Aggregator

劫持有风险。。。

惠普以 1.16 亿美元收购了 AI 硬件创业公司 Humane 的大部分资产，Humane 立即停售了 499 美元的产品 AI Pins。它通知其客户，AI Pins 将在 10 天内停止工作。AI Pins 将能正常工作到 2 月 28 日 12PM PT，之后客户将无法访问其设备的所有功能，包括但不限于呼叫、消息、AI 查询和云端访问。Humane 建议客户在 2 月 28 日前下载存储的任何数据，它计划在关闭服务器的同时永久删除所有客户数据。

赛博赌狗如何挑战超长公式，破解公式中52位长度的密码（flag）。

A vulnerability has been found in SAP Internet Graphics Service and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument PARAMS leads to basic cross site scripting. This vulnerability is known as CVE-2007-3613. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Lumu announced Playback feature for Managed Service Providers (MSPs). Playback collects, analyzes and stores network metadata including network logs, and turns them into actionable threat intelligence. This enterprise-grade technology is widely adopted by the financial sector, healthcare, government, and education, and is now being made available to the MSP market and its SMB clients. Playback enables MSPs to efficiently meet compliance requirements, and strengthen threat detection while significantly reducing operational costs. Via a self-service experience, … More →

The post Lumu Playback strengthens threat detection appeared first on Help Net Security.

A vulnerability has been found in Adobe Substance3D Modeler up to 1.14.1 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2024-53005. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Adobe Experience Manager up to 6.5.21. This affects an unknown part. The manipulation leads to improper input validation. This vulnerability is uniquely identified as CVE-2024-43755. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Adobe InDesign Desktop up to 18.5.4/19.5. This vulnerability affects unknown code. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2024-49546. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Adobe InDesign Desktop up to 18.5.4/19.5. This issue affects some unknown processing. The manipulation leads to out-of-bounds read. The identification of this vulnerability is CVE-2024-49547. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Adobe InDesign Desktop up to 18.5.4/19.5. Affected is an unknown function. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2024-49548. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Adobe InDesign Desktop up to 18.5.4/19.5 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to out-of-bounds read. This vulnerability is known as CVE-2024-49549. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe InDesign Desktop up to 18.5.4/19.5 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2024-53951. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe Media Encoder up to 24.6.3/25.0. It has been classified as critical. This affects an unknown part. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2024-49551. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Раскрыта новая волна цифровой слежки за бизнесом.

为遵守欧洲隐私法规，微软将为欧洲经济区用户移除多项 Windows 文件管理器功能。微软向 Windows Insider 测试者释出了一个预览版本 Windows 11 24H2 build 26120.3281。其中一个变化是移除 Location History API，该 API 允许 Windows 语音助手 Cortana 在位置启用的情况下访问 24 小时位置历史。Cortana 已被弃用，Windows 的助手现在都变成了 Copilot。另一个变化适用于欧洲经济区 Entra ID 账号。为满足欧盟隐私规定，微软从 Windows 文件管理器中移除了跟踪用户活动的功能，包括 Recent（最近访问的文件）、Favorites（收藏夹）、Details Pane（详细信息窗格）和 Recommended（推荐内容）。欧盟用户的文件管理器将会更干净整洁，可能性能也会有所提升。

A vulnerability has been found in Exim 4.98 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to Privilege Escalation. This vulnerability was named CVE-2025-26794. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

Menlo Security announced the acquisition of Votiro, a data and file security platform that specializes in Content Disarm & Reconstruction (CDR) and data loss prevention. Together, Menlo Security and Votiro will enable enterprises to implement data security best practices without slowing employee and business productivity. In modern enterprise, data resides in numerous locations including software as a service (SaaS) applications and multiple cloud storage solutions, while being spread across multiple Cloud Service Providers (CSPs) and … More →

The post Menlo Security acquires Votiro to boost data security for enterprises appeared first on Help Net Security.

A vulnerability, which was classified as critical, was found in Citrix NetScaler Console and NetScaler Agent up to 38.52/56.17. This affects an unknown part. The manipulation leads to improper privilege management. This vulnerability is uniquely identified as CVE-2024-12284. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Axiomatic Bento4 1.6.0-641. Affected by this issue is the function AP4_Stz2Atom::AP4_Stz2Atom of the file Ap4Stz2Atom.cpp. The manipulation leads to buffer overflow. This vulnerability is handled as CVE-2025-25943. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Lexmark Products up to 2020-05-25. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2020-13481. It is possible to launch the attack remotely. There is no exploit available.