Aggregator

CNVD漏洞周报2024年第49期

腾讯视频调整VIP会员观看权益 自12月16日起仅可同时在1台设备上观看视频

Goolge 宣布了新量子芯片 Willow，称其一大特性是将错误抑制在一个关键阈值以下的量子纠错功能。这被认为是实现未来量子计算实际应用的必要条件。量子计算有潜力在特定任务上加速计算速度并超越经典计算机的能力。但现有的量子计算机容易出错，无法运行足够长的时间以实现实际输出。研究人员为此设计的解决策略依赖量子纠错，即将信息分布到许多量子比特（量子信息的单位，类似于经典计算机的比特）上，能在不破坏计算的情况下识别和补偿错误。量子纠错需要的量子比特开销可能会引入比它能纠正的更多的错误。因此，实现“低于阈值”的运算一直存在挑战——未纠错率要低于一个关键值，这样才能按预期纠错并指数级地抑制错误。Willow 芯片能实现低于表面码关键阈值的量子纠错——表面码是一种特定的量子纠错技术。他们的系统能在数小时内运行最多 100 万个周期，同时实时解码错误并维持表现。研究者在一个 7 2量子比特的处理器和一个 105 量子比特的处理器上运行了表面码。每次码距从 3 增加到 5 再到 7，逻辑错误率减半。这种对逻辑错误的潜在抑制为运行有纠错的大规模量子算法奠定了基础。

A vulnerability has been found in Image Access Scan2Net and classified as critical. This vulnerability affects unknown code of the file msg_events.php of the component System Command Handler. The manipulation leads to os command injection. This vulnerability was named CVE-2024-28138. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in SAP BusinessObjects Business Intelligence Platform 420/430/440 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to unrestricted upload. This vulnerability was named CVE-2024-28166. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new set of cyber attacks that it said were aimed at defense companies in the country as well as its security and defense forces. The phishing attacks have been attributed to a Russia-linked threat actor called UAC-0185 (aka UNC4221), which has been active since at least 2022. "The phishing emails mimicked official messages

For too long, architecting for cyber recovery and resiliency was on the vision board for a distant future. Unfortunately, that “distant future” is here, but many companies have not started this critical effort.

The post Given Today’s Data Complexity, a Platform Mindset is Crucial for Cyber Recovery appeared first on Security Boulevard.

Инцидент имеет долгосрочные последствия для работы хирургов.

Cybersecurity researchers have unveiled an advanced technique to uncover hackers’ operational infrastructure using passive DNS data. This groundbreaking method sheds light on how attackers establish and maintain their networks to perpetrate malicious activities while remaining resilient to detection. By leveraging passive DNS analysis, experts have made significant strides in identifying threats before they wreak havoc, […]

The post Researchers Uncovered Hackers Infrastructre Using Passive DNS Technique appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

市场研究公司称苹果将在2026年推出采用OLED屏幕的新款iPad Mini

A Hack The Box Freedom of Information request has shown a significant drop in cyber-attacks reported to the Financial Conduct Authority (FCA) in 2024

OpenAI 的 Sora 上线，官网挤爆；雷军：新车 YU7 提前上线，解除伪装；苹果：对 AGI 不感兴趣｜极客早知道

OpenAI 正式发布 Sora，一文看懂它的文生视频功能到底强在哪？

«Сотрудник поддержки уже готов решить вашу проблему, только дайте ему необходимый доступ».

Although AI can enhance threat detection and response capabilities, it also introduces sophisticated attack vectors that require a rethink of traditional security models.

The post Defending Against AI-Powered Attacks in a “Spy vs. Spy” World appeared first on Security Boulevard.

A vulnerability was found in SolarWinds Web Help Desk up to 12.8.3 HF3 on Linux. It has been classified as problematic. This affects an unknown part of the file development/test. The manipulation leads to path traversal. This vulnerability is uniquely identified as CVE-2024-45709. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

内含14家SRC祝福视频！

2024国城杯 writeup by Mini-Venom

OpenAI推出视频生成模型Sora 但存在诸多限制例如必须上传真人照片或视频

网安出海中东第一站｜2025·迪拜·GISEC，盛大启航