Aggregator

欧盟因 Meta 不公平的将其分类广告服务 Facebook Marketplace 与社交网络捆绑在一起而处以 8.4 亿美元罚款，这是社交巨人首次收到欧盟的反垄断罚款。欧盟委员会裁定，Meta 必须停止将 Marketplace 与 Facebook 社交平台捆绑在一起，停止对竞争的分类广告服务施加不公平条交易条件。欧盟监管机构发现，Meta 利用 Facebook 庞大的用户群损害竞争对手，利用竞争对手的广告数据加强 Marketplace。

In this Help Net Security interview, Tony Perez, CEO at NOC.org, discusses the role of continuous monitoring for real-time threat detection, the unique risks posed by APIs, and strategies for securing web applications. Perez also addresses how AI-driven threats are shaping the future of web security and the need for adaptive defenses. Could you elaborate on the importance of continuous monitoring, especially for detecting zero-day vulnerabilities and runtime threats? Continuous monitoring is probably one of … More →

The post AI’s impact on the future of web application security appeared first on Help Net Security.

Ilya Lichtenstein, who pleaded guilty to the 2016 hack of cryptocurrency stock exchange Bitfinex, has been sentenced to five years in prison, the U.S. Department of Justice (DoJ) announced Thursday. Lichtenstein was charged for his involvement in a money laundering scheme that led to the theft of nearly 120,000 bitcoins (valued at over $10.5 billion at current prices) from the crypto exchange.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday warned that two more flaws impacting the Palo Alto Networks Expedition software have come under active exploitation in the wild. To that end, it has added the vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the necessary updates

Rockwell Automationが提供する複数の製品には、複数の脆弱性が存在します。

In this Help Net Security video, Venkat Gopalakrishnan, Principal Data Science Manager at Microsoft, discusses the development of AI-driven risk scoring models tailored for cybersecurity threats, and how AI is revolutionizing risk assessment and management in cybersecurity.

The post Using AI to drive cybersecurity risk scoring systems appeared first on Help Net Security.

Hitachi Energyが提供するMSMには、複数の脆弱性が存在します。

CrowdStrike Healthcare Executive Insights Webinar
Discover strategies to safeguard health systems from identity-driven cyberattacks in this expert-led session.

Comprehensive Identity Security Platform Expands Protection to Cloud, On-Premises
Silverfort has acquired Rezonate, a cloud-focused identity protection startup. This acquisition accelerates Silverfort’s vision for an integrated platform that secures identities across both on-premises and cloud environments, cutting complexity and boosting threat visibility for enterprise clients.

Tehran Baits Aerospace Sector Into Downloading Malware With Fake Job Offers
Iranian state hackers are taking a page out of North Korean tactics to entice job seekers into downloading malware, with security researchers spotting a Tehran campaign directed against the aerospace industry. It's possible that Pyongyang shared its attack methods and tools.

Vaccine Skeptic's Views on Health Privacy Not Well-Known
President elect Donald Trump said Thursday he will nominate prominent vaccine skeptic Robert F. Kennedy Jr. as secretary to head up the U.S. Department of Health and Human Services. His stances on health information privacy, security and healthcare sector cyber matters are not well known.

In December 2023, KrebsOnSecurity revealed the real-life identity of Rescator, the nickname used by a Russian cybercriminal who sold more than 100 million payment cards stolen from Target and Home Depot between 2013 and 2014. Moscow resident Mikhail Shefel, who confirmed using the Rescator identity in a recent interview, also admitted reaching out because he is broke and seeking publicity for several new money making schemes.

A vulnerability, which was classified as critical, was found in Microsoft Windows up to Server 2012 R2. Affected is an unknown function of the component Extensible Firmware Interface. The manipulation leads to Privilege Escalation. This vulnerability is traded as CVE-2022-21899. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in Microsoft Windows and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Hyper-V. The manipulation leads to an unknown weakness. This vulnerability is known as CVE-2022-21900. Access to the local network is required for this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Microsoft Windows and classified as very critical. Affected by this issue is some unknown functionality of the component Hyper-V. The manipulation leads to Privilege Escalation. This vulnerability is handled as CVE-2022-21901. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Microsoft Windows up to Server 2022. It has been classified as critical. This affects an unknown part of the component DWM Core Library. The manipulation leads to improper privilege management. This vulnerability is uniquely identified as CVE-2022-21902. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Microsoft Windows. It has been declared as critical. This vulnerability affects unknown code of the component GDI. The manipulation leads to Privilege Escalation. This vulnerability was named CVE-2022-21903. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in Microsoft Windows up to Server 2012 R2 and classified as critical. This vulnerability affects unknown code of the component Extensible Firmware Interface. The manipulation leads to denial of service. This vulnerability was named CVE-2022-21899. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.