Aggregator

CNVD-C-2023-655149用友u8 cloud存在SQL注入漏洞，攻击者未经授权可以访问数据库中的数据。

01.NET漏洞背景微软的.NET技术广泛应用于全球企业级产品，包括其知名的Exchange、SharePoi

特定非営利活動法人デジタル・フォレンジック研究会の証拠保全ガイドライン改訂ワーキンググループは「証拠保全ガイドライン 第１０版」を公開しました。本文書では我が国における電磁的証拠の保全手続きの参考として、さまざまな事案の特性を踏まえた知見やノウハウがまとめられています。今回の改訂ではクラウドサービスに関する項目が新設され、クラウド特有の証拠保全手順・留意事項が整理されています。

'Encryption Can't Protect You From Stupid,' Says Leading Cryptographer
We're all human. Who among us hasn't lost a thumb drive or added a journalist to a consumer-grade encrypted app group chat devoted to White House war planning and military operations? Still, some accidental data breaches pose a bigger risk than others.

ARC-AGI-2 Measures AI's Ability to Problem Solve With Fewer Resources
A new benchmark to evaluate artificial general intelligence has leading artificial intelligence models stumped. The Arc Prize Foundation's ARC-AGI-2 test presents puzzle-like challenges that require AI models to analyze visual patterns from multicolored square grids and generate solutions.

'Weaver Ant' Used Web Shell Tunneling and Hacked Routers to Evade Detection
An apparently Chinese cyberespionage operation lurked inside the network of an Asian telecom for four years, camouflaging its presence through nested encryption and lightweight web shells. Chinese hackers have been uncovered on the inside of telecom networks spanning the globe.

Settlement Is 5th HIPAA Enforcement Action Under HHS's OCR Risk Analysis Initiative
An Illinois-based firm that provides fitness and wellness plans to clients throughout the U.S. has agreed to pay federal regulators a settlement of nearly $228,000 and implement a corrective action plan following an IT misconfiguration incident that caused several breaches in 2018 and 2019.

Audits Focus on HIPAA Security Rule Provisions Related to Ransomware, Hacking
Federal regulators have quietly resumed compliance audits of HIPAA-regulated organizations. With the surge in ransomware and other hacks reported in recent years, the focus of the audits are on provisions of the HIPAA Security Rule most relevant to these attacks, said a government official.

'Encryption Can't Protect You From Stupid,' Says Leading Cryptographer
We're all human. Who among us hasn't lost a thumb drive or added a journalist to a consumer-grade encrypted app group chat devoted to White House war planning and military operations? Still, some accidental data breaches pose a bigger risk than others.