Aggregator

2024年国家网安周主论坛现场，人工智能技术赋能网络安全应用测试结果重磅发布，安恒信息入选恶意软件检测、网络安全告警日志降噪两大场景，在恶意软件检测场景中安恒信息位列榜首！

2024年国家网安周主论坛现场，人工智能技术赋能网络安全应用测试结果重磅发布，安恒信息入选恶意软件检测、网络安全告警日志降噪两大场景，在恶意软件检测场景中安恒信息位列榜首！

2024年国家网安周主论坛现场，人工智能技术赋能网络安全应用测试结果重磅发布，安恒信息入选恶意软件检测、网络安全告警日志降噪两大场景，在恶意软件检测场景中安恒信息位列榜首！

9月9日，由全国网络安全标准化技术委员会制定的《人工智能安全治理框架》1.0版正式对外公开发布。

新闻速览 •2024年国家网络安全宣传周盛大开幕 •ISC2报告：网络安全领域的性别歧视仍然较严重 •快手核心 […]

A previously undocumented threat actor with likely ties to Chinese-speaking groups has predominantly singled out drone manufacturers in Taiwan as part of a cyber attack campaign that commenced in 2024. Trend Micro is tracking the adversary under the moniker TIDRONE, stating the activity is espionage-driven given the focus on military-related industry chains. The exact initial access vector used

Progress Software released an emergency to address a maximum severity vulnerability in its LoadMaster products. Progress Software released an emergency fix for a critical vulnerability, tracked as CVE-2024-7591, that affects its LoadMaster and LoadMaster Multi-Tenant (MT) Hypervisor products. The vulnerability is an improper input validation issue, that could allow an unauthenticated, remote attacker to access LoadMaster’s […]

9月9日至15日，以“网络安全为人民，网络安全靠人民”为主题的2024年国家网络安全宣传周将在全国范围内统一开展。 自2014年以来，我国连续举办国家网络安全宣传周，以通俗易懂的方式宣传网络安全理念、普及网络安全知识、推广网络安全技能，让“网络安全为人民，网络安全靠人民”的理念深入人心。 没有网络安全就没有国家安全。近年来，在习近平总书记关于网络强国的重要思想指引下，我国网络安全政策法规体系不断健全，网络安全工作体制机制日益完善，网络安全保障体系和能力建设加快推进，为维护国家在网络空间的主权、安全和发展利益提供了坚实保障。 党的二十届三中全会审议通过的《中共中央关于进一步全面深化改革、推进中国式现代化的决定》提出“加强网络安全体制建设，建立人工智能安全监管制度”等一系列新任务新要求，为新时代网络安全工作指明前进方向。 网络无边，安全有界。在全社会的共同努力下，网络安全“防火墙”愈加牢固、“保护网”越织越密，亿万民众在网络空间享有更多获得感、幸福感、安全感。 来源：新华社

美国国务院电话通讯录是一本由美国政府出版的重要工具书，该通讯录中包含组织目录、外交职务主要官员、美国国家办事

提出假设假设是“在有限证据的基础上作为进一步调查的出发点而做出的假设或提出的解释”。使用假设不仅可以突出调查

A vulnerability classified as problematic was found in Uniong WebITR up to 2_1_0_27. Affected by this vulnerability is an unknown functionality of the component URL Handler. The manipulation leads to open redirect. This vulnerability is known as CVE-2024-8586. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in WPMU Forminator Plugin up to 1.34.0. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-45625. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Learning Digital Orca HCM up to 10.x. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper access controls. The identification of this vulnerability is CVE-2024-8584. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Learning Digital Orca HCM up to 10.x. It has been declared as critical. This vulnerability affects unknown code of the component File Download Handler. The manipulation leads to path traversal. This vulnerability was named CVE-2024-8585. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

8月│月报 谛听工控安全月报上线了，工信部的最新政策，8月发生的多起工控安全事件，谛听团队收集的最新攻击教据......更多安全资讯，请关注“谛听ditecting",每月更新!

Cybercriminals are beginning to take advantage of the new malicious options that large language models (LLMs) offer them. LLMs make it possible to upload documents with hidden instructions that are executed by connected system components. This is a boon to cybercriminals and, thus, a substantive risk to the enterprises using them. LLMs can be tricked in many ways. Cybercriminals can input malicious prompts that trick the LLM into overriding its guardrails (i.e., generating harmful outputs), … More →

The post AI cybersecurity needs to be as multi-layered as the system it’s protecting appeared first on Help Net Security.

Name: Block Harbor VicOne Automotive CTF - Season 2 (an BlockHarbor - CTF event.)
Date: Aug. 24, 2024, 2 p.m. — 09 Sept. 2024, 02:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.blockharbor.io/
Rating weight: 0
Event organizers: bhctf

Name: WMCTF2024 (an WMCTF event.)
Date: Sept. 7, 2024, 1 a.m. — 09 Sept. 2024, 01:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://wmctf.wm-team.cn/
Rating weight: 53.88
Event organizers: W&M

Name: COMPFEST CTF 2024 (an COMPFEST CTF event.)
Date: Sept. 8, 2024, midnight — 09 Sept. 2024, 00:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf-mirror.compfest.id/
Rating weight: 43.00
Event organizers: CSUI

PgPool Global Development Groupが提供するPgpool-IIには、情報漏えいの脆弱性が存在します。