Aggregator

ByteHouse云数仓产品白皮书正式发布

只是概念验证，并非活跃威胁

速修复

ISC Stormcast For Tuesday, December 3rd, 2024 https://isc.sans.edu/podcastdetail/9238, (Tue, Dec 3rd)

Zabbix认证后SQL注入漏洞(CVE-2024-42327)

Cybersecurity compliance may feel overwhelming, but a few clear steps can make it manageable and ensure your business stays on the right side of regulatory requirements

Poland probes Pegasus spyware abuse under the PiS government; ex-security chief Piotr Pogonowski arrested to testify before parliament. Poland’s government has been investigating the alleged misuse of Pegasus spyware by the previous administration and arrested the former head of Poland’s internal security service Piotr Pogonowski. News of the arrest of Piotr Pogonowski was first reported by the […]

Welcome to ANY.RUN’s monthly updates, where we give you all the details on our latest features and enhancements.  November has been a month of innovation at ANY.RUN, with major upgrades. We’ve launched Smart Content Analysis as part of Automated Interactivity, updated the home screen of TI Lookup featuring an interactive MITRE ATT&CK matrix connected with […]

The post Release Notes: MITRE ATT&CK Matrix with Samples, Upgraded Automated Interactivity, Expanded Threat Coverage, and More appeared first on ANY.RUN's Cybersecurity Blog.

快来开启《CTF训练营-Web篇》的学习之旅吧！

涉案金额高达610亿韩元

看雪论坛作者ID：是气球呀

A vulnerability classified as problematic was found in Oracle Database Server up to 8.1.5. Affected by this vulnerability is an unknown functionality of the file nmiconf.tcl of the component Intelligent Agent. The manipulation of the argument ORACLE_HOME as part of Environment Variable leads to Local Privilege Escalation. This vulnerability is known as CVE-1999-0888. It is possible to launch the attack on the local host. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

为最大限度切断境内不法分子与境外诈骗集团勾结的犯罪链条，近日，最高人民检察院、公安部决定继续联合挂牌督办第四批8起特大跨境电信网络诈骗犯罪案件，依法从重从快严厉打击跨境电信网络诈骗及境内关联违法犯罪活动。

欧洲理事会2日通过两项关于网络安全的法案，旨在进一步加强欧盟抵御网络威胁的能力和网络团结合作。这两项法律分别为《网络团结法案》和《网络安全法案》修正案，属于欧盟网络安全立法“一揽子计划”的一部分。

近日，《全球数据跨境流动合作倡议》全文对外发布，就各方普遍关切的数据跨境流动治理问题提出了建设性解决思路，明确中国促进全球数据跨境流动合作的立场主张。

意见反馈截止时间为2025年1月31日24:00前。

大数据时代，信息在网络空间发布、传播渠道愈发丰富多样。值得警惕的是，一些敏感信息在未经脱密处理、未经风险隐患评估的情况下，通过互联网公开传播，成为境外间谍情报机关获取开源情报的重要来源，对我国家安全构成威胁。

2024年11月20日，2024中国5G+工业互联网大会“5G+AI赋能新型工业化”分论坛在武汉市成功举办。会上，中国移动重磅发布了工业互联网行业首份聚焦人工智能安全的《AI+工业互联网安全解决方案白皮书》。

近日，全球领先的IT市场研究和咨询公司IDC发布《IDC Technology Assessment：中国安全大模型实测之安全运营，2024》（Doc#CHC52725024，2024年11月）报告。

The North Korea-aligned threat actor known as Kimsuky has been linked to a series of phishing attacks that involve sending email messages that originate from Russian sender addresses to ultimately conduct credential theft. "Phishing emails were sent mainly through email services in Japan and Korea until early September," South Korean cybersecurity company Genians said. "Then, from mid-September,