Aggregator

大模型安全 | “创造未来，安全同行” 北京站·第九期「度安讲」 技术沙龙开放报名

哈佛大学发布基于百万公有领域书籍的免费 AI 训练数据库

For Russian spies, existing cybercrime tools become avenues into Ukrainian military devices

AI爆款视频：一键智能生成爆款视频工具

Open source Prometheus servers and exporters are leaking plaintext passwords and tokens, along with API addresses of internal locations.

Paper-to-Podcast：将学术研究论文转换成播客工具

A vulnerability has been found in NewsmanApp Plugin up to 2.7.6 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-11767. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Primer MyData for Woocommerce Plugin up to 4.2.1 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-11809. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Minify HTML Plugin up to 2.1.10 on WordPress. This issue affects some unknown processing. The manipulation leads to incorrect regular expression. The identification of this vulnerability is CVE-2024-12579. The attack may be initiated remotely. There is no exploit available.

Gamaredon Deploys Android Spyware "BoneSpy" and "PlainGnome" in Former Soviet States

Citrix Denial of Service: Analysis of CVE-2024-8534

SSPM approach of french company Decathlon

Attacking Cortex XDR from an unprivileged user perspective

Law enforcement across mainland China have been using EagleMsgSpy surveillance tool to collect mobile device data since at least 2017, new research shows.

Explore the Salesforce security practices that are essential to your business and understand how AppOmni can empower Salesforce customers across industries.

The post 7 Must-Have Salesforce Security Practices appeared first on AppOmni.

The post 7 Must-Have Salesforce Security Practices appeared first on Security Boulevard.

Checkmarx's Sandeep Johri Details Malicious Code, AI Risks in Application Security
As software complexities grow, supply chain security is now essential to application security, according to Sandeep Johri, Checkmarx CEO. Johri discusses the challenges of malicious code, adversarial AI and the market's call for consolidated security platforms.

AG Says HealthAlliance Tried But Failed to Fix Zero-Day Flaw That Led to Exploit
New York State has levied a $550,000 fine against a healthcare group that tried - but failed - to patch a critical zero-day vulnerability in a Citrix NetScaler appliance used for telemedicine. Hackers exploited the flaw, stealing 196 gigabytes of data in an incident affecting 242,000 people.

Cybersecurity Experts Push for Clearer Mission, Expanded Authority, More Resources
Cybersecurity experts are urging a revamp of the Office of the National Cyber Director. The Center for Cybersecurity Policy and Law says the office needs a clearer mission, more resources and the authority to lead cybersecurity policy for other government agencies to bolster U.S. cyber defenses.

Possible Long-Term Attack by Unknown Hackers Thwarted
Hackers exploiting flaws in Cleo Communications software instances had intimate knowledge of their internals and deployed a previously unknown family of malware, security researchers from Huntress said Thursday. Cleo published a patch Wednesday evening.