Cybersecurity researchers have discovered an advanced version of the Qilin ransomware sporting increased sophistication and tactics to evade detection.
The new variant is being tracked by cybersecurity firm Halcyon under the moniker Qilin.B.
"Notably, Qilin.B now supports AES-256-CTR encryption for systems with AESNI capabilities, while still retaining Chacha20 for systems that lack this support
A vulnerability was found in PySAML2. It has been rated as critical. Affected by this issue is some unknown functionality of the component SAML XML Response Handler. The manipulation leads to xml external entity reference.
This vulnerability is handled as CVE-2016-10127. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
Google 开源其 AI 水印系统 SynthID,源代码采用 Apache License 2.0 托管在 Github 上。Google 是在今年 5 月宣布了 SynthID,为 AI 生成内容嵌入人眼无法识别但能被算法识别的水印。Google 称,生成式人工智能 (GenAI) 可以以前所未有的规模生成更多种类的高度多样化内容。虽然大多数此类用途都是出于合法目的,但我们担心这可能会导致虚假信息和归因错误问题。水印旨在减轻这些潜在影响。SynthID 是 Google DeepMind 的一项技术,可直接将数字水印嵌入到 AI 生成的图片、音频、文本或视频中,从而为 AI 生成的内容添加水印并识别这些内容。SynthID 文本已开源,让开发者可以为文本生成添加水印。
Cisco patched vulnerabilities in ASA, FMC, and FTD products, including one actively exploited in a large-scale brute-force attack campaign. Cisco addressed multiple vulnerabilities in Adaptive Security Appliance (ASA), Secure Firewall Management Center (FMC), and Firepower Threat Defense (FTD) products, including an actively exploited flaw tracked as CVE-2024-20481. The vulnerability CVE-2024-20481 (CVSS score of 5.8) is […]