了坚实保障，标志着北京在全球数据治理领域迈出坚实而关键的一步。四个关键词来概括北京数据跨境流动便利化改革2.0版本的实施方案。

为规范人工智能技术服务应用，维护国家安全和社会公共利益，国家互联网信息办公室会同多部门发布的《人工智能生成合成内容标识办法》，秉持兼容并蓄的理念，通过技术手段管理技术问题，探索科学高效的治理手段。

2024年12月31日，国家发展改革委等三部门发布《国家数据基础设施建设指引》，提出建设“高速互联、高效调度、开放普惠、安全可靠的国家数据基础设施”。以标准为引领，建设横向连通、纵向贯通、协调有力的全国一体化国家数据基础设施正式启幕。

近期，网信部门会同体育主管部门依法严惩拉踩引战和攻击谩骂等行为，清理违法违规信息160万余条，处置账号7.6万个，其中关闭账号3767个，切实维护清朗网络空间，为运动员积极备战和体育赛事顺利举办营造良好舆论氛围。